This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/CD1FB5C2643611EFA2C41948C4F9AE02.roa
File:                     CD1FB5C2643611EFA2C41948C4F9AE02.roa (raw, json)
Hash identifier:          9MXU4baBCAJAJy9aPNxn57TypL0yxNcRqoUsf2K4Xic=
Subject key identifier:   66:B8:26:0A:10:BD:DA:32:29:C1:21:73:DC:D7:F3:0B:E8:2D:72:EB
Certificate issuer:       /CN=A91850AD/serialNumber=0F6B4720B0A35722D85F3446EFD4740BD341834E
Certificate serial:       F4
Authority key identifier: 0F:6B:47:20:B0:A3:57:22:D8:5F:34:46:EF:D4:74:0B:D3:41:83:4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/CD1FB5C2643611EFA2C41948C4F9AE02.roa
Signing time:             Wed 03 Dec 2025 04:02:56 +0000
ROA not before:           Wed 03 Dec 2025 04:02:56 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     139058
IP address blocks:        160.30.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.crl
                          rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:21:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91850AD, serialNumber=0F6B4720B0A35722D85F3446EFD4740BD341834E
        Validity
            Not Before: Dec  3 04:02:56 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=692fb670-9cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:df:84:a1:a3:07:60:17:da:78:69:99:7f:
                    d7:76:c3:c7:4c:da:a5:fa:77:da:bc:04:30:1c:63:
                    d6:e7:09:e0:49:d0:43:fa:5f:80:79:22:51:e3:a1:
                    29:d0:8d:e6:3d:da:9c:12:6f:6d:84:5c:c7:4d:33:
                    b9:62:13:a8:24:fc:cb:7c:57:20:7b:3a:6d:60:bc:
                    f1:34:35:37:72:56:34:db:4a:6e:33:74:73:fe:e1:
                    11:4c:2f:0f:79:78:1f:9e:e8:db:59:09:13:8c:f7:
                    f4:57:f0:e9:67:4c:ba:c7:d1:0f:65:f3:08:6d:5b:
                    ee:e3:21:c5:6b:d9:af:e4:93:02:3a:3c:6d:ba:c0:
                    c9:ca:cf:ea:75:b2:15:09:83:7c:b4:ad:54:bc:0f:
                    11:51:7c:ef:b2:26:f1:26:3c:ee:c1:24:b9:dc:70:
                    27:78:60:3e:31:9b:7a:79:7f:d3:22:a1:c2:c0:41:
                    ca:ce:a0:30:d3:9e:34:59:90:b8:68:8d:ea:20:e3:
                    4d:b6:6c:61:dd:8a:fe:b2:8c:20:01:73:29:32:97:
                    51:44:b3:e3:5f:f5:80:dd:37:3c:df:f5:1a:d5:55:
                    4e:47:ed:5e:b5:c0:67:bb:0d:1d:24:d6:02:04:2e:
                    bd:f0:76:26:90:e8:ca:f9:a1:09:e3:74:0e:c3:f6:
                    d5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B8:26:0A:10:BD:DA:32:29:C1:21:73:DC:D7:F3:0B:E8:2D:72:EB
            X509v3 Authority Key Identifier:
                keyid:0F:6B:47:20:B0:A3:57:22:D8:5F:34:46:EF:D4:74:0B:D3:41:83:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/CD1FB5C2643611EFA2C41948C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:68:63:5a:26:0c:e8:82:cd:dd:73:ff:41:d0:a5:20:35:20:
         6b:ab:e2:d1:e8:fc:83:f2:e0:47:22:80:2f:2d:e5:1f:1a:c1:
         6e:91:cb:f1:34:64:e1:76:58:27:8a:d9:16:4a:b1:a4:34:88:
         4c:86:4a:bb:99:cd:c3:3c:28:5d:3e:e0:20:12:67:11:e4:bc:
         f1:9b:f6:27:62:c9:82:e5:10:bd:13:d1:25:53:da:f2:31:96:
         9d:1c:a2:61:ef:1d:20:69:b8:9f:54:9d:14:73:56:25:83:1a:
         e2:10:8b:98:e4:03:10:23:04:5e:7f:97:7d:50:48:08:ac:a7:
         f6:7c:52:a1:78:14:49:aa:cd:05:f1:f7:07:e2:96:c0:10:69:
         a3:ef:58:b2:cf:3f:38:40:7e:81:3e:37:4c:b4:11:f1:c7:6b:
         9d:ed:48:b9:79:f1:31:f6:d7:e4:c1:c2:31:43:36:25:9c:e7:
         b0:a9:f5:a2:19:2c:04:4b:2d:53:3b:11:43:aa:d5:07:57:87:
         cb:fe:9b:80:1d:43:04:46:cd:2a:3c:f4:60:66:c4:5e:63:df:
         bf:53:8b:92:89:81:a0:41:d1:d4:20:33:f9:88:87:6e:9f:8b:
         fd:dc:e9:d1:1e:b1:62:e4:ff:c2:ae:87:23:4a:0b:c6:d7:cd:
         1c:64:7a:44
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUwQUQxMTAvBgNVBAUTKDBGNkI0NzIwQjBBMzU3MjJEODVGMzQ0NkVGRDQ3NDBC
RDM0MTgzNEUwHhcNMjUxMjAzMDQwMjU2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTJmYjY3MC05Y2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuyvfhKGjB2AX2nhpmX/XdsPHTNql+nfavAQwHGPW5wngSdBD+l+AeSJR46Ep
0I3mPdqcEm9thFzHTTO5YhOoJPzLfFcgezptYLzxNDU3clY020puM3Rz/uERTC8P
eXgfnujbWQkTjPf0V/DpZ0y6x9EPZfMIbVvu4yHFa9mv5JMCOjxtusDJys/qdbIV
CYN8tK1UvA8RUXzvsibxJjzuwSS53HAneGA+MZt6eX/TIqHCwEHKzqAw0540WZC4
aI3qIONNtmxh3Yr+sowgAXMpMpdRRLPjX/WA3Tc83/Ua1VVOR+1etcBnuw0dJNYC
BC698HYmkOjK+aEJ43QOw/bV+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFGa4JgoQ
vdoyKcEhc9zX8wvoLXLrMB8GA1UdIwQYMBaAFA9rRyCwo1ci2F80Ru/UdAvTQYNO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTBBRC82MEVCRTFBQzY0
MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9EMnRISUxDalZ5TFlYelJHNzlSMEM5TkJn
MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0QydEhJTENqVnlMWVh6Ukc3OVIwQzlOQmcwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODUwQUQvNjBFQkUxQUM2NDM0MTFFRjg0MkZDNjIwQzRGOUFFMDIvQ0QxRkI1QzI2
NDM2MTFFRkEyQzQxOTQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGgHrowDQYJKoZIhvcNAQELBQADggEBAGRoY1omDOiCzd1z
/0HQpSA1IGur4tHo/IPy4EcigC8t5R8awW6Ry/E0ZOF2WCeK2RZKsaQ0iEyGSruZ
zcM8KF0+4CASZxHkvPGb9idiyYLlEL0T0SVT2vIxlp0comHvHSBpuJ9UnRRzViWD
GuIQi5jkAxAjBF5/l31QSAisp/Z8UqF4FEmqzQXx9wfilsAQaaPvWLLPPzhAfoE+
N0y0EfHHa53tSLl58TH21+TBwjFDNiWc57Cp9aIZLARLLVM7EUOq1QdXh8v+m4Ad
QwRGzSo89GBmxF5j379Ti5KJgaBB0dQgM/mIh26fi/3c6dEesWLk/8KuhyNKC8bX
zRxkekQ=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:56 2025 by rpki-client