This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/E010D234AC8D11EF93B1CB46C4F9AE02.roa
File:                     E010D234AC8D11EF93B1CB46C4F9AE02.roa (raw, json)
Hash identifier:          h0PpNLAE9yxmAxvPUgAF0PfTLuX+9PFFha0DMCXyesA=
Subject key identifier:   D0:F3:CB:AE:18:62:78:C9:F6:ED:8E:CC:EA:6F:6C:71:B5:CD:FE:65
Certificate issuer:       /CN=A9142420/serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5
Certificate serial:       B9
Authority key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/E010D234AC8D11EF93B1CB46C4F9AE02.roa
Signing time:             Wed 19 Nov 2025 04:22:49 +0000
ROA not before:           Wed 19 Nov 2025 04:22:49 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     206216
IP address blocks:        160.187.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl
                          rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142420, serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5
        Validity
            Not Before: Nov 19 04:22:49 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=691d4619-2783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2f:d3:e7:a0:67:c1:f1:ca:29:c2:e7:16:a0:
                    24:18:cd:3d:4b:e8:6e:bc:73:c2:fd:9e:d6:c0:ac:
                    a1:36:78:ab:1d:b1:2c:fb:9e:b8:73:86:8e:ae:29:
                    23:be:b9:f2:36:d1:73:ce:f9:af:37:89:03:ba:f9:
                    75:c4:e3:49:4f:06:11:c7:12:71:14:84:92:2a:f8:
                    89:2d:81:8e:10:28:81:64:c2:83:08:71:c2:0d:5f:
                    86:97:ae:0d:55:69:5e:79:d4:46:30:c8:89:d2:ce:
                    8c:12:50:2a:d5:eb:a4:7b:7c:5c:fe:2a:8a:ca:06:
                    05:ae:3a:f5:67:35:cd:19:2b:5f:50:ce:0a:ff:09:
                    0c:d0:08:c9:6c:d2:af:61:63:8d:ef:fb:9e:e2:71:
                    77:1d:b1:b1:fa:95:57:be:30:37:a5:ba:8d:ca:90:
                    15:64:95:87:6e:98:bc:b9:9c:03:7d:f2:7d:67:31:
                    0a:d9:0e:fe:db:27:7d:2c:e6:ff:f0:f5:ab:40:d8:
                    13:00:60:2b:b0:e5:7c:f2:59:c5:b0:44:0f:2e:cb:
                    7d:38:12:b7:9d:f5:89:c5:cb:d5:87:79:3a:b1:77:
                    fb:68:79:10:fe:11:66:40:58:ab:a3:57:d4:88:6d:
                    47:05:cf:18:e5:e1:02:f4:67:a7:07:14:fc:74:24:
                    bc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F3:CB:AE:18:62:78:C9:F6:ED:8E:CC:EA:6F:6C:71:B5:CD:FE:65
            X509v3 Authority Key Identifier:
                keyid:7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/E010D234AC8D11EF93B1CB46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:8b:af:8b:59:6d:63:b9:90:50:88:f2:d5:be:ac:b9:c2:af:
         a3:90:4d:fd:8a:18:bc:4f:16:d3:0c:15:7b:13:58:02:85:83:
         79:e5:6f:6c:2a:06:ab:b4:8a:11:43:b5:68:3a:e1:22:9b:df:
         3c:87:ba:dd:58:8a:9f:48:b1:6b:dd:a5:a4:71:0a:c8:04:80:
         ef:82:9f:b5:52:86:ae:7c:29:1c:55:e4:be:54:e6:af:1c:3a:
         cb:ed:6c:32:b8:70:90:33:4a:5e:42:81:b5:58:31:b1:56:58:
         c0:f7:7e:ad:c9:d8:bb:1c:f2:ef:ab:c3:32:5b:84:fd:b6:69:
         13:08:50:f0:5e:ad:9e:16:d4:3a:46:46:6d:80:ec:2a:90:9d:
         f8:1c:c9:5f:0e:bf:0a:4a:7e:e3:a9:be:a1:09:e7:1e:85:a7:
         15:54:c3:1f:4e:7f:05:c4:ac:8a:17:cf:58:95:b3:32:33:93:
         15:03:a8:6e:8a:29:6c:a2:76:69:6c:74:6e:7b:dc:50:b5:5e:
         d7:5a:ca:0c:03:e7:5c:fd:ea:33:bb:66:3f:02:a6:de:ad:b8:
         b5:cc:b3:2d:c6:78:7a:21:8f:b8:a9:76:7e:a5:43:61:a1:f6:
         00:a5:da:17:ca:2a:d1:05:1e:54:12:37:cc:e3:ad:3e:bd:78:
         92:28:24:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:09:34 2025 by rpki-client