This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/408104A8C3E011F0A31AE55EC4F9AE02.roa
File:                     408104A8C3E011F0A31AE55EC4F9AE02.roa (raw, json)
Hash identifier:          mUltdiFtSdwvKJ1/UtAog12GOcFsnhuiRfLmih/4Qqs=
Subject key identifier:   75:2F:FD:29:3E:60:2B:DE:0C:E0:35:AC:D6:B4:B3:79:71:FA:A1:6F
Certificate issuer:       /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
Certificate serial:       D9
Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/408104A8C3E011F0A31AE55EC4F9AE02.roa
Signing time:             Thu 27 Nov 2025 04:21:57 +0000
ROA not before:           Thu 27 Nov 2025 04:21:57 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     141988
IP address blocks:        160.191.128.0/23 maxlen: 23
                          160.191.128.0/24 maxlen: 24
                          160.191.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl
                          rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:49:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E87E, serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
        Validity
            Not Before: Nov 27 04:21:57 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6927d1e4-586d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bd:db:d6:ba:a6:d5:37:75:5a:7c:8c:9b:4b:
                    5e:5f:be:fa:33:ea:00:1d:5e:b6:1c:eb:10:23:81:
                    7b:11:7b:ab:fd:36:c5:f6:32:f9:27:84:ca:9f:77:
                    a2:2b:a7:23:b4:c0:48:9b:07:4a:38:87:0c:42:c5:
                    87:df:56:7d:5f:7f:7e:ed:a0:4f:c4:92:e1:fb:b2:
                    71:6d:5c:7b:99:02:dc:06:62:7f:b2:f0:0c:33:37:
                    e8:a6:f5:10:c2:1e:95:af:04:18:15:36:ca:e0:54:
                    d5:ed:f7:08:eb:51:c3:f0:03:d0:e0:54:6f:8f:65:
                    1a:8b:b0:59:41:d6:da:4e:9a:84:07:bf:73:04:4c:
                    34:0c:5c:1f:26:2e:9d:e0:21:57:cc:af:b8:6a:a4:
                    67:16:4c:67:65:92:ec:77:32:cb:74:5c:3a:7f:ac:
                    92:56:97:f5:c6:84:f0:04:23:c0:5c:a6:5e:b4:e9:
                    43:fd:ca:f2:66:fd:d4:bb:5d:46:2f:42:88:f5:03:
                    ea:f0:8d:fc:a2:40:c7:de:70:ae:45:bd:fc:7a:5f:
                    74:75:4e:20:85:f4:cd:56:18:de:81:8a:71:1b:b4:
                    b2:e1:89:73:63:d6:9a:92:d8:61:f0:62:65:c9:ee:
                    2d:53:ee:87:04:43:37:b7:80:f7:f2:6a:3f:6a:05:
                    8e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2F:FD:29:3E:60:2B:DE:0C:E0:35:AC:D6:B4:B3:79:71:FA:A1:6F
            X509v3 Authority Key Identifier:
                keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/408104A8C3E011F0A31AE55EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:e4:d9:2c:63:df:14:ee:f1:2a:a7:73:56:4d:30:13:ca:1d:
         a4:78:d2:c1:b4:70:79:95:fe:e8:38:ed:21:6c:4f:14:40:49:
         17:32:48:be:e9:f5:65:9a:aa:85:8b:a3:83:c0:bb:81:84:3e:
         18:3e:e4:71:88:a1:ad:84:2d:c1:d8:b0:aa:f8:b7:63:d0:87:
         64:34:29:6b:d8:38:9c:f4:1d:1c:21:1c:69:a2:f8:31:25:4a:
         a3:b4:32:98:7f:c0:69:ad:79:64:3f:14:93:a6:a4:8e:92:fc:
         7b:ef:ed:de:37:d9:f6:eb:92:52:36:65:b7:8f:9c:00:7d:75:
         58:fb:13:db:02:a1:3b:89:88:ef:5a:c4:0c:ed:d1:72:74:c6:
         90:db:1e:36:e0:5b:75:aa:e0:38:cf:cf:d2:12:a7:3c:90:64:
         00:f7:a3:bb:61:1f:2f:91:43:d2:4e:86:b1:53:a6:53:fe:c2:
         fd:7d:94:35:b6:fd:02:f6:f6:bc:35:c7:4c:f9:fd:11:94:51:
         90:74:9a:d9:b5:50:cd:3c:33:70:6a:82:27:6a:02:55:5b:46:
         d3:13:a0:f7:8f:31:d9:c5:42:5b:78:4f:44:a2:d7:06:ef:03:
         bf:98:68:12:a7:85:11:b9:9b:ef:ec:7b:b5:95:d8:ea:d5:60:
         86:d0:67:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:14:24 2025 by rpki-client