This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/44CA8E9C7A2811EFA43D2558C4F9AE02.roa
File:                     44CA8E9C7A2811EFA43D2558C4F9AE02.roa (raw, json)
Hash identifier:          IopOLzyoiLCS9DuArgxxC5PhW+0+R++YJlwEljeOSys=
Subject key identifier:   F8:F0:54:DB:51:2F:DB:1F:27:72:3A:C4:D1:6D:A7:D7:4B:66:E7:4D
Certificate issuer:       /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Certificate serial:       0A67
Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/44CA8E9C7A2811EFA43D2558C4F9AE02.roa
Signing time:             Sat 08 Nov 2025 19:09:56 +0000
ROA not before:           Sat 08 Nov 2025 19:09:56 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        137.220.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl
                          rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2663 (0xa67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
        Validity
            Not Before: Nov  8 19:09:56 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=690f9584-4e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4e:4b:33:5f:7e:45:48:07:8f:e9:84:6d:20:
                    b3:44:63:67:67:f1:5b:fd:99:e3:3d:f0:b4:ae:04:
                    ff:42:03:da:5a:6d:d6:1f:2c:91:a7:2a:5e:ed:9c:
                    37:62:05:fb:e5:79:e8:fe:7a:e8:c4:55:f7:8f:83:
                    ef:79:cd:4a:8f:f4:32:72:47:cf:14:6a:b3:77:c0:
                    b1:e4:93:72:8d:8f:ae:8e:31:e1:5d:9a:1f:54:92:
                    d2:f5:29:3c:04:9d:39:5a:d5:5b:48:f5:cb:f0:be:
                    aa:45:ea:6e:6a:b6:f5:85:68:3a:b2:57:be:81:2a:
                    97:c8:e0:f6:7e:0b:86:ae:c7:7e:71:ef:6d:a0:db:
                    92:68:b0:be:94:41:44:00:be:42:38:ee:85:6c:6f:
                    d1:14:07:80:c7:f1:ae:cd:e4:2f:85:c9:c4:8b:b1:
                    16:6f:4e:be:89:e7:f7:8d:c6:78:85:db:72:76:6d:
                    4f:e0:7a:d1:ea:92:79:62:50:41:a4:89:f4:76:69:
                    20:e1:9d:21:59:b0:d5:c9:82:85:9b:23:41:5f:65:
                    fa:19:65:29:fc:c8:56:42:0c:8b:f1:af:34:2d:4a:
                    4b:89:12:f9:01:b6:c4:de:78:aa:ef:58:ed:35:1f:
                    c3:04:93:20:3a:ad:70:b5:22:28:c2:d5:93:fd:cc:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F0:54:DB:51:2F:DB:1F:27:72:3A:C4:D1:6D:A7:D7:4B:66:E7:4D
            X509v3 Authority Key Identifier:
                keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/44CA8E9C7A2811EFA43D2558C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.220.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:7b:84:c0:78:5b:c6:b6:bf:b0:56:96:1f:14:f9:4b:f8:37:
         70:8e:46:b6:d9:40:d6:2c:f0:bd:13:f6:85:06:72:7d:55:dc:
         96:d6:11:f0:37:7c:3d:46:3b:21:0f:90:38:75:f8:a4:5b:44:
         bd:53:e8:3f:13:97:3c:d2:c5:c9:fe:4b:e6:ce:be:9a:60:54:
         7e:26:56:a2:4d:a8:a8:c7:87:ae:80:65:46:32:b7:93:a1:e3:
         cf:c5:d2:d0:7a:2e:38:f4:66:9c:81:71:08:71:8c:82:75:8f:
         e4:fa:a0:92:12:7a:bd:f8:dd:ef:4b:5f:29:f9:68:b7:bd:70:
         aa:ed:95:8f:b8:cf:63:22:0b:68:a7:8b:76:a4:98:92:0f:a8:
         78:58:83:9b:8b:26:ff:a1:e2:8f:76:6a:6a:4d:f5:f5:48:42:
         6f:b6:7b:7d:73:9c:37:76:40:40:d9:72:85:82:fc:91:a1:bd:
         e6:76:22:04:d8:72:aa:a3:38:9e:ec:62:5a:c6:33:db:a4:8a:
         e6:5d:8e:8b:88:34:6b:ea:b6:a6:72:4f:55:e9:ed:8e:28:56:
         5f:a4:b9:40:02:db:29:21:aa:db:81:19:34:0b:01:73:e3:8b:
         b2:cf:01:90:84:7c:87:20:08:da:ea:3b:74:66:7e:11:fb:11:
         95:a2:bf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:44:06 2025 by rpki-client