This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/2F996DC6C77311EEBD6F2D2BC4F9AE02.roa
File:                     2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (raw, json)
Hash identifier:          Kn/Z1rDpA/ttbyRypaR6AHeF+y7El6cRx5pOMXcKn6o=
Subject key identifier:   33:40:D1:4F:1E:3F:17:81:DE:DC:E7:33:50:10:97:FC:A6:99:87:83
Certificate issuer:       /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Certificate serial:       017E
Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/2F996DC6C77311EEBD6F2D2BC4F9AE02.roa
Signing time:             Wed 03 Dec 2025 02:33:58 +0000
ROA not before:           Wed 03 Dec 2025 02:33:58 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     141987
IP address blocks:        203.145.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl
                          rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
        Validity
            Not Before: Dec  3 02:33:58 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=692fa195-0530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:16:63:b2:bf:da:5f:f6:94:3b:eb:1d:4d:
                    ca:79:ff:4b:f1:30:60:bf:02:84:82:7d:fb:8a:96:
                    64:92:89:08:8b:90:df:c2:1e:24:f6:d7:f5:70:4d:
                    09:09:2c:f9:c6:8f:8d:f0:1b:a4:df:25:41:89:37:
                    5c:f9:84:73:77:27:ad:32:d5:55:d6:b6:d3:ab:89:
                    6a:ef:5e:6e:6c:a6:7f:04:50:98:cc:d1:48:e5:64:
                    d9:66:02:2f:a7:8d:df:0d:19:f1:62:d2:88:bd:d4:
                    8f:d4:a6:24:4f:96:14:08:6a:6b:d7:3a:52:7f:34:
                    d9:aa:91:8f:ba:89:5d:54:96:31:3b:e0:79:68:03:
                    3f:f3:5c:67:b0:ae:19:f9:d7:ab:7c:67:27:bf:b1:
                    59:85:c8:89:fb:e4:22:26:9a:91:0c:8e:3b:02:cc:
                    33:97:f7:62:88:1f:37:de:8d:38:cb:98:47:22:0e:
                    3c:68:64:63:62:5b:bb:16:78:2c:77:04:17:33:ef:
                    35:c4:51:38:1d:71:3a:66:8a:32:7f:3e:f5:f7:ae:
                    15:d0:88:5d:b5:66:a5:23:b2:d4:5e:28:80:26:4b:
                    16:df:d9:13:45:97:92:44:2f:25:0b:22:5a:d5:38:
                    b2:d2:05:59:69:6f:3f:f9:74:f6:27:4f:c3:fa:74:
                    a3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:40:D1:4F:1E:3F:17:81:DE:DC:E7:33:50:10:97:FC:A6:99:87:83
            X509v3 Authority Key Identifier:
                keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/2F996DC6C77311EEBD6F2D2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:9c:c8:85:c2:8d:01:a8:8a:c9:d9:f7:44:a6:f4:c0:30:ea:
         0e:a2:8e:ee:6b:e4:87:f5:53:c9:59:59:cd:13:a9:47:b9:8b:
         fc:95:c0:0d:66:28:18:c2:0f:75:19:b0:45:d9:76:93:a2:86:
         d2:6d:91:40:d6:00:b9:ab:36:4d:63:4f:71:af:29:99:38:a4:
         ee:06:39:0d:ae:0c:76:f3:c0:47:d7:5d:31:9b:b5:5c:eb:5b:
         fa:72:cc:98:44:4b:97:a7:01:2c:ce:7d:ea:1c:9f:cc:04:61:
         d8:93:d6:e1:a1:7f:e2:6b:ae:fd:93:0b:f9:92:fa:b3:5b:3c:
         4f:53:8f:3d:aa:e2:46:43:7c:71:fc:61:be:76:c9:94:ea:f8:
         72:89:23:19:eb:ad:fa:4b:ab:9f:61:09:a1:2e:76:ec:bc:f2:
         37:f9:c6:25:5f:05:d7:02:dd:4e:e8:04:c0:ac:75:8e:93:b0:
         43:b6:56:7e:c3:c2:a4:71:57:c6:79:63:19:aa:75:e6:64:c1:
         18:9a:bb:5c:d7:a2:5d:0e:52:59:e2:d1:03:fe:bd:2a:ba:1b:
         01:c7:23:aa:af:bd:c9:fb:e3:5d:4c:a0:cc:5e:fb:e2:9c:9e:
         66:9c:05:e2:c3:1d:65:0a:3b:7b:6d:bc:87:65:62:8b:27:44:
         98:cf:65:4c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENCMjIxMTAvBgNVBAUTKDA5NTg4NjE0Mzg3MjEwRThCNjlBRDNDMzFBNzM2MTlE
NzU1RUQwQzAwHhcNMjUxMjAzMDIzMzU4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTJmYTE5NS0wNTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtaoWY7K/2l/2lDvrHU3Kef9L8TBgvwKEgn37ipZkkokIi5Dfwh4k9tf1cE0J
CSz5xo+N8Buk3yVBiTdc+YRzdyetMtVV1rbTq4lq715ubKZ/BFCYzNFI5WTZZgIv
p43fDRnxYtKIvdSP1KYkT5YUCGpr1zpSfzTZqpGPuoldVJYxO+B5aAM/81xnsK4Z
+derfGcnv7FZhciJ++QiJpqRDI47Aswzl/diiB833o04y5hHIg48aGRjYlu7Fngs
dwQXM+81xFE4HXE6Zooyfz71964V0IhdtWalI7LUXiiAJksW39kTRZeSRC8lCyJa
1Tiy0gVZaW8/+XT2J0/D+nSjMQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDNA0U8e
PxeB3tznM1AQl/ymmYeDMB8GA1UdIwQYMBaAFAlYhhQ4chDotprTwxpzYZ11XtDA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0IyMi82NjAyRTk3ODhD
RDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVPaTJtdFBER25OaG5YVmUw
TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NWaUdGRGh5RU9pMm10UERHbk5oblhWZTBNQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NENCMjIvNjYwMkU5Nzg4Q0QxMTFFRUI2MUZDNjM4QzRGOUFFMDIvMkY5OTZEQzZD
NzczMTFFRUJENkYyRDJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHLkTIwDQYJKoZIhvcNAQELBQADggEBANOcyIXCjQGoisnZ
90Sm9MAw6g6iju5r5If1U8lZWc0TqUe5i/yVwA1mKBjCD3UZsEXZdpOihtJtkUDW
ALmrNk1jT3GvKZk4pO4GOQ2uDHbzwEfXXTGbtVzrW/pyzJhES5enASzOfeocn8wE
YdiT1uGhf+Jrrv2TC/mS+rNbPE9Tjz2q4kZDfHH8Yb52yZTq+HKJIxnrrfpLq59h
CaEuduy88jf5xiVfBdcC3U7oBMCsdY6TsEO2Vn7DwqRxV8Z5YxmqdeZkwRiau1zX
ol0OUlni0QP+vSq6GwHHI6qvvcn7411MoMxe++KcnmacBeLDHWUKO3ttvIdlYosn
RJjPZUw=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:50:10 2025 by rpki-client