This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/82A6D4C4373711F0B4C22F6AC4F9AE02.roa
File:                     82A6D4C4373711F0B4C22F6AC4F9AE02.roa (raw, json)
Hash identifier:          n/PvsW9zebDkTZCp50BwuzM/P+LxZ4UecYhiS0C/Z2s=
Subject key identifier:   FA:C6:9B:FC:0D:6B:3A:16:62:55:F8:19:6C:CD:A8:08:4A:33:0D:B9
Certificate issuer:       /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial:       0266
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/82A6D4C4373711F0B4C22F6AC4F9AE02.roa
Signing time:             Wed 03 Dec 2025 01:59:35 +0000
ROA not before:           Wed 03 Dec 2025 01:59:35 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     198949
IP address blocks:        65.254.64.0/19 maxlen: 24
                          66.116.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
                          rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
        Validity
            Not Before: Dec  3 01:59:35 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=692f9987-cece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:72:8f:96:d7:8d:d7:67:f3:88:7f:a3:6a:fa:
                    03:06:3a:4b:dd:91:c1:96:e3:1a:8e:16:56:7e:1c:
                    8b:52:1b:7e:e9:05:9f:0c:4c:38:08:98:14:c2:1f:
                    e1:cd:ac:e0:d0:db:5b:04:2a:25:7d:9e:db:c8:46:
                    da:39:8e:46:09:b7:e1:7c:71:5a:2d:66:7a:bc:48:
                    8a:ca:8d:6d:6d:b3:85:5e:96:5d:8c:e7:63:fd:79:
                    22:d7:3d:e6:99:16:e7:3f:da:a1:85:df:36:d4:c2:
                    02:b8:aa:93:d4:5c:72:46:6d:5e:59:68:d5:0f:76:
                    e2:46:0a:08:d7:21:2f:1d:b1:54:61:67:67:1e:d7:
                    32:e8:aa:c8:9e:77:af:d1:a0:ec:85:7a:7d:16:4f:
                    90:36:a6:82:58:db:97:e6:48:91:8f:28:5f:2f:eb:
                    e7:4d:c2:84:2d:36:99:ee:db:5c:64:d6:52:8c:5a:
                    f1:c3:06:db:f8:12:8b:04:15:70:2d:e9:96:fb:16:
                    f1:4e:ac:32:2e:03:e2:4c:22:73:84:0e:4c:ea:b9:
                    95:32:c7:48:de:6e:21:b9:22:7f:06:bf:79:c9:da:
                    36:29:ba:48:9d:85:44:7e:98:96:3d:94:4d:e4:e5:
                    81:c6:c4:1c:ee:0f:ad:4b:c4:24:6f:19:b3:f6:f8:
                    39:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C6:9B:FC:0D:6B:3A:16:62:55:F8:19:6C:CD:A8:08:4A:33:0D:B9
            X509v3 Authority Key Identifier:
                keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/82A6D4C4373711F0B4C22F6AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.64.0/19
                  66.116.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         32:9b:47:9a:1f:59:d7:c5:a7:b5:63:06:10:3a:d1:08:49:cc:
         d0:3c:ed:a3:ba:cc:99:19:f3:34:be:23:6f:80:a3:8d:d7:f4:
         7c:61:f7:77:2a:d5:af:24:d3:d3:68:db:ab:ba:bf:41:54:62:
         e1:dd:31:e3:97:17:68:ce:a2:0f:d4:2f:a0:1d:0d:02:6c:ed:
         2d:f3:62:5e:77:91:63:68:b9:95:f1:43:f0:5c:c3:0b:63:e4:
         ce:fb:be:c2:e7:04:9b:96:e4:5c:53:f0:eb:f9:2d:2d:03:ab:
         1e:70:c6:a1:34:5f:fa:a1:3c:a7:07:2b:e7:3c:82:8e:52:59:
         a5:c8:d1:81:df:53:d0:37:74:ba:4b:d8:c6:41:d4:11:f4:77:
         62:b2:fc:21:1f:c7:05:33:43:a2:ea:fd:e3:d0:3e:23:5e:dc:
         61:54:fa:01:df:74:81:82:41:6d:92:49:f8:48:80:05:ee:a6:
         e6:37:27:ed:73:cc:1c:57:e0:c6:48:99:58:16:0d:6f:c2:0a:
         39:09:5c:29:38:ff:39:86:40:36:96:92:6c:0e:f6:e5:c2:e4:
         36:f0:57:46:79:1c:e9:27:49:94:5a:88:e7:62:81:5a:a7:22:
         e8:02:60:f5:c2:ed:fd:02:0c:3a:b0:8f:94:cd:29:f0:26:b7:
         16:68:58:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:58:47 2025 by rpki-client