This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/5103E4B6B3F611F0B4911A0BC4F9AE02.roa
File:                     5103E4B6B3F611F0B4911A0BC4F9AE02.roa (raw, json)
Hash identifier:          aYVxYlefMzWSklvVE7ejL8LQCyo0uoBkp7yy2+ne9nw=
Subject key identifier:   4E:09:E6:B6:92:83:1B:7B:98:DA:8A:12:20:9B:5B:77:0E:C9:1A:07
Certificate issuer:       /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial:       0BA5
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/5103E4B6B3F611F0B4911A0BC4F9AE02.roa
Signing time:             Tue 28 Oct 2025 12:05:42 +0000
ROA not before:           Tue 28 Oct 2025 12:05:42 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     55154
IP address blocks:        45.115.24.0/24 maxlen: 24
                          45.115.26.0/24 maxlen: 24
                          45.115.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
                          rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 18:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2981 (0xba5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
        Validity
            Not Before: Oct 28 12:05:42 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6900b196-0488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4c:60:70:da:a2:d1:4c:7d:9d:c8:db:2f:b4:
                    3c:43:16:8b:8f:0d:76:7e:0f:56:00:d7:e4:a2:66:
                    45:60:a6:89:ef:b0:2a:99:89:59:55:cf:70:78:f7:
                    2b:75:05:fb:ac:c3:4d:9e:cb:f2:ff:23:2f:59:1d:
                    1a:f9:9a:77:19:b0:ea:fb:8f:28:3f:fc:30:23:21:
                    b1:b7:1b:79:e6:b8:96:19:c0:e7:1a:f9:d8:0a:22:
                    75:15:23:97:20:3f:2c:fd:3e:7f:56:59:f5:da:fc:
                    73:be:bd:cd:57:ff:20:07:0f:02:49:3a:f6:97:2a:
                    38:da:37:03:0d:73:7f:fa:a8:70:c3:9d:16:ce:ed:
                    fb:30:60:24:38:11:48:53:48:3c:a4:4d:72:2e:38:
                    b5:f7:5b:09:5c:cf:a0:26:e8:90:86:87:c6:ab:56:
                    89:11:e2:0f:2e:d0:c6:09:89:60:61:d7:d4:f9:0f:
                    7b:7f:16:8a:2d:b8:bc:b8:e2:fb:66:ba:68:c3:21:
                    59:98:9a:39:65:0f:87:06:33:a5:19:f6:5c:d9:c2:
                    65:eb:0b:1b:77:c8:e2:f1:c0:0d:93:7d:ae:bd:62:
                    c4:ad:e3:69:00:d5:1a:41:a3:18:45:40:92:22:b9:
                    21:15:a3:c1:2e:fd:ca:14:dd:40:13:56:69:43:20:
                    04:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:09:E6:B6:92:83:1B:7B:98:DA:8A:12:20:9B:5B:77:0E:C9:1A:07
            X509v3 Authority Key Identifier:
                keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/5103E4B6B3F611F0B4911A0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.24.0/24
                  45.115.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:61:e1:71:d6:b4:59:17:70:4e:74:82:01:1e:8a:47:3c:15:
         10:31:a2:9e:c4:aa:20:04:2e:64:67:0d:bc:40:91:5d:95:a6:
         61:cd:6d:84:d7:1a:8f:89:a5:6f:0e:53:5e:8f:f4:cf:db:64:
         12:64:7a:f6:a5:53:d2:5f:4d:9c:0c:8a:4c:99:aa:ce:c1:da:
         af:c7:ce:3e:6f:cf:2c:98:2a:b4:95:7f:e0:2b:78:dc:62:ed:
         e2:e8:25:f5:76:5e:2d:31:e3:80:4c:75:fe:54:e8:c1:69:75:
         46:f8:43:5c:5f:27:b8:f7:42:74:2c:f1:6f:21:6d:64:0d:7d:
         d3:9e:0f:aa:8e:97:65:5f:87:01:e1:d3:76:16:80:b5:64:4c:
         3e:53:a4:96:e6:9c:bc:31:54:58:56:9a:3a:89:ab:a6:c8:ed:
         dd:3b:fa:70:2e:68:6d:b0:57:b8:d8:49:14:e4:48:bc:ee:cc:
         a3:8f:81:fc:05:85:11:fa:95:e5:db:99:61:f8:2b:07:8e:5b:
         9e:06:56:77:ea:f6:dc:92:cc:1e:80:eb:49:56:fc:b7:d0:e9:
         57:17:31:c3:43:a1:f5:e0:98:59:7b:75:7a:5a:81:ba:32:0d:
         70:29:2e:45:7a:6b:ba:2b:ff:80:e8:cb:0a:28:73:44:1e:6a:
         a4:58:ac:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:41:24 2025 by rpki-client