This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/5495EE5C9B4311EF87E5073DC4F9AE02.roa
File:                     5495EE5C9B4311EF87E5073DC4F9AE02.roa (raw, json)
Hash identifier:          mh3i+eoWpCQ7ATsRcfbcAmbVbj1O3ZcB7aHSJUdU7dU=
Subject key identifier:   FE:65:63:68:0A:31:07:57:C7:85:82:47:B8:00:61:25:73:CF:0C:E0
Certificate issuer:       /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B
Certificate serial:       D7
Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/5495EE5C9B4311EF87E5073DC4F9AE02.roa
Signing time:             Wed 19 Nov 2025 03:51:25 +0000
ROA not before:           Wed 19 Nov 2025 03:51:25 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     153337
IP address blocks:        160.187.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl
                          rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D4E, serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B
        Validity
            Not Before: Nov 19 03:51:25 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=691d3ebd-eb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bd:37:fb:c0:8a:c8:b7:1a:5a:2f:20:70:b5:
                    a6:12:86:9d:23:0b:ac:ab:b4:f1:ad:ab:51:df:19:
                    98:5b:f4:92:03:4a:60:12:d6:eb:cf:13:cf:c5:46:
                    09:0b:1d:fe:5c:46:26:1f:b2:57:80:99:0b:8f:8f:
                    51:4e:92:30:e9:de:84:18:ec:28:7c:06:73:83:55:
                    37:70:9b:fa:04:db:11:72:b5:f8:6c:43:80:c4:52:
                    13:bd:81:02:9d:3b:d0:ab:52:4b:39:7e:5d:a6:7e:
                    f0:bb:56:23:ea:4f:4a:3a:0a:07:d4:ba:cb:88:d8:
                    ae:92:67:2b:cd:ef:59:6b:b9:80:a5:e3:99:f3:24:
                    3f:0a:a7:23:d4:75:31:26:25:b0:0a:43:92:9e:e3:
                    6a:fc:b4:33:08:04:a6:a5:d7:ab:e4:74:a9:5b:31:
                    a6:b0:92:ef:54:bf:f5:cf:3f:93:9d:cd:4b:ac:48:
                    c3:78:f8:3f:b3:5e:60:41:90:a4:6b:da:fb:d0:f1:
                    c2:69:b7:10:cb:0c:0d:6b:15:45:db:ab:e0:f3:85:
                    a5:b3:2c:5a:de:8a:df:94:21:e8:16:bd:a2:49:5c:
                    70:56:7f:48:39:fd:21:96:53:60:74:6f:3f:71:ed:
                    ff:fc:d9:a3:b5:d8:c1:4e:4b:c4:67:ac:ff:5d:ff:
                    04:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:65:63:68:0A:31:07:57:C7:85:82:47:B8:00:61:25:73:CF:0C:E0
            X509v3 Authority Key Identifier:
                keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/5495EE5C9B4311EF87E5073DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:6c:ff:aa:35:1d:d4:ef:a1:f4:e2:8e:f9:05:ca:79:67:5f:
         2d:d6:9b:b5:22:28:88:39:fa:cd:c6:2e:91:6b:2d:cf:96:96:
         1a:96:17:0d:f9:e5:e1:4e:6d:1e:9b:d9:ee:21:f5:18:72:3b:
         d3:2d:37:4a:6a:c3:fb:15:68:55:be:a1:32:ba:77:e7:96:30:
         17:97:85:a9:8b:5c:c0:60:56:b2:f8:4b:d1:05:07:1b:0b:7d:
         dc:b6:f7:52:76:54:8d:c7:19:c7:b8:16:3b:30:d7:6d:98:16:
         4a:92:17:32:e7:d5:4f:c6:4f:74:fc:21:c1:c0:d1:2a:02:a4:
         68:4c:eb:5b:07:12:8e:d5:e0:79:0b:0e:74:7f:e9:bb:c0:a4:
         3b:52:6d:04:83:46:a2:a3:df:87:75:bd:d9:50:88:c8:c0:ab:
         a3:8f:00:ea:76:4c:6f:8f:56:87:df:2e:05:20:57:41:3c:76:
         2a:2b:59:c0:d6:90:92:a3:cd:30:d3:45:c9:a1:b6:77:1b:38:
         76:7c:87:57:c7:6f:cb:b6:96:3e:1d:9c:eb:65:16:c0:97:00:
         ee:73:48:69:fd:7f:a1:69:ad:52:9a:e3:fa:bc:af:ec:16:0d:
         5f:79:65:a9:b7:bb:8f:53:1f:17:b5:df:8f:c3:7c:d4:22:75:
         fd:4d:4f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:46:28 2025 by rpki-client