This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/53647CC8284511EE8A9EF045C4F9AE02.roa
File:                     53647CC8284511EE8A9EF045C4F9AE02.roa (raw, json)
Hash identifier:          J2C44o3bulGEWCNj5FeHw89zdl6vfT7xLoQDvxzcXms=
Subject key identifier:   DD:11:BE:44:04:FD:04:AF:E7:0C:44:FA:91:DB:FB:D2:0C:EC:B9:B8
Certificate issuer:       /CN=A9136DD6/serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5
Certificate serial:       04FE
Authority key identifier: F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/53647CC8284511EE8A9EF045C4F9AE02.roa
Signing time:             Wed 26 Nov 2025 17:06:34 +0000
ROA not before:           Wed 26 Nov 2025 17:06:34 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     17547
IP address blocks:        178.160.128.0/18 maxlen: 19
                          178.160.128.0/24 maxlen: 24
                          178.160.129.0/24 maxlen: 24
                          178.160.130.0/24 maxlen: 24
                          178.160.131.0/24 maxlen: 24
                          178.160.132.0/24 maxlen: 24
                          178.160.133.0/24 maxlen: 24
                          178.160.135.0/24 maxlen: 24
                          178.160.137.0/24 maxlen: 24
                          178.160.138.0/24 maxlen: 24
                          178.160.139.0/24 maxlen: 24
                          178.160.140.0/24 maxlen: 24
                          178.160.141.0/24 maxlen: 24
                          178.160.142.0/24 maxlen: 24
                          178.160.143.0/24 maxlen: 24
                          178.160.144.0/24 maxlen: 24
                          178.160.145.0/24 maxlen: 24
                          178.160.146.0/24 maxlen: 24
                          178.160.147.0/24 maxlen: 24
                          178.160.148.0/24 maxlen: 24
                          178.160.149.0/24 maxlen: 24
                          178.160.150.0/24 maxlen: 24
                          178.160.151.0/24 maxlen: 24
                          178.160.152.0/24 maxlen: 24
                          178.160.153.0/24 maxlen: 24
                          178.160.154.0/24 maxlen: 24
                          178.160.155.0/24 maxlen: 24
                          178.160.156.0/24 maxlen: 24
                          178.160.157.0/24 maxlen: 24
                          178.160.158.0/24 maxlen: 24
                          178.160.159.0/24 maxlen: 24
                          178.160.160.0/24 maxlen: 24
                          178.160.161.0/24 maxlen: 24
                          178.160.162.0/24 maxlen: 24
                          178.160.163.0/24 maxlen: 24
                          178.160.164.0/24 maxlen: 24
                          178.160.165.0/24 maxlen: 24
                          178.160.166.0/24 maxlen: 24
                          178.160.167.0/24 maxlen: 24
                          178.160.168.0/24 maxlen: 24
                          178.160.169.0/24 maxlen: 24
                          178.160.170.0/24 maxlen: 24
                          178.160.171.0/24 maxlen: 24
                          178.160.172.0/24 maxlen: 24
                          178.160.173.0/24 maxlen: 24
                          178.160.174.0/24 maxlen: 24
                          178.160.175.0/24 maxlen: 24
                          178.160.176.0/24 maxlen: 24
                          178.160.177.0/24 maxlen: 24
                          178.160.178.0/24 maxlen: 24
                          178.160.179.0/24 maxlen: 24
                          178.160.180.0/24 maxlen: 24
                          178.160.181.0/24 maxlen: 24
                          178.160.182.0/24 maxlen: 24
                          178.160.183.0/24 maxlen: 24
                          178.160.184.0/24 maxlen: 24
                          178.160.185.0/24 maxlen: 24
                          178.160.186.0/24 maxlen: 24
                          178.160.187.0/24 maxlen: 24
                          178.160.188.0/24 maxlen: 24
                          178.160.189.0/24 maxlen: 24
                          178.160.190.0/24 maxlen: 24
                          178.160.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl
                          rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1278 (0x4fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136DD6, serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5
        Validity
            Not Before: Nov 26 17:06:34 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6927339a-23d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2d:e4:3b:65:6e:e3:cc:b6:22:0a:ed:66:01:
                    ae:4b:a5:a9:91:54:da:cf:24:72:dd:39:73:a3:cc:
                    3e:4b:58:63:98:7a:4e:4b:98:9e:ac:5f:7a:54:f6:
                    7f:f5:3b:d6:f2:e9:75:52:9e:aa:6d:54:f0:9e:34:
                    d6:95:22:63:68:42:39:79:c9:3b:9e:41:e5:44:39:
                    d2:f1:cc:db:7a:d1:ad:6b:94:ae:3c:ba:1b:04:d8:
                    0a:d1:42:8c:40:6e:e0:f1:81:52:f5:a5:9e:ed:2d:
                    d2:1e:3e:ba:fe:e3:5a:9e:a8:60:71:92:38:f3:0d:
                    1c:fc:14:ad:d8:85:da:be:45:ec:04:95:46:05:21:
                    72:ed:2f:a7:27:8f:d1:4c:e1:69:c5:93:f0:46:85:
                    1b:b6:1f:af:9a:23:2b:fd:f3:2b:9c:23:8a:78:4d:
                    b2:49:fd:e8:69:8a:a9:50:22:f3:c9:bd:6f:53:16:
                    2a:fe:3e:3a:d0:85:c4:91:23:f8:60:dd:2e:a8:84:
                    6b:e1:ef:4d:54:f0:6c:14:a0:e3:1b:96:2c:af:e2:
                    25:fd:89:4c:8a:87:26:e6:44:10:31:7d:ea:85:50:
                    f5:92:f3:15:c3:48:6b:e0:38:4d:f5:3d:eb:63:b4:
                    47:ea:9d:04:52:ee:47:83:cf:e7:2f:ef:45:5f:fd:
                    28:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:11:BE:44:04:FD:04:AF:E7:0C:44:FA:91:DB:FB:D2:0C:EC:B9:B8
            X509v3 Authority Key Identifier:
                keyid:F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/53647CC8284511EE8A9EF045C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.160.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bd:b2:56:54:89:14:4e:1e:f7:03:21:47:13:23:85:23:c4:53:
         ae:b6:53:00:d9:4a:f2:cb:df:5d:a9:9b:ad:a2:5a:b6:b3:0b:
         25:8e:58:a9:ee:36:2e:0c:f5:f8:2c:c0:f7:9a:dc:c2:57:db:
         8f:86:91:a5:ad:99:7a:13:ae:e4:c3:9b:42:69:e2:84:15:05:
         3f:78:b2:a9:30:7a:7d:95:4e:17:e3:32:4e:15:a7:87:b2:f3:
         46:24:30:5b:45:d0:81:fb:67:e8:49:c7:cb:96:4c:c2:aa:08:
         67:ab:fe:2c:09:d6:9f:aa:ae:91:1c:46:54:d2:6a:0b:de:a4:
         c5:3a:d9:56:70:3d:be:84:6a:7a:18:75:99:4a:48:1e:d4:62:
         f9:7c:62:b8:a6:52:86:69:92:94:28:3f:6f:1f:6c:1e:29:d6:
         81:ad:7f:26:8c:a1:07:1e:2c:e5:70:fe:72:b2:58:8e:e2:3a:
         06:77:af:25:cf:67:df:9d:94:b3:8f:19:88:ec:d5:7d:57:a4:
         4f:32:2a:c3:0d:3c:86:aa:fe:df:09:68:9e:85:c3:04:8d:08:
         7b:8d:0c:cb:49:7f:5e:bb:b9:73:58:53:b0:5c:ce:90:5b:72:
         95:27:e0:d9:72:69:91:29:c8:b4:5a:4f:2a:51:59:40:4b:ab:
         a9:b0:85:c2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZERDYxMTAvBgNVBAUTKEY3RjlEOEE0MzU1RDY3M0I5RDRFN0YxNTVEM0E3OEU1
RTY2MEZFQTUwHhcNMjUxMTI2MTcwNjM0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI3MzM5YS0yM2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6C3kO2Vu48y2IgrtZgGuS6WpkVTazyRy3Tlzo8w+S1hjmHpOS5ierF96VPZ/
9TvW8ul1Up6qbVTwnjTWlSJjaEI5eck7nkHlRDnS8czbetGta5SuPLobBNgK0UKM
QG7g8YFS9aWe7S3SHj66/uNanqhgcZI48w0c/BSt2IXavkXsBJVGBSFy7S+nJ4/R
TOFpxZPwRoUbth+vmiMr/fMrnCOKeE2ySf3oaYqpUCLzyb1vUxYq/j460IXEkSP4
YN0uqIRr4e9NVPBsFKDjG5Ysr+Il/YlMiocm5kQQMX3qhVD1kvMVw0hr4DhN9T3r
Y7RH6p0EUu5Hg8/nL+9FX/0o4QIDAQABo4IClTCCApEwHQYDVR0OBBYEFN0RvkQE
/QSv5wxE+pHb+9IM7Lm4MB8GA1UdIwQYMBaAFPf52KQ1XWc7nU5/FV06eOXmYP6l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMTYyRTAzQTNE
M0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6dWRUbjhWWFRwNDVlWmdf
cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzlfbllwRFZkWnp1ZFRuOFZYVHA0NWVaZ19xVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzZERDYvRDE2MkUwM0EzRDNBMTFFQ0JFRjc3Qzc2QzRGOUFFMDIvNTM2NDdDQzgy
ODQ1MTFFRThBOUVGMDQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAayoIAwDQYJKoZIhvcNAQELBQADggEBAL2yVlSJFE4e9wMh
RxMjhSPEU662UwDZSvLL312pm62iWrazCyWOWKnuNi4M9fgswPea3MJX24+GkaWt
mXoTruTDm0Jp4oQVBT94sqkwen2VThfjMk4Vp4ey80YkMFtF0IH7Z+hJx8uWTMKq
CGer/iwJ1p+qrpEcRlTSagvepMU62VZwPb6EanoYdZlKSB7UYvl8YrimUoZpkpQo
P28fbB4p1oGtfyaMoQceLOVw/nKyWI7iOgZ3ryXPZ9+dlLOPGYjs1X1XpE8yKsMN
PIaq/t8JaJ6FwwSNCHuNDMtJf167uXNYU7BczpBbcpUn4NlyaZEpyLRaTypRWUBL
q6mwhcI=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:25:42 2025 by rpki-client