This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/45490AB25AD611EB946A2C37C4F9AE02.roa
File:                     45490AB25AD611EB946A2C37C4F9AE02.roa (raw, json)
Hash identifier:          gW3vTkaN/wNkWG6a1pWxZMXDNkiPWh7wV3EZWd6a77k=
Subject key identifier:   8C:0A:92:A6:80:C5:0B:8C:92:9F:80:36:2B:B8:A7:1E:4C:AB:7A:4F
Certificate issuer:       /CN=A915D897/serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A
Certificate serial:       072D
Authority key identifier: 20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/45490AB25AD611EB946A2C37C4F9AE02.roa
Signing time:             Fri 28 Nov 2025 20:54:11 +0000
ROA not before:           Fri 28 Nov 2025 20:54:11 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     1221
IP address blocks:        203.26.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl
                          rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 20:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1837 (0x72d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D897, serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A
        Validity
            Not Before: Nov 28 20:54:11 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692a0bf3-2d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fe:eb:ca:16:86:57:50:be:8e:69:b7:84:51:
                    ef:ff:9b:66:ea:42:94:bd:64:de:4a:7c:9c:96:f4:
                    5c:1f:1b:61:be:e4:02:91:78:01:fd:0e:d6:65:5e:
                    f2:1c:50:c3:ee:13:50:65:49:85:b1:c5:c1:b3:50:
                    c7:ea:44:39:82:b4:94:17:b6:93:61:79:80:02:39:
                    87:0e:55:b3:c0:a0:4f:77:a3:44:39:cf:5f:9f:dd:
                    6f:a1:70:13:47:8b:24:52:ab:56:97:7e:ea:34:7e:
                    0d:fc:ec:53:c1:f7:b8:4e:d7:4c:38:16:79:b3:c6:
                    e0:5f:fa:0a:07:85:bd:82:a2:a6:e9:5a:74:6c:95:
                    26:c0:6e:a2:82:36:92:0e:6a:4b:89:2e:ca:e3:50:
                    6b:41:1c:01:2a:e2:ca:71:11:4e:3a:19:bb:0a:50:
                    43:30:85:bb:2b:79:26:7b:0a:57:ea:6c:fd:eb:c4:
                    3c:f6:9f:2d:d3:65:a2:86:3a:6a:a9:31:6e:52:eb:
                    d3:08:7a:1a:81:81:8c:5f:6d:9d:e5:24:ef:d7:d8:
                    b8:25:d0:fc:0a:6e:5c:98:6a:82:4f:bb:33:5e:ab:
                    df:2c:6d:bb:ed:c5:8a:f8:45:b7:17:5f:32:9e:2b:
                    52:71:dd:e2:06:23:e2:ff:9a:84:e8:e1:e1:aa:b9:
                    fd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0A:92:A6:80:C5:0B:8C:92:9F:80:36:2B:B8:A7:1E:4C:AB:7A:4F
            X509v3 Authority Key Identifier:
                keyid:20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/45490AB25AD611EB946A2C37C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.26.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:10:99:12:14:4f:4e:67:cc:29:3f:af:bd:95:d8:40:02:39:
         53:bc:73:b1:2e:58:62:47:6f:4d:53:a5:ed:d7:98:11:bc:72:
         18:9b:e5:de:0f:fa:92:29:70:0d:8c:e7:4a:5f:10:36:4b:03:
         d9:63:ec:72:f1:aa:9a:78:58:bc:72:94:ec:ab:5a:ce:56:86:
         36:e0:38:06:2c:58:73:1a:56:f9:8b:48:b1:66:ee:7b:05:99:
         5d:1f:01:8d:da:4f:2b:31:11:fa:ed:73:88:d9:5d:a6:cc:1a:
         49:33:ea:9c:5a:64:6b:03:66:d8:86:64:29:ad:18:d0:3a:38:
         0f:25:30:51:a4:ac:c9:63:be:3d:82:96:8a:3a:50:47:6d:b4:
         47:47:8c:6a:12:6a:00:d8:3f:c6:50:04:82:67:28:74:d9:0d:
         ea:d0:8e:10:94:6b:65:69:96:83:db:94:92:3e:d9:6a:85:ca:
         28:26:15:3c:50:0b:7a:79:12:f4:fc:29:2a:7e:1f:50:35:9e:
         60:46:72:b6:02:88:3f:36:7c:98:3c:71:87:e8:1e:dd:43:c7:
         ad:aa:8b:72:20:60:cb:e7:1c:3e:67:05:3c:d8:9a:07:7d:a2:
         13:64:63:4a:db:84:c0:07:11:88:70:e0:6e:01:48:bc:ff:2c:
         b0:8c:17:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:11:09 2025 by rpki-client