This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/2B752026906B11EE8F088143C4F9AE02.roa
File:                     2B752026906B11EE8F088143C4F9AE02.roa (raw, json)
Hash identifier:          mAn6UrmrMo4mMJ0GWBhbN8Tfo9OHIn3ffsKZqSazrQc=
Subject key identifier:   C7:1D:E5:92:E0:9A:2C:BD:2E:FD:21:85:35:FF:FD:2F:48:84:D6:29
Certificate issuer:       /CN=A913B077/serialNumber=4BB80DD8E5B6ED2F5745585070333EF4A15D722B
Certificate serial:       0183
Authority key identifier: 4B:B8:0D:D8:E5:B6:ED:2F:57:45:58:50:70:33:3E:F4:A1:5D:72:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/2B752026906B11EE8F088143C4F9AE02.roa
Signing time:             Wed 03 Dec 2025 02:34:07 +0000
ROA not before:           Wed 03 Dec 2025 02:34:07 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     9786
IP address blocks:        210.79.186.0/23 maxlen: 24
                          2001:df3:3c40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.crl
                          rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B077, serialNumber=4BB80DD8E5B6ED2F5745585070333EF4A15D722B
        Validity
            Not Before: Dec  3 02:34:07 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=692fa19f-8916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c3:8c:bb:9e:44:91:16:ad:39:79:08:5c:23:
                    e1:93:04:a8:62:ba:8e:d0:09:5d:e9:73:6f:1d:ac:
                    87:1e:65:f0:3a:74:38:13:ed:1c:f0:81:57:1c:64:
                    b0:d7:62:8e:7b:4a:03:78:87:44:53:bb:95:bc:d7:
                    00:39:01:03:bc:8d:6a:5b:0e:aa:30:22:68:ff:05:
                    29:10:a9:f3:d7:5b:2e:0f:d6:15:cc:58:8c:ac:97:
                    77:65:27:b1:c1:07:9d:c1:19:5f:60:9e:ab:20:fa:
                    dd:54:68:55:9e:10:b1:fa:2e:7b:98:69:28:09:de:
                    0e:b7:a0:d1:8b:c1:46:1c:6e:1e:76:5f:7b:c4:5b:
                    3a:a7:37:7a:11:55:3f:b2:fe:6b:27:4c:8c:96:33:
                    f7:75:c3:23:25:42:c1:4e:1d:18:7a:98:96:bf:56:
                    b7:e7:9b:c1:b7:46:b7:a4:01:a2:aa:8a:d7:6f:aa:
                    62:30:f3:e5:eb:81:ec:a8:51:e8:af:42:6f:ee:5e:
                    32:5f:69:43:4d:23:07:72:38:64:de:f3:85:dc:4a:
                    91:04:fd:c0:c1:d6:99:84:58:24:fc:99:a2:7e:07:
                    ea:6e:36:1d:2d:01:bd:b3:77:4c:f4:33:f1:b9:f8:
                    e0:5a:b1:23:79:96:a4:c5:64:fa:d7:09:d3:97:c3:
                    82:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1D:E5:92:E0:9A:2C:BD:2E:FD:21:85:35:FF:FD:2F:48:84:D6:29
            X509v3 Authority Key Identifier:
                keyid:4B:B8:0D:D8:E5:B6:ED:2F:57:45:58:50:70:33:3E:F4:A1:5D:72:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/2B752026906B11EE8F088143C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.186.0/23
                IPv6:
                  2001:df3:3c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:f1:e4:95:2c:64:44:92:c4:25:94:c6:e8:fe:fd:50:0f:9d:
         2c:f0:40:7e:29:a0:58:1b:ab:ad:d2:6c:8e:5c:0d:f0:db:f7:
         4e:c7:47:35:fd:21:a3:9b:f5:66:a3:74:3f:41:ad:5a:5a:f0:
         16:28:36:92:cc:f7:06:cd:f7:d9:38:cf:d4:d2:1d:b5:6f:f5:
         3b:ec:0c:a5:2a:89:e7:04:8d:b0:f9:a3:c3:2a:f4:38:c8:16:
         3c:ce:eb:06:7f:f0:f7:25:0d:0e:72:c7:54:39:52:50:1d:b8:
         6e:5d:6f:dd:eb:32:06:ae:fd:3e:44:41:0b:97:07:2f:3c:cc:
         70:7e:d8:c6:ea:6e:77:54:60:17:cd:f8:d3:53:ea:23:25:7f:
         fc:e0:51:59:85:db:8c:29:b3:96:de:e9:2d:7f:ce:96:b8:db:
         ec:b5:6b:1c:67:83:44:28:df:e5:4f:41:c5:c1:f9:27:4e:e5:
         a1:80:f8:4d:4f:e2:2d:6d:ce:10:ac:c8:c7:5d:53:53:f1:35:
         60:70:58:89:2f:7a:e3:00:a0:f5:06:42:02:a5:fd:e6:91:0e:
         52:b6:c7:59:5b:b1:b1:93:6b:44:c6:ed:22:86:62:39:ce:72:
         e6:1d:07:4e:6d:a4:dd:28:f8:f6:74:76:68:3d:68:71:c2:f0:
         da:62:c7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:24:53 2025 by rpki-client