This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/E0B81ED0D56111EE9E1D7E5BC4F9AE02.roa
File:                     E0B81ED0D56111EE9E1D7E5BC4F9AE02.roa (raw, json)
Hash identifier:          oPhIXC+OF1ykzvnTk4LHIrBmTOI6SazQOAcqVDzTk04=
Subject key identifier:   1E:B7:C2:B4:30:0A:8C:37:85:D9:67:A7:AE:BD:77:01:90:6C:71:6A
Certificate issuer:       /CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
Certificate serial:       02AB
Authority key identifier: 7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/E0B81ED0D56111EE9E1D7E5BC4F9AE02.roa
Signing time:             Wed 03 Dec 2025 00:29:40 +0000
ROA not before:           Wed 03 Dec 2025 00:29:40 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150803
IP address blocks:        202.179.153.0/24 maxlen: 24
                          202.179.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl
                          rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D79, serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
        Validity
            Not Before: Dec  3 00:29:40 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=692f8474-b81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:21:a8:48:31:43:19:e4:19:5a:46:04:09:
                    70:1c:24:18:09:19:e9:a3:92:4d:81:e0:11:c8:39:
                    7b:77:96:04:73:0e:8e:19:41:00:75:c7:5d:28:63:
                    c0:74:80:fb:32:6e:db:94:5a:c8:a6:67:ab:19:34:
                    6f:98:b0:7b:68:30:d3:58:ab:a1:f6:e0:be:38:cd:
                    5c:89:60:81:58:72:d0:55:cb:62:69:2a:f1:c2:1c:
                    93:75:11:cd:f1:ef:be:b5:1d:d7:21:1a:cc:5d:86:
                    36:b5:25:6a:cf:d8:e1:ce:9d:ed:ad:e5:5b:2b:29:
                    a7:a2:5f:0c:f9:28:97:65:0a:5e:6b:df:2c:ad:77:
                    ea:ed:99:69:c0:0e:20:f3:dd:54:a4:e7:40:b2:6c:
                    32:05:c6:b1:63:58:30:26:d7:0b:60:f5:4f:5d:87:
                    3d:9f:4d:c5:ba:32:ff:45:5e:66:11:af:07:ff:1a:
                    e5:3d:e7:36:78:9b:fe:f2:d7:b9:7e:e7:60:cf:3a:
                    d6:85:50:38:5c:5d:e7:d4:1a:bd:1b:68:3c:27:d9:
                    4c:e3:14:1a:38:18:0f:d3:c9:20:d6:7e:c0:35:24:
                    e2:39:5e:16:86:9f:45:36:82:83:75:2c:86:40:cd:
                    30:4f:f4:15:51:d3:3d:5d:21:b0:2c:11:02:40:55:
                    b1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B7:C2:B4:30:0A:8C:37:85:D9:67:A7:AE:BD:77:01:90:6C:71:6A
            X509v3 Authority Key Identifier:
                keyid:7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/E0B81ED0D56111EE9E1D7E5BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.179.153.0-202.179.154.255

    Signature Algorithm: sha256WithRSAEncryption
         01:2b:a2:48:cd:b1:e5:54:ff:86:97:52:8d:55:46:31:41:8b:
         e1:5a:80:37:5b:ff:9a:ae:12:ac:14:c1:97:fa:c8:75:14:dc:
         20:0a:cc:c9:36:55:8b:a7:7a:60:44:16:8e:9b:b4:dd:9d:1a:
         b9:f0:1d:fc:bd:ae:d7:f5:6c:ea:dc:a9:42:09:35:cc:8b:22:
         fb:33:7f:38:dc:59:95:c1:31:ff:0d:71:44:59:7c:e0:90:de:
         38:64:86:18:85:67:e1:5f:b4:e9:1c:3c:4d:dd:dc:39:dd:a6:
         94:dd:8e:a5:51:0e:67:96:58:18:6c:63:11:d4:0a:9c:13:ab:
         bc:4b:26:ff:e7:34:12:61:39:2f:0b:ef:07:ae:16:b3:94:5a:
         90:94:01:e7:11:09:18:53:3d:ea:f2:db:77:0d:a2:db:0a:93:
         b7:c3:4d:66:73:a0:9a:c5:d4:80:61:cf:e4:36:7f:d6:4b:ca:
         90:c2:b7:90:ca:56:e2:f7:a7:97:3f:5e:c2:71:8d:ad:c9:e3:
         cb:41:7e:0b:33:5f:4d:b8:4f:b4:9f:3a:96:70:3a:ed:49:cd:
         9b:25:c6:ec:68:ef:1f:ab:96:06:5b:da:03:87:43:7f:91:65:
         c6:1c:90:9e:f4:37:29:ac:16:7e:26:56:25:39:b9:be:c9:2d:
         af:7a:2f:2b
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICAqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVENzkxMTAvBgNVBAUTKDdBM0Q3RDM3NDhDNzg5ODZDMkM1RTUwQjUwMTNCRUI2
MEFCNDdBREMwHhcNMjUxMjAzMDAyOTQwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTJmODQ3NC1iODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApWYhqEgxQxnkGVpGBAlwHCQYCRnpo5JNgeARyDl7d5YEcw6OGUEAdcddKGPA
dID7Mm7blFrIpmerGTRvmLB7aDDTWKuh9uC+OM1ciWCBWHLQVctiaSrxwhyTdRHN
8e++tR3XIRrMXYY2tSVqz9jhzp3treVbKymnol8M+SiXZQpea98srXfq7ZlpwA4g
891UpOdAsmwyBcaxY1gwJtcLYPVPXYc9n03FujL/RV5mEa8H/xrlPec2eJv+8te5
fudgzzrWhVA4XF3n1Bq9G2g8J9lM4xQaOBgP08kg1n7ANSTiOV4Whp9FNoKDdSyG
QM0wT/QVUdM9XSGwLBECQFWxfQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFB63wrQw
Cow3hdlnp669dwGQbHFqMB8GA1UdIwQYMBaAFHo9fTdIx4mGwsXlC1ATvrYKtHrc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ3OS9CRjE5NEQ4MDI4
M0QxMUVEQTk0NDczM0RDNEY5QUUwMi9lajE5TjBqSGlZYkN4ZVVMVUJPLXRncTBl
dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VqMTlOMGpIaVliQ3hlVUxVQk8tdGdxMGV0dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODVENzkvQkYxOTREODAyODNEMTFFREE5NDQ3MzNEQzRGOUFFMDIvRTBCODFFRDBE
NTYxMTFFRTlFMUQ3RTVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAMqzmQMEAMqzmjANBgkqhkiG9w0BAQsFAAOCAQEAASui
SM2x5VT/hpdSjVVGMUGL4VqAN1v/mq4SrBTBl/rIdRTcIArMyTZVi6d6YEQWjpu0
3Z0aufAd/L2u1/Vs6typQgk1zIsi+zN/ONxZlcEx/w1xRFl84JDeOGSGGIVn4V+0
6Rw8Td3cOd2mlN2OpVEOZ5ZYGGxjEdQKnBOrvEsm/+c0EmE5LwvvB64Ws5RakJQB
5xEJGFM96vLbdw2i2wqTt8NNZnOgmsXUgGHP5DZ/1kvKkMK3kMpW4venlz9ewnGN
rcnjy0F+CzNfTbhPtJ86lnA67UnNmyXG7GjvH6uWBlvaA4dDf5FlxhyQnvQ3KawW
fiZWJTm5vsktr3ovKw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:56:26 2025 by rpki-client