This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/77BB354CC1E711F0BF1FBB0DC4F9AE02.roa
File:                     77BB354CC1E711F0BF1FBB0DC4F9AE02.roa (raw, json)
Hash identifier:          GnAy7gUWULKK+0ha0Z5VnbvN7dc+3rJnS4hS/5snCUs=
Subject key identifier:   2F:8A:A9:25:6A:D1:DF:6B:4A:2B:81:B9:7B:FC:09:D6:15:C5:48:BD
Certificate issuer:       /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Certificate serial:       0132
Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/77BB354CC1E711F0BF1FBB0DC4F9AE02.roa
Signing time:             Sat 15 Nov 2025 05:53:54 +0000
ROA not before:           Sat 15 Nov 2025 05:53:54 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     147314
IP address blocks:        160.20.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
                          rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91705D7, serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
        Validity
            Not Before: Nov 15 05:53:54 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69181572-36f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:83:2c:60:b6:e8:88:50:83:fd:97:08:d2:71:
                    b8:38:eb:aa:23:29:c3:40:d4:90:73:32:0d:05:b0:
                    8d:ad:38:18:fa:ce:46:08:15:34:8f:cc:56:48:1e:
                    b3:2e:47:78:b0:19:49:12:11:e4:8d:f5:bc:9c:c3:
                    47:58:dc:4e:17:c3:ee:e4:4a:b6:97:d3:06:59:f1:
                    ca:55:40:c3:6c:33:90:52:5f:c2:6a:55:20:d6:f4:
                    dc:db:4e:49:46:2e:06:47:01:26:dc:1b:29:34:e5:
                    48:bc:49:f4:4f:26:54:98:4b:98:74:ea:52:7b:e5:
                    7c:a6:34:b8:08:83:b1:04:1e:e2:22:76:c4:71:28:
                    3b:05:87:50:86:0a:3d:e6:ae:b6:0d:cb:4c:be:83:
                    54:63:c9:5c:73:00:24:eb:35:d2:62:6e:31:56:e6:
                    53:29:9b:18:cc:0c:bd:ef:b2:53:00:c8:0d:93:fc:
                    e3:a2:2d:cc:c8:b5:aa:a0:bd:b2:65:66:25:34:f5:
                    ce:18:df:ae:22:2f:06:7d:66:c5:ba:8b:d0:59:4e:
                    ee:80:b6:0d:da:0c:16:3d:14:83:9b:5a:f6:21:6a:
                    21:80:7b:d9:27:79:41:1b:52:5b:93:6b:ce:ea:97:
                    18:ad:08:94:62:30:08:f3:d6:03:10:cd:fe:6a:65:
                    e6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8A:A9:25:6A:D1:DF:6B:4A:2B:81:B9:7B:FC:09:D6:15:C5:48:BD
            X509v3 Authority Key Identifier:
                keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/77BB354CC1E711F0BF1FBB0DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:76:75:39:89:0f:e6:70:61:60:cb:da:b7:55:b9:b6:e1:cb:
         13:7a:ee:6b:ab:52:c1:ed:5c:37:87:9e:c7:5e:b8:de:1f:1c:
         a3:9f:cb:d1:70:7e:4e:34:0d:73:8c:91:08:8a:ed:79:26:65:
         05:93:08:ff:c0:a5:12:88:f6:c4:70:a1:11:25:26:f4:c3:48:
         fe:78:14:d1:2d:a0:89:ee:d7:c1:9f:40:33:fd:d2:73:f2:b4:
         b4:01:0f:54:f6:55:db:39:12:7c:06:d0:90:77:a3:6a:91:dc:
         a6:95:61:cc:55:ed:b4:28:ad:21:70:1a:b8:aa:cb:94:61:86:
         97:8f:c1:e4:fc:a6:dd:d9:8d:4c:b7:53:b6:34:27:b3:b5:9a:
         08:85:10:65:99:bb:98:e3:6c:4f:0a:b6:90:21:2f:32:39:77:
         08:81:1c:64:85:f9:c2:0f:38:47:1d:68:70:1a:ca:38:b5:be:
         7d:f6:bd:7c:1c:1c:06:05:2d:d6:30:63:ff:3a:16:9f:32:1d:
         76:96:80:6f:37:b6:86:fd:18:d5:5b:c4:96:63:c1:3f:c1:a9:
         be:59:d6:23:db:7f:d0:98:37:d2:ce:1f:28:e7:58:c1:e4:6c:
         d9:d2:6b:0d:15:06:31:58:49:cf:44:44:d2:34:73:ee:5d:39:
         15:e5:60:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:23:04 2025 by rpki-client