This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/AC3A00D268F611EFBDC1C345C4F9AE02.roa
File:                     AC3A00D268F611EFBDC1C345C4F9AE02.roa (raw, json)
Hash identifier:          WhQNM40PbhQEu35UK4su17rbvUJWY/mG7qX+ZTgU+w4=
Subject key identifier:   B5:AA:30:DB:B6:4E:83:20:5A:A0:15:6F:73:4E:82:00:A9:0D:84:FA
Certificate issuer:       /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial:       03E3
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/AC3A00D268F611EFBDC1C345C4F9AE02.roa
Signing time:             Tue 02 Dec 2025 23:59:18 +0000
ROA not before:           Tue 02 Dec 2025 23:59:18 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     55325
IP address blocks:        115.31.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 995 (0x3e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
        Validity
            Not Before: Dec  2 23:59:18 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692f7d55-a60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a1:36:eb:89:89:41:ea:05:4c:ae:dd:57:7f:
                    6c:08:e3:42:f2:e1:25:81:58:9f:33:a4:c2:43:90:
                    98:7c:94:df:f9:0a:d2:52:fe:3b:b5:76:e0:25:d0:
                    80:8c:98:9c:91:de:86:76:49:d5:2d:8d:cd:53:3c:
                    36:dd:01:2f:7d:21:2f:3e:fa:ac:3e:e0:2b:c6:c0:
                    a3:3b:1b:bc:03:74:d8:d2:c4:db:30:e9:8a:e0:42:
                    79:0d:93:33:a4:70:e0:59:57:7e:b9:d7:68:6e:f5:
                    58:66:f8:f4:4d:42:d6:49:e0:a1:73:e1:2b:ef:ea:
                    50:02:01:f9:f3:4d:60:36:7a:4a:fa:06:59:5d:17:
                    d8:38:3a:b9:4d:58:94:82:3c:9f:29:79:76:63:cf:
                    f7:76:43:89:d0:0a:e4:1a:5d:ec:8d:30:ef:70:9f:
                    93:dd:47:bc:ca:62:7f:e8:83:68:da:40:a6:af:74:
                    00:60:2a:35:83:73:f0:39:69:de:a4:40:6e:c0:54:
                    75:f0:2e:19:8b:04:28:1d:1c:75:71:60:5b:4c:c6:
                    b3:c6:b0:15:e8:50:3d:fb:f3:59:82:f4:80:0f:23:
                    20:be:c5:a5:a1:d7:dd:af:16:0c:8a:8f:20:6d:a9:
                    46:ce:6a:c9:35:04:94:29:a5:db:5a:20:02:c1:30:
                    f8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AA:30:DB:B6:4E:83:20:5A:A0:15:6F:73:4E:82:00:A9:0D:84:FA
            X509v3 Authority Key Identifier:
                keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/AC3A00D268F611EFBDC1C345C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.31.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:29:9d:8c:3e:e4:8a:01:a1:ba:73:27:e3:ac:c1:6f:5b:45:
         dc:e7:ae:9f:68:c5:ca:44:bd:fd:e2:e4:a2:bc:07:cf:11:9e:
         f6:30:f9:20:b4:71:d0:bf:67:be:63:a4:84:9b:04:78:32:81:
         06:95:d5:7d:17:17:78:be:84:8d:80:d6:ff:49:83:a5:6d:8c:
         5e:45:26:82:41:da:13:97:82:c3:7c:fb:3a:d9:f5:f3:0a:4c:
         0b:89:cb:4b:85:9c:32:f9:d9:58:96:df:4b:95:7f:cc:3c:71:
         58:99:c3:c5:db:f8:79:e2:a2:62:8d:7e:b9:64:db:6e:18:73:
         ca:b8:18:d1:66:b1:de:4b:80:42:3c:6f:1c:de:51:1b:14:d1:
         3f:48:69:18:44:33:f3:80:46:15:72:45:3f:b7:3c:7a:ba:7a:
         dd:1c:59:e0:d7:b0:c7:db:2d:f8:15:e5:2c:88:84:b0:5a:d3:
         3a:a3:49:2e:21:7f:1b:5c:96:85:b1:e2:87:3b:17:70:3c:e9:
         0c:70:6a:04:29:1a:e2:7b:9f:1d:03:eb:cc:b4:8b:85:61:b5:
         88:4d:6e:09:5b:a0:5a:ce:3d:0a:06:6c:12:33:8e:0c:1a:29:
         b8:64:c4:0c:66:5c:e2:d5:98:61:0c:da:62:a7:3a:fe:cf:b1:
         c8:d9:2e:95
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG
NUMyMDE1NzAwHhcNMjUxMjAyMjM1OTE4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTJmN2Q1NS1hNjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA36E264mJQeoFTK7dV39sCONC8uElgVifM6TCQ5CYfJTf+QrSUv47tXbgJdCA
jJickd6GdknVLY3NUzw23QEvfSEvPvqsPuArxsCjOxu8A3TY0sTbMOmK4EJ5DZMz
pHDgWVd+uddobvVYZvj0TULWSeChc+Er7+pQAgH5801gNnpK+gZZXRfYODq5TViU
gjyfKXl2Y8/3dkOJ0ArkGl3sjTDvcJ+T3Ue8ymJ/6INo2kCmr3QAYCo1g3PwOWne
pEBuwFR18C4ZiwQoHRx1cWBbTMazxrAV6FA9+/NZgvSADyMgvsWlodfdrxYMio8g
balGzmrJNQSUKaXbWiACwTD49wIDAQABo4IClTCCApEwHQYDVR0OBBYEFLWqMNu2
ToMgWqAVb3NOggCpDYT6MB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC
OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvQUMzQTAwRDI2
OEY2MTFFRkJEQzFDMzQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABzH4IwDQYJKoZIhvcNAQELBQADggEBACApnYw+5IoBobpz
J+OswW9bRdznrp9oxcpEvf3i5KK8B88RnvYw+SC0cdC/Z75jpISbBHgygQaV1X0X
F3i+hI2A1v9Jg6VtjF5FJoJB2hOXgsN8+zrZ9fMKTAuJy0uFnDL52ViW30uVf8w8
cViZw8Xb+HniomKNfrlk224Yc8q4GNFmsd5LgEI8bxzeURsU0T9IaRhEM/OARhVy
RT+3PHq6et0cWeDXsMfbLfgV5SyIhLBa0zqjSS4hfxtcloWx4oc7F3A86QxwagQp
GuJ7nx0D68y0i4VhtYhNbglboFrOPQoGbBIzjgwaKbhkxAxmXOLVmGEM2mKnOv7P
scjZLpU=
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:15:27 2025 by rpki-client