This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/F97DB5F229A111F090BC8163C4F9AE02.roa
File:                     F97DB5F229A111F090BC8163C4F9AE02.roa (raw, json)
Hash identifier:          3een9y7QYXPUAanRr23KUG0CVwN0O03Dxs8PdOWYvII=
Subject key identifier:   19:A1:A3:28:90:C6:92:A3:73:24:3B:B8:2E:05:12:32:2A:3D:69:85
Certificate issuer:       /CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB
Certificate serial:       0194
Authority key identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/F97DB5F229A111F090BC8163C4F9AE02.roa
Signing time:             Mon 17 Nov 2025 01:49:04 +0000
ROA not before:           Mon 17 Nov 2025 01:49:04 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     152605
IP address blocks:        202.77.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl
                          rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180D79, serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB
        Validity
            Not Before: Nov 17 01:49:04 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=691a7f10-ff27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:37:dd:0a:18:9f:38:d7:c7:4d:a8:48:58:
                    db:95:a8:6a:c3:2c:25:ad:83:97:75:04:a5:bf:e9:
                    39:d7:57:c3:0b:c2:03:15:92:5f:18:fc:4d:c3:e3:
                    4d:65:35:eb:7a:26:0a:fe:bd:f0:86:aa:b0:a5:fa:
                    01:56:3f:ec:35:f6:3d:d9:24:a8:5c:2a:89:7d:c0:
                    04:2b:66:c4:a9:67:2c:7f:b8:82:cd:c6:cf:f5:da:
                    a4:2e:05:c0:ce:4c:33:98:f4:a5:8b:3f:51:fa:80:
                    06:af:91:9e:c6:71:17:14:17:c7:43:34:38:a5:d9:
                    5a:df:8e:04:53:d5:57:6b:ed:a4:49:17:9e:f1:a5:
                    00:41:19:46:3e:10:9e:b5:7b:29:ab:c8:c6:7e:99:
                    bf:00:2d:56:2e:12:d0:91:e1:9f:2f:f0:e9:33:3c:
                    4c:20:52:7b:06:8d:61:2d:15:ba:34:59:a9:6b:40:
                    6e:80:3a:3c:a3:68:0d:ba:f5:d1:f7:50:2d:be:4d:
                    a7:23:be:1e:85:7a:37:06:b0:a1:5f:85:92:b9:30:
                    30:81:fe:49:4a:3a:6c:26:c2:98:81:46:eb:5a:14:
                    b0:15:04:f5:b9:d7:03:e6:59:2a:72:ec:44:e2:1c:
                    d8:46:53:d8:9d:27:65:d9:37:51:b5:cb:f8:ac:71:
                    98:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A1:A3:28:90:C6:92:A3:73:24:3B:B8:2E:05:12:32:2A:3D:69:85
            X509v3 Authority Key Identifier:
                keyid:4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/F97DB5F229A111F090BC8163C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.77.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:74:d4:0a:24:3c:c8:35:ff:bd:f8:58:22:a3:2e:a2:15:f3:
         bb:e1:18:63:96:2d:fd:4b:b5:ab:36:d8:93:0e:d7:49:61:e6:
         d5:d5:91:f2:93:cc:e4:b9:a9:90:da:ff:f6:7d:da:23:14:f9:
         ca:2d:57:e4:39:f9:fa:c7:b2:1a:58:9a:ac:7c:ce:6e:b4:24:
         d3:a3:b3:c4:8e:27:2e:f3:19:2e:8a:9b:23:dd:11:1c:4c:bb:
         de:e0:d7:90:35:cb:35:47:12:28:f2:ae:66:f1:ff:1f:e3:6b:
         01:27:08:50:cb:37:98:59:ac:09:2f:db:26:ef:fb:43:05:e1:
         24:c1:ac:61:e2:ac:6a:92:a9:8e:f3:f9:b5:da:cb:03:23:a4:
         45:92:87:98:23:54:88:0e:03:ac:7c:b3:ff:86:6e:45:87:5f:
         74:ed:23:64:d6:39:98:23:7d:68:2e:21:f7:eb:be:cf:9c:92:
         82:67:09:d8:5a:f3:45:08:49:4d:a3:58:81:af:26:b3:f9:9a:
         29:b1:bf:2a:c0:70:50:8e:06:1d:85:3d:ce:01:65:52:db:9a:
         ab:f9:40:69:d8:2f:e8:6e:c0:2b:3f:cc:0a:bb:c5:b2:5d:0d:
         2a:d5:a1:3a:ad:e1:54:6e:7a:da:d3:89:e8:aa:88:cf:f3:5c:
         2a:b3:2a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:42:27 2025 by rpki-client