This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/146B772C82DC11EA9B13000CC4F9AE02.roa
File:                     146B772C82DC11EA9B13000CC4F9AE02.roa (raw, json)
Hash identifier:          RaEy/c0RDVPJljVOjzCUx5HkOYe2NH7gDK679iI3lU8=
Subject key identifier:   C4:0F:33:DB:06:5B:50:4F:A8:B7:7D:BD:FE:4F:33:03:23:23:DF:EF
Certificate issuer:       /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Certificate serial:       0AD3
Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/146B772C82DC11EA9B13000CC4F9AE02.roa
Signing time:             Thu 20 Nov 2025 19:10:16 +0000
ROA not before:           Thu 20 Nov 2025 19:10:16 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     4134
IP address blocks:        183.91.32.0/21 maxlen: 21
                          183.91.32.0/24 maxlen: 24
                          183.91.33.0/24 maxlen: 24
                          183.91.34.0/24 maxlen: 24
                          183.91.35.0/24 maxlen: 24
                          183.91.36.0/24 maxlen: 24
                          183.91.37.0/24 maxlen: 24
                          183.91.38.0/24 maxlen: 24
                          183.91.39.0/24 maxlen: 24
                          183.91.40.0/21 maxlen: 21
                          183.91.40.0/24 maxlen: 24
                          183.91.41.0/24 maxlen: 24
                          183.91.42.0/24 maxlen: 24
                          183.91.43.0/24 maxlen: 24
                          183.91.44.0/24 maxlen: 24
                          183.91.45.0/24 maxlen: 24
                          183.91.46.0/24 maxlen: 24
                          183.91.47.0/24 maxlen: 24
                          183.91.56.0/24 maxlen: 24
                          2400:9380:8000::/40 maxlen: 48
                          2400:9380:8100::/40 maxlen: 48
                          2400:9380:8200::/40 maxlen: 48
                          2400:9380:8300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
                          rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2771 (0xad3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
        Validity
            Not Before: Nov 20 19:10:16 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=691f6797-ce45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:15:c9:ef:6b:8a:b2:69:fe:17:e1:c8:d3:06:
                    b8:da:e9:9b:fd:29:52:20:4f:9f:fb:26:cf:b0:51:
                    51:c0:a8:1b:42:ac:20:28:b4:62:fd:77:26:74:36:
                    44:c5:2b:a9:7d:83:33:dd:f7:cc:e6:0e:45:85:1d:
                    88:7d:ca:a5:4d:c2:6a:2a:45:32:7b:c5:2c:e6:16:
                    46:76:23:1b:70:fd:cf:ba:c7:52:13:eb:a4:bb:e0:
                    61:3f:a2:8e:4d:df:dd:20:ef:d3:cf:89:10:da:bb:
                    95:9a:b6:02:e9:19:7a:10:6e:c7:43:96:ca:51:c9:
                    96:0c:7b:fe:56:2a:8a:cd:36:9c:1c:c7:74:0b:f0:
                    23:1e:30:17:bc:a2:24:d7:39:28:d9:72:b1:75:a8:
                    28:24:9d:3a:6d:0f:f3:ce:9b:c9:0b:02:d3:68:16:
                    8b:59:f9:2e:18:f9:c4:c7:de:d8:16:1e:61:66:20:
                    e4:31:e8:f8:5f:cf:c5:6b:6b:f8:94:28:45:87:b9:
                    80:3e:bb:f4:bd:8e:64:e6:79:05:b5:ab:a6:84:ce:
                    5f:58:ed:fe:dd:f0:a6:cb:7b:55:13:3f:89:8c:2a:
                    d3:2a:49:5a:a5:a3:1d:41:23:b1:1c:dc:23:8e:2b:
                    d4:e7:76:e9:72:48:c1:5e:bc:16:5b:57:62:df:fc:
                    13:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0F:33:DB:06:5B:50:4F:A8:B7:7D:BD:FE:4F:33:03:23:23:DF:EF
            X509v3 Authority Key Identifier:
                keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/146B772C82DC11EA9B13000CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.91.32.0/20
                  183.91.56.0/24
                IPv6:
                  2400:9380:8000::/38

    Signature Algorithm: sha256WithRSAEncryption
         87:0d:cf:2a:03:05:39:61:f7:9a:ff:d5:6c:02:d4:de:3a:92:
         21:47:3a:70:1a:13:f7:28:22:1c:f2:1f:aa:94:db:1a:79:8e:
         1e:19:2a:f9:35:e4:90:d3:2b:43:76:39:f6:14:38:38:2c:5e:
         4b:6f:a4:1e:b4:99:7b:48:cb:57:1c:73:e8:37:4c:3b:cf:6c:
         f4:d4:ed:b7:b6:0e:9a:7e:14:0d:1f:33:93:ad:ea:a6:f0:89:
         cc:39:18:f6:df:d1:81:d4:14:b0:31:c0:ae:42:6e:85:f7:01:
         d2:95:c9:f6:cd:26:fe:c9:ab:ae:07:78:7e:a1:87:8a:ca:d1:
         09:6f:b6:8b:5b:82:d0:12:3c:5a:b5:61:27:ab:a1:59:92:cc:
         1a:4b:d0:0e:48:5d:15:37:d6:b2:8e:95:60:56:13:01:e8:63:
         90:b2:ec:d1:ae:10:96:f0:5a:1e:da:8c:78:5a:48:d7:27:c8:
         21:bf:03:52:ec:46:30:be:a9:3a:f4:0a:38:95:70:ad:e4:7d:
         d9:74:87:bb:22:ef:9c:f8:99:f3:51:6b:b2:90:e8:bc:5e:1b:
         88:7a:ac:4c:c8:34:76:21:38:eb:e3:6d:eb:db:4a:67:11:97:
         48:fb:98:53:7c:99:2b:52:31:f2:c8:6e:7a:7b:c2:95:1b:86:
         5c:1a:ae:90
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICCtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU3NkQxMTAvBgNVBAUTKEIxRTg0RkFDRkFDQkMwQjc4Mzg1NjFFRjIxRTI4RjJG
QUNGNURGRUMwHhcNMjUxMTIwMTkxMDE2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTFmNjc5Ny1jZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuBXJ72uKsmn+F+HI0wa42umb/SlSIE+f+ybPsFFRwKgbQqwgKLRi/XcmdDZE
xSupfYMz3ffM5g5FhR2IfcqlTcJqKkUye8Us5hZGdiMbcP3PusdSE+uku+BhP6KO
Td/dIO/Tz4kQ2ruVmrYC6Rl6EG7HQ5bKUcmWDHv+ViqKzTacHMd0C/AjHjAXvKIk
1zko2XKxdagoJJ06bQ/zzpvJCwLTaBaLWfkuGPnEx97YFh5hZiDkMej4X8/Fa2v4
lChFh7mAPrv0vY5k5nkFtaumhM5fWO3+3fCmy3tVEz+JjCrTKklapaMdQSOxHNwj
jivU53bpckjBXrwWW1di3/wTFwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFMQPM9sG
W1BPqLd9vf5PMwMjI9/vMB8GA1UdIwQYMBaAFLHoT6z6y8C3g4Vh7yHijy+s9d/s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8zNjg3MkE1RTgy
Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi9zZWhQclByTHdMZURoV0h2SWVLUEw2ejEz
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NlaFByUHJMd0xlRGhXSHZJZUtQTDZ6MTMtdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzU3NkQvMzY4NzJBNUU4MkNEMTFFQTg5NUM3QjVDQzRGOUFFMDIvMTQ2Qjc3MkM4
MkRDMTFFQTlCMTMwMDBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E
JjAkMBIEAgABMAwDBAS3WyADBAC3WzgwDgQCAAIwCAMGAiQAk4CAMA0GCSqGSIb3
DQEBCwUAA4IBAQCHDc8qAwU5Yfea/9VsAtTeOpIhRzpwGhP3KCIc8h+qlNsaeY4e
GSr5NeSQ0ytDdjn2FDg4LF5Lb6QetJl7SMtXHHPoN0w7z2z01O23tg6afhQNHzOT
reqm8InMORj239GB1BSwMcCuQm6F9wHSlcn2zSb+yauuB3h+oYeKytEJb7aLW4LQ
EjxatWEnq6FZkswaS9AOSF0VN9ayjpVgVhMB6GOQsuzRrhCW8Foe2ox4WkjXJ8gh
vwNS7EYwvqk69Ao4lXCt5H3ZdIe7Iu+c+JnzUWuykOi8XhuIeqxMyDR2ITjr423r
20pnEZdI+5hTfJkrUjHyyG56e8KVG4ZcGq6Q
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:19:24 2025 by rpki-client