This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/749936E290D511EE816E5C34C4F9AE02.roa
File:                     749936E290D511EE816E5C34C4F9AE02.roa (raw, json)
Hash identifier:          pUmBGJmyMHEcbY4KaDR5mt/b7cXO616AtPpB4tejaZA=
Subject key identifier:   99:B0:C7:91:FF:63:7E:43:6E:46:02:72:93:99:B8:96:82:BE:6B:C1
Certificate issuer:       /CN=A9144913/serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819
Certificate serial:       0179
Authority key identifier: FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/749936E290D511EE816E5C34C4F9AE02.roa
Signing time:             Thu 27 Nov 2025 02:20:31 +0000
ROA not before:           Thu 27 Nov 2025 02:20:31 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     147057
IP address blocks:        2407:ef40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl
                          rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144913, serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819
        Validity
            Not Before: Nov 27 02:20:31 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6927b56e-d76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b2:71:77:e5:f8:ff:60:87:80:df:2b:da:57:
                    f2:93:5e:35:5e:da:70:d8:a1:c5:1c:11:6e:9d:d7:
                    63:0b:01:5f:f1:c0:db:d1:0b:3f:77:ad:41:c8:07:
                    c4:9d:cc:0d:b1:17:32:06:07:65:2a:f8:39:f5:1c:
                    4e:61:ba:e6:4d:4f:98:bd:d1:7b:a8:18:9e:44:8c:
                    ed:92:83:04:ba:8a:e1:53:b3:12:43:09:2b:1f:30:
                    af:e8:b2:ba:04:69:f5:4f:3d:3b:d4:cc:48:f5:fa:
                    ad:4b:f0:f4:78:fc:fb:c9:59:88:f9:24:3d:67:76:
                    81:34:87:80:ac:45:40:ee:d6:dd:0a:e6:94:99:8b:
                    83:29:a9:de:4f:0e:f9:a5:f6:23:d1:48:4a:bb:26:
                    4b:ec:22:cb:20:fb:2e:91:1d:f4:e9:a2:1a:46:7b:
                    c5:3f:42:6c:26:27:3c:34:7a:08:9d:93:c1:c4:45:
                    51:7d:73:60:53:e0:58:87:f3:3d:6e:93:cc:0f:e0:
                    5d:a9:92:0c:2d:1e:e6:59:8d:ca:b1:8f:95:06:31:
                    27:2e:4b:d5:b7:6a:48:43:c4:34:79:9a:05:96:15:
                    03:36:fe:56:c1:1f:8f:f4:7e:4f:db:11:89:78:de:
                    96:0d:7c:18:df:64:e9:bc:ec:6c:5f:26:89:66:ef:
                    91:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B0:C7:91:FF:63:7E:43:6E:46:02:72:93:99:B8:96:82:BE:6B:C1
            X509v3 Authority Key Identifier:
                keyid:FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/749936E290D511EE816E5C34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:ef40::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:e9:a7:3f:6c:df:71:9b:42:45:1f:43:17:d9:57:af:cf:b1:
         0a:d8:bf:e7:fe:b3:3b:52:4c:e8:9a:f8:95:a1:9c:61:e4:dc:
         31:48:2d:46:1b:23:f0:86:60:1f:40:08:81:be:d9:3b:ca:af:
         b1:a8:2a:7a:75:e0:b5:bb:97:0a:52:22:13:e8:09:d8:4f:3b:
         3d:bf:1a:a3:06:89:f7:b1:cc:f2:3a:11:91:24:4d:32:4d:c9:
         be:d5:eb:59:46:d2:2c:4d:65:06:f8:1c:37:51:27:ed:36:1a:
         4d:18:25:fd:e1:b8:95:12:12:35:c8:37:d2:d1:50:49:0f:c8:
         d5:67:4d:05:0b:74:db:33:2e:7a:60:11:b4:f3:bb:56:dc:9c:
         3c:6f:1d:a9:c5:96:b8:ac:d7:c2:0c:a5:7b:ff:a6:15:70:34:
         b6:a3:51:f7:33:fc:d6:d5:bc:3e:be:10:41:de:9a:dd:4b:d6:
         61:8a:80:2c:ed:74:a5:55:f3:3b:db:01:5e:32:96:63:d0:cc:
         4f:1f:2c:5c:84:a2:19:f0:83:38:c7:51:58:6b:67:42:95:97:
         8a:e6:11:f2:65:f0:df:0b:16:5f:7b:93:c8:79:0f:f0:f3:d3:
         a0:ec:97:a3:05:15:f1:68:3a:0e:5e:b1:d9:dd:3f:22:3a:4a:
         1a:d8:8a:ac
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ5MTMxMTAvBgNVBAUTKEZGNUMxMDA5NzVFMzY4NjI0NUNBREU1NzlDNTc0MzNC
QkZERjY4MTkwHhcNMjUxMTI3MDIyMDMxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI3YjU2ZS1kNzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9rJxd+X4/2CHgN8r2lfyk141Xtpw2KHFHBFunddjCwFf8cDb0Qs/d61ByAfE
ncwNsRcyBgdlKvg59RxOYbrmTU+YvdF7qBieRIztkoMEuorhU7MSQwkrHzCv6LK6
BGn1Tz071MxI9fqtS/D0ePz7yVmI+SQ9Z3aBNIeArEVA7tbdCuaUmYuDKaneTw75
pfYj0UhKuyZL7CLLIPsukR306aIaRnvFP0JsJic8NHoInZPBxEVRfXNgU+BYh/M9
bpPMD+BdqZIMLR7mWY3KsY+VBjEnLkvVt2pIQ8Q0eZoFlhUDNv5WwR+P9H5P2xGJ
eN6WDXwY32TpvOxsXyaJZu+RPwIDAQABo4ICljCCApIwHQYDVR0OBBYEFJmwx5H/
Y35DbkYCcpOZuJaCvmvBMB8GA1UdIwQYMBaAFP9cEAl142hiRcreV5xXQzu/32gZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDkxMy8wNkY1QjVDQTkw
RDUxMUVFQkQ1Nzk4MzNDNEY5QUUwMi9fMXdRQ1hYamFHSkZ5dDVYbkZkRE83X2Zh
QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL18xd1FDWFhqYUdKRnl0NVhuRmRETzdfZmFCay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDQ5MTMvMDZGNUI1Q0E5MEQ1MTFFRUJENTc5ODMzQzRGOUFFMDIvNzQ5OTM2RTI5
MEQ1MTFFRTgxNkU1QzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkB+9AMA0GCSqGSIb3DQEBCwUAA4IBAQB56ac/bN9xm0JF
H0MX2Vevz7EK2L/n/rM7UkzomviVoZxh5NwxSC1GGyPwhmAfQAiBvtk7yq+xqCp6
deC1u5cKUiIT6AnYTzs9vxqjBon3sczyOhGRJE0yTcm+1etZRtIsTWUG+Bw3USft
NhpNGCX94biVEhI1yDfS0VBJD8jVZ00FC3TbMy56YBG087tW3Jw8bx2pxZa4rNfC
DKV7/6YVcDS2o1H3M/zW1bw+vhBB3prdS9ZhioAs7XSlVfM72wFeMpZj0MxPHyxc
hKIZ8IM4x1FYa2dClZeK5hHyZfDfCxZfe5PIeQ/w89Og7JejBRXxaDoOXrHZ3T8i
Okoa2Iqs
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:46:27 2025 by rpki-client