This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/8C3FF9AEC8A811F08595E263C4F9AE02.roa
File:                     8C3FF9AEC8A811F08595E263C4F9AE02.roa (raw, json)
Hash identifier:          JQn/WEVXli5+7O2NyEEFRxRf0sjn39WeQsrq6fJCIUk=
Subject key identifier:   FC:46:D6:11:C5:97:CF:E8:3E:28:C5:22:01:F5:32:29:2F:62:88:31
Certificate issuer:       /CN=A91372E6/serialNumber=E46EACDC214385C142034674E46C68E7BBE29525
Certificate serial:       0130
Authority key identifier: E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/8C3FF9AEC8A811F08595E263C4F9AE02.roa
Signing time:             Sun 23 Nov 2025 20:11:08 +0000
ROA not before:           Sun 23 Nov 2025 20:11:08 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     150672
IP address blocks:        203.16.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl
                          rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 02:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91372E6, serialNumber=E46EACDC214385C142034674E46C68E7BBE29525
        Validity
            Not Before: Nov 23 20:11:08 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69236a5c-b75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:3d:2d:03:b9:cd:b5:8f:f5:d4:46:b2:b4:
                    5e:82:8a:d4:f2:23:14:7a:0f:37:73:61:5c:27:6e:
                    6d:45:1a:0a:06:7d:35:a2:78:32:f4:35:8d:7c:cd:
                    b5:33:f8:16:2b:5f:e3:79:57:17:fd:39:79:fe:21:
                    a3:fe:52:1b:32:c7:54:f5:e2:e2:6b:56:7c:fe:d8:
                    d6:0d:5d:29:2f:bf:5f:df:3f:66:7a:75:e6:be:1c:
                    b6:b5:5c:16:59:72:ea:f2:2f:9b:b3:9d:d1:fd:58:
                    0d:43:9c:5e:56:7a:52:22:d9:1b:c2:d7:72:b4:52:
                    ba:2a:b5:d4:ca:0e:67:1f:99:3a:5f:b7:1e:52:d6:
                    99:8f:d5:60:59:0c:22:b7:8a:da:54:24:2b:d6:c5:
                    32:93:7d:7a:80:72:ba:0f:15:6b:9c:2c:ac:65:42:
                    83:4c:6d:9b:16:15:1d:bb:01:41:95:3a:6d:bc:c6:
                    54:89:85:2c:d0:d1:40:18:88:cf:a0:d0:51:b2:d1:
                    87:ad:94:c8:ac:7e:7a:a7:bd:59:4c:1d:37:d6:91:
                    0b:a7:f5:1e:3a:c0:fa:33:14:e0:28:20:17:b3:9b:
                    89:50:ba:11:a5:3b:bf:83:fb:5a:de:e5:37:55:79:
                    69:80:15:dc:14:14:54:37:63:b8:a9:a9:1d:47:44:
                    04:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:46:D6:11:C5:97:CF:E8:3E:28:C5:22:01:F5:32:29:2F:62:88:31
            X509v3 Authority Key Identifier:
                keyid:E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/8C3FF9AEC8A811F08595E263C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.16.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:e8:84:d0:32:76:97:35:4f:86:65:ce:97:e0:9a:a2:2e:59:
         f1:f2:83:a9:67:02:84:c9:8c:94:1a:9e:e9:11:c7:ad:38:54:
         47:a9:15:e0:fa:2a:00:00:33:b1:8f:4b:a5:7a:71:bf:18:52:
         cb:de:04:57:b9:eb:2a:45:ac:41:ce:1c:03:f3:6d:f9:11:c0:
         66:05:73:c3:04:f9:0b:8f:72:2e:ef:9e:ab:71:72:a7:7d:e1:
         af:90:61:7e:14:93:64:57:15:a1:a8:16:d7:88:a5:c0:06:8e:
         92:52:68:62:fb:08:eb:4e:9a:4e:59:15:6d:7f:0f:f9:42:41:
         df:34:2b:7b:5c:c9:f6:88:fc:8a:68:c9:d5:b6:50:b3:ce:02:
         1c:9e:68:dd:2c:4f:e3:1b:2d:35:3b:fd:38:bb:1b:8c:9c:42:
         c9:cc:2f:9b:73:ce:1f:26:60:d9:9b:8d:fe:6d:c8:a6:c5:fa:
         08:df:e6:93:10:7e:b1:65:ec:f5:e0:2c:2d:96:3b:5c:9a:19:
         51:15:d8:63:cb:32:91:a7:ac:2a:06:98:ce:db:1f:b9:37:0c:
         f9:76:36:9e:5c:30:3d:56:27:44:4e:23:57:bd:d3:e3:c2:42:
         59:0b:c1:58:d6:ff:21:48:a7:9e:04:3a:c0:70:8f:95:9b:72:
         02:9d:34:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:10:24 2025 by rpki-client