This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/19D89DB656F311F083F53B5DC4F9AE02.roa
File:                     19D89DB656F311F083F53B5DC4F9AE02.roa (raw, json)
Hash identifier:          hMuLJheRFMre3o95xQZ4egylCXlDJ3pGeYvC5sIkz/s=
Subject key identifier:   EB:25:5A:D2:FC:2D:F2:88:35:84:F0:09:6C:19:AC:7E:69:C3:09:86
Certificate issuer:       /CN=A912442A/serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
Certificate serial:       58
Authority key identifier: 35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/19D89DB656F311F083F53B5DC4F9AE02.roa
Signing time:             Tue 02 Dec 2025 23:58:51 +0000
ROA not before:           Tue 02 Dec 2025 23:58:51 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     38794
IP address blocks:        65.181.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
        Validity
            Not Before: Dec  2 23:58:51 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692f7d3b-2356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:18:ca:46:df:78:36:45:8c:69:6c:a0:ae:
                    25:05:78:eb:65:aa:75:38:2f:ef:ff:75:9a:d7:d2:
                    a2:f3:20:b2:95:28:85:08:a9:46:b3:07:5d:54:b7:
                    aa:cc:8b:81:53:5f:b5:27:02:eb:dc:00:85:df:be:
                    7c:b4:68:4f:4c:8d:22:b1:4e:1f:a1:56:5a:9e:ef:
                    bc:9d:a9:0d:e5:60:e2:a0:11:c6:61:95:6f:d2:8c:
                    44:0b:b6:d4:7b:de:95:4a:27:9c:70:a7:bc:fb:54:
                    a4:15:08:f7:ba:3d:be:9c:24:0b:6c:ed:cf:37:00:
                    1e:df:66:d8:0d:64:b4:45:7a:31:23:9f:4d:95:bb:
                    0a:59:d8:a7:59:eb:f7:5b:29:61:18:8d:22:da:01:
                    65:98:0b:c1:3e:06:7c:d0:02:ce:c8:a2:62:fe:47:
                    5f:f4:2f:2b:50:91:c0:8a:1d:54:db:20:52:e7:c9:
                    af:93:ba:37:a1:35:09:05:2b:1d:13:98:a2:3f:6a:
                    fa:9e:66:67:8c:17:ed:e1:de:8c:ed:9b:7a:69:3d:
                    30:c5:95:a9:39:c2:22:ee:5a:49:bd:d7:a6:f3:da:
                    90:b3:57:5b:c1:eb:52:d5:fe:d3:3a:88:ce:7f:0e:
                    90:1c:e3:3d:e4:61:8c:2e:e3:57:a7:7e:cf:07:f5:
                    f3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:25:5A:D2:FC:2D:F2:88:35:84:F0:09:6C:19:AC:7E:69:C3:09:86
            X509v3 Authority Key Identifier:
                keyid:35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/19D89DB656F311F083F53B5DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.181.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         f1:88:cd:24:f8:7a:55:17:db:9b:5f:29:97:50:83:56:4a:41:
         8f:24:c3:c9:d5:25:d8:66:fc:ec:40:2a:0c:bf:36:81:0d:7c:
         98:84:7c:af:66:af:de:19:89:61:66:a3:89:11:cb:28:52:ed:
         77:ec:d4:14:22:c5:74:24:34:06:01:da:56:a8:f6:9b:37:61:
         5d:f4:87:da:27:4c:24:83:8c:f1:0c:22:fe:e5:9c:0d:c1:bb:
         0a:4d:e2:87:24:26:fd:1a:5f:1a:53:c4:4a:e5:50:02:00:3a:
         c8:71:12:49:d1:0f:96:53:27:85:32:2c:a9:5a:b0:1d:c3:02:
         27:43:6f:cf:ff:52:83:e5:5d:6f:46:90:54:97:57:7a:58:3e:
         2b:19:82:b6:9a:aa:06:db:a9:99:41:1f:d8:b1:1b:28:11:7b:
         ab:44:2f:f6:5e:57:81:0d:d4:02:2e:ed:58:ef:b0:15:c2:b7:
         4a:fc:6d:c3:69:84:5e:a0:01:e7:8d:c1:76:51:9e:4a:6f:00:
         16:0e:e7:0f:6a:67:51:85:ff:4a:2d:12:68:fd:02:f2:14:80:
         15:32:83:61:79:bc:c9:aa:c3:fe:39:88:a6:89:49:85:76:c1:
         cd:81:fd:5f:c5:3e:fa:17:66:15:71:8e:28:e4:79:68:15:5d:
         5c:83:7a:6b
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NDQyQTExMC8GA1UEBRMoMzU0RTMyQjlERTBFNTY5QTE5NTFBOTdCOTMyMDE5RjY4
OEEzNTBBQzAeFw0yNTEyMDIyMzU4NTFaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5MmY3ZDNiLTIzNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGIBjKRt94NkWMaWygriUFeOtlqnU4L+//dZrX0qLzILKVKIUIqUazB11Ut6rM
i4FTX7UnAuvcAIXfvny0aE9MjSKxTh+hVlqe77ydqQ3lYOKgEcZhlW/SjEQLttR7
3pVKJ5xwp7z7VKQVCPe6Pb6cJAts7c83AB7fZtgNZLRFejEjn02VuwpZ2KdZ6/db
KWEYjSLaAWWYC8E+BnzQAs7IomL+R1/0LytQkcCKHVTbIFLnya+TujehNQkFKx0T
mKI/avqeZmeMF+3h3oztm3ppPTDFlak5wiLuWkm916bz2pCzV1vB61LV/tM6iM5/
DpAc4z3kYYwu41enfs8H9fOrAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU6yVa0vwt
8og1hPAJbBmsfmnDCYYwHwYDVR0jBBgwFoAUNU4yud4OVpoZUal7kyAZ9oijUKww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0NDJBLzU1RUJCODU4NEUz
QjExRjA5QzEyNTU0N0M0RjlBRTAyL05VNHl1ZDRPVnBvWlVhbDdreUFaOW9palVL
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTlU0eXVkNE9WcG9aVWFsN2t5QVo5b2lqVUt3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDQyQS81NUVCQjg1ODRFM0IxMUYwOUMxMjU1NDdDNEY5QUUwMi8xOUQ4OURCNjU2
RjMxMUYwODNGNTNCNURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAkG1aDANBgkqhkiG9w0BAQsFAAOCAQEA8YjNJPh6VRfbm18p
l1CDVkpBjyTDydUl2Gb87EAqDL82gQ18mIR8r2av3hmJYWajiRHLKFLtd+zUFCLF
dCQ0BgHaVqj2mzdhXfSH2idMJIOM8Qwi/uWcDcG7Ck3ihyQm/RpfGlPESuVQAgA6
yHESSdEPllMnhTIsqVqwHcMCJ0Nvz/9Sg+Vdb0aQVJdXelg+KxmCtpqqBtupmUEf
2LEbKBF7q0Qv9l5XgQ3UAi7tWO+wFcK3Svxtw2mEXqAB543BdlGeSm8AFg7nD2pn
UYX/Si0SaP0C8hSAFTKDYXm8yarD/jmIpolJhXbBzYH9X8U++hdmFXGOKOR5aBVd
XIN6aw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:19:23 2025 by rpki-client