This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/1DAE236CC9D411F0A61E0021C4F9AE02.roa
File:                     1DAE236CC9D411F0A61E0021C4F9AE02.roa (raw, json)
Hash identifier:          vFnHMZDmaAEJX6sDkXcevocgA5u3JoklJPdgGoC+BEI=
Subject key identifier:   01:01:14:68:62:C2:AB:99:0D:EA:A2:CE:63:A0:83:76:EF:A7:B8:91
Certificate issuer:       /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial:       0224
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/1DAE236CC9D411F0A61E0021C4F9AE02.roa
Signing time:             Tue 25 Nov 2025 07:55:32 +0000
ROA not before:           Tue 25 Nov 2025 07:55:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        155.60.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
                          rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:56:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3
        Validity
            Not Before: Nov 25 07:55:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=692560f3-df9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:2f:7a:23:f8:2b:40:32:cf:62:a7:82:8c:
                    83:d4:a5:a5:03:98:f2:d5:ce:8f:06:12:49:e7:d3:
                    ee:82:7b:ec:16:32:2b:92:39:80:7d:41:26:23:6c:
                    ff:8e:fb:bb:b6:68:0f:f3:5b:4b:f8:0f:df:c3:b4:
                    d9:ce:14:ad:b1:e3:1f:0f:4e:b4:4d:e7:a4:29:3a:
                    ab:28:5d:4e:da:e4:75:1b:da:02:a5:53:40:c6:11:
                    a4:a5:82:b2:41:e0:21:19:85:26:1a:ba:df:f7:37:
                    d7:31:45:43:07:41:6b:f1:d2:f3:40:5a:35:21:b9:
                    1e:63:64:9b:85:0d:86:bb:97:3f:03:03:9f:7d:a6:
                    34:be:67:7f:14:c3:94:b5:7b:62:5e:93:35:45:c7:
                    90:88:61:0e:97:48:ea:f0:9b:27:61:4c:1c:f4:8c:
                    be:cc:24:bd:79:a0:d7:d4:d5:e4:1f:38:61:08:dd:
                    ec:06:81:ce:ef:2c:e2:a0:ca:4f:03:b9:6f:53:28:
                    cc:d7:33:96:e7:6c:37:62:af:25:9b:2c:32:12:d5:
                    15:b1:6c:85:b6:15:12:7f:05:87:ea:67:0c:18:5a:
                    a8:a7:3e:fb:41:98:27:8e:12:69:22:b2:f5:02:7c:
                    a6:66:92:c7:a4:cc:8c:ce:16:64:72:18:07:ad:9c:
                    fc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:01:14:68:62:C2:AB:99:0D:EA:A2:CE:63:A0:83:76:EF:A7:B8:91
            X509v3 Authority Key Identifier:
                keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/1DAE236CC9D411F0A61E0021C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.60.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8b:35:eb:df:ba:00:49:b4:d0:e6:4b:12:5e:e0:df:c4:bf:e3:
         e2:26:e1:17:cf:16:c3:a2:d6:71:58:f0:00:c4:53:1c:b9:16:
         b7:0e:7e:2f:b1:be:bb:36:f8:04:71:c7:93:6e:03:9b:fb:4d:
         df:bc:36:ae:45:42:51:b9:9f:41:51:44:cd:9a:8d:82:88:21:
         06:47:c2:6f:3e:13:9b:9e:0d:9c:f8:99:71:a2:b5:3c:3b:71:
         03:e3:75:e4:2b:56:9b:11:c4:d2:49:6c:54:92:d8:24:bb:a7:
         e2:88:d1:f7:4f:87:16:56:e9:9a:f6:9a:29:6e:5c:7f:05:28:
         7f:28:d2:2b:d0:b3:a6:17:e2:d4:d1:08:08:d2:a2:a6:cf:73:
         84:4c:de:6c:dd:52:7f:25:05:e3:7c:eb:9a:b3:fd:a0:39:4f:
         16:9d:82:da:49:04:f2:fd:16:54:d7:dd:92:d9:bc:ae:1e:7c:
         6c:03:82:e2:c0:f1:3e:5f:26:1f:d4:a8:0c:3b:e7:94:ed:95:
         ff:1f:c5:08:a1:56:4c:ce:4e:5d:43:aa:a5:86:8d:56:53:39:
         ef:0b:96:bd:2a:6c:d2:92:70:e7:91:58:23:5e:c7:9f:76:31:
         49:d4:fa:ed:f6:fd:c6:dc:05:d5:43:47:fd:c4:66:fb:28:32:
         4b:1a:f1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:05:39 2025 by rpki-client