This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/B80A9FF60B4111EF919B0B7DC4F9AE02.roa
File:                     B80A9FF60B4111EF919B0B7DC4F9AE02.roa (raw, json)
Hash identifier:          buhZUfibEPWavi+od5Sw2bq6zRhsMhR3vDnZi9BT1tE=
Subject key identifier:   B7:BA:2C:0E:29:F2:6F:3C:06:30:CB:96:DE:13:FB:8C:30:8A:26:61
Certificate issuer:       /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial:       0AAF
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/B80A9FF60B4111EF919B0B7DC4F9AE02.roa
Signing time:             Sat 08 Nov 2025 19:40:28 +0000
ROA not before:           Sat 08 Nov 2025 19:40:28 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     7631
IP address blocks:        123.176.114.0/23 maxlen: 23
                          123.176.115.0/24 maxlen: 24
                          123.176.116.0/22 maxlen: 22
                          123.176.116.0/23 maxlen: 23
                          123.176.116.0/24 maxlen: 24
                          125.253.36.0/23 maxlen: 23
                          203.189.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
                          rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2735 (0xaaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
        Validity
            Not Before: Nov  8 19:40:28 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690f9cac-e1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:86:02:b4:4f:dd:84:75:c1:82:d1:99:fb:16:
                    f8:25:81:83:3f:28:bd:7b:86:7d:2a:92:26:5b:2b:
                    1c:ad:a0:24:0e:ab:0b:8a:85:52:61:15:cf:1a:c5:
                    48:32:0d:aa:b9:6c:04:f9:2e:7b:9d:b1:7c:49:2b:
                    ca:46:f8:b1:b4:47:b2:e6:3f:12:db:f8:78:06:a4:
                    f8:0c:97:af:62:17:eb:de:43:4e:88:f6:b0:b6:80:
                    c4:5c:8d:73:dc:4e:e3:f1:ff:e3:5f:bc:f8:e1:24:
                    3c:dc:52:db:14:d4:95:0e:35:f6:82:b9:94:a2:77:
                    43:7e:32:93:e3:f7:76:bc:bb:55:96:e6:a5:9f:66:
                    b5:d4:9b:e8:ff:49:59:ce:7d:90:98:08:69:15:f6:
                    ab:45:39:89:ab:e7:e6:49:97:96:f7:46:74:9e:cf:
                    5f:15:41:64:3c:82:09:2f:a8:4e:9a:9d:9e:08:e7:
                    a6:84:63:55:84:e8:46:10:b4:e3:b7:79:ff:6b:3b:
                    15:02:b5:19:36:4d:d2:eb:81:58:17:ad:54:61:3c:
                    4d:af:8c:bf:a0:ed:c9:ea:03:ed:bc:25:2c:4a:f7:
                    b4:f5:88:63:8a:49:6d:2a:5a:d6:c6:80:b2:24:91:
                    3d:85:b8:c9:44:cf:e6:fd:fc:8a:63:e1:b7:8d:c2:
                    40:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BA:2C:0E:29:F2:6F:3C:06:30:CB:96:DE:13:FB:8C:30:8A:26:61
            X509v3 Authority Key Identifier:
                keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/B80A9FF60B4111EF919B0B7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.176.114.0-123.176.119.255
                  125.253.36.0/23
                  203.189.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:6a:f8:5d:55:ed:b7:23:6b:35:44:6c:e4:83:32:14:65:ea:
         af:41:a7:b8:c8:b1:c3:53:61:92:b0:6c:4f:cd:6e:ce:1f:a8:
         ff:0e:f8:52:eb:dc:3f:d5:75:85:a4:fe:cd:79:00:18:08:44:
         bb:00:04:d8:ef:14:f0:9b:ee:11:b4:b5:7e:92:1a:b3:47:74:
         ce:ba:83:b7:63:50:c4:bb:11:c0:bf:30:f9:d4:4a:14:39:d8:
         a7:5e:67:91:d5:0b:a3:33:96:b6:f4:fd:fe:b7:0d:17:aa:d5:
         35:d6:4c:74:a7:9e:3a:70:1f:16:3d:81:73:f8:69:1b:f4:11:
         1a:52:8a:f2:1e:24:8b:5d:2b:f1:fe:9a:77:d5:e2:88:4f:cf:
         89:cc:cb:9e:48:9a:5f:d5:bd:b8:f4:03:66:c7:77:3e:ab:ed:
         b2:41:eb:10:87:99:79:5a:38:64:36:12:ce:60:71:dc:89:99:
         23:5e:60:30:8c:af:35:22:6b:c8:db:65:ac:36:90:52:08:5d:
         96:e6:e1:6e:26:b4:2b:76:31:d3:0c:46:9f:28:45:b4:04:7e:
         24:7d:c2:0c:e5:a7:7e:84:27:96:fd:9b:75:2d:4f:4a:9a:71:
         bd:6b:4d:e0:c5:43:85:08:7b:62:4c:d8:59:3a:96:22:87:42:
         3c:35:fc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:17:34 2025 by rpki-client