This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/A209D9E4BC2311F09A8FB280C4F9AE02.roa
File:                     A209D9E4BC2311F09A8FB280C4F9AE02.roa (raw, json)
Hash identifier:          ROMimlav+Kwv4KL5aZPE3FnW4mOvCmbzzXBU2NVsmwo=
Subject key identifier:   28:30:B2:43:ED:E3:B4:BE:D6:C0:99:11:6F:A6:80:ED:60:7D:26:6D
Certificate issuer:       /CN=A9155ECF/serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F
Certificate serial:       6D
Authority key identifier: DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/A209D9E4BC2311F09A8FB280C4F9AE02.roa
Signing time:             Fri 07 Nov 2025 21:49:28 +0000
ROA not before:           Fri 07 Nov 2025 21:49:28 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     213549
IP address blocks:        163.227.129.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl
                          rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155ECF, serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F
        Validity
            Not Before: Nov  7 21:49:28 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=690e6967-105e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:76:2c:7d:22:83:28:40:94:94:f6:77:56:
                    3a:27:b8:8b:8a:71:30:36:83:9d:77:75:3c:9e:cb:
                    98:1c:13:ad:f9:dd:ef:49:65:a3:ac:e5:b9:b2:0e:
                    90:5b:0b:b0:b2:02:65:f3:54:40:fb:57:d0:18:39:
                    77:ce:dc:d6:cc:67:bc:bd:85:7c:81:bc:8a:31:db:
                    15:b2:75:99:90:af:67:59:85:71:f2:aa:a5:b9:4c:
                    28:30:29:2f:31:20:eb:e7:8b:ed:11:9c:12:64:98:
                    34:36:9b:7d:ef:86:90:ff:67:6e:fd:22:2e:65:6b:
                    51:14:34:75:17:3e:cc:79:14:c3:4d:a2:17:a6:9d:
                    12:2a:8f:a8:4e:2d:6f:ef:3e:78:13:7c:0f:84:73:
                    06:a5:6a:c2:31:0d:c6:70:bd:db:72:26:ec:32:e2:
                    c0:02:54:86:71:63:1a:81:ed:02:34:79:db:60:60:
                    b5:a8:23:ed:9b:d1:64:1c:c9:5a:61:ab:86:50:e6:
                    8b:8b:4d:29:7c:6c:4b:c1:0e:e0:41:ea:36:34:e9:
                    60:fe:9c:d8:77:72:66:8a:7a:2c:43:ba:d5:d1:fa:
                    fa:58:4c:51:57:c0:7b:9b:63:ab:46:a2:5a:4e:5f:
                    86:54:36:e1:79:f8:70:3f:74:f3:0d:35:ad:94:30:
                    78:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:30:B2:43:ED:E3:B4:BE:D6:C0:99:11:6F:A6:80:ED:60:7D:26:6D
            X509v3 Authority Key Identifier:
                keyid:DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/A209D9E4BC2311F09A8FB280C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:29:32:92:4d:63:1b:34:43:52:30:e1:55:bf:a8:e7:51:63:
         51:58:7a:ac:e1:26:5f:ff:08:6e:59:6f:d6:7e:52:67:95:4c:
         ae:60:3c:aa:cd:62:2e:c6:e6:19:48:2a:53:2c:19:c1:c1:04:
         04:92:98:25:b8:d6:3a:0a:e5:8e:93:38:6f:d5:b1:c7:3d:c3:
         bd:2b:c1:62:88:e0:ad:ca:89:b8:e3:30:0c:82:1b:ac:68:97:
         0c:a8:45:75:8f:10:f9:66:56:86:64:c4:ea:c5:b8:7a:05:01:
         ea:00:46:a6:05:62:a4:eb:52:c1:f1:9d:94:a3:24:17:aa:7d:
         96:80:06:06:65:1a:7b:10:c3:17:b9:c4:fb:48:ef:4e:03:4c:
         04:50:d7:e9:2f:d5:a5:59:71:3d:bf:12:55:8a:37:58:f7:1b:
         6c:fd:71:d2:45:09:fa:2d:d9:9b:2b:67:d7:6c:18:27:21:bb:
         0d:d2:25:55:3a:a7:ce:18:ac:80:b9:99:7c:f0:9e:62:67:4c:
         8e:d5:ce:8e:c3:70:8c:12:9f:84:da:0e:f0:00:c9:c0:92:73:
         b4:c2:95:4d:e6:a8:72:81:5c:77:a2:78:5e:39:cd:59:c0:88:
         a4:dd:93:90:91:e6:f3:a2:6b:37:4f:e5:9c:72:34:a2:79:59:
         c8:55:f6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:10:43 2025 by rpki-client