This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1BD3932CBED211F0B5F2A370C4F9AE02.roa
File:                     1BD3932CBED211F0B5F2A370C4F9AE02.roa (raw, json)
Hash identifier:          c01bsnic13AaJ0If083nXpGtiOpbPUGitz3BaVq78WA=
Subject key identifier:   CB:29:D5:71:94:66:14:DD:25:35:BE:A3:FB:FF:DB:1C:36:8D:CC:71
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1FF6
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1BD3932CBED211F0B5F2A370C4F9AE02.roa
Signing time:             Tue 11 Nov 2025 07:43:27 +0000
ROA not before:           Tue 11 Nov 2025 07:43:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     146865
IP address blocks:        160.30.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8182 (0x1ff6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Nov 11 07:43:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6912e91f-0d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c1:3b:78:57:1d:3c:c2:42:d3:8a:3e:e5:71:
                    27:56:9e:c4:bb:29:9d:0d:b1:f5:61:6c:19:21:54:
                    f1:96:c2:fd:f8:fc:1b:64:78:73:ce:a5:55:1b:ff:
                    05:8b:9a:db:43:c7:9e:a5:94:1f:24:0d:97:7d:cf:
                    bd:64:2f:9a:43:92:b2:3e:8b:aa:21:9c:d0:73:5c:
                    6d:d6:86:ac:b0:99:90:aa:74:8f:50:03:01:76:a5:
                    20:77:72:07:06:92:b8:d1:e0:6f:61:62:75:01:ff:
                    39:c7:d1:63:bf:d2:92:2d:4f:1d:77:8c:47:8e:89:
                    ce:2c:89:eb:63:7d:24:63:96:4d:cb:f4:0d:d1:4e:
                    e7:41:ca:00:ff:96:0e:18:95:f6:3a:6e:aa:86:78:
                    0f:f9:40:49:e4:7c:01:f2:1a:a1:d4:87:7f:c8:05:
                    fe:9f:aa:a4:1b:7d:1b:b7:8a:47:bb:ca:7c:31:23:
                    28:50:e8:7c:23:c2:9d:7e:12:27:93:b0:05:be:fd:
                    5e:77:e4:75:a3:63:3e:de:83:70:63:56:c9:67:7e:
                    22:06:5e:d5:b1:b6:89:e0:19:36:c1:20:27:72:96:
                    9c:e4:d1:23:46:94:6e:08:88:45:22:e2:6f:09:07:
                    4b:36:0c:a9:5a:d5:f6:70:f1:41:0a:6e:34:3c:92:
                    88:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:29:D5:71:94:66:14:DD:25:35:BE:A3:FB:FF:DB:1C:36:8D:CC:71
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1BD3932CBED211F0B5F2A370C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:bf:ad:1b:a8:52:52:24:dd:0b:33:6b:87:e8:d0:a7:3e:a1:
         a4:4c:67:72:ef:78:e9:80:ce:cc:eb:57:60:1d:ae:47:71:80:
         78:13:3f:cd:c3:c0:79:27:b8:e0:98:74:1c:de:5f:18:c4:05:
         83:a0:da:f7:d2:6b:ed:74:90:80:11:f8:fb:07:0c:22:2c:32:
         3e:3e:cf:a8:5f:45:d5:ae:aa:9c:54:48:bc:5c:21:77:09:88:
         95:e2:5d:52:89:ba:3e:bf:c2:32:26:a8:48:68:92:e6:09:c4:
         0c:0f:40:0c:8a:53:2e:81:a6:ec:2b:0f:ea:a7:96:e0:7b:34:
         ac:fd:79:94:c2:e3:f7:87:cf:20:6b:82:ab:f1:02:91:e8:95:
         7c:be:79:4c:a9:5f:90:41:76:7d:a2:77:ee:d3:03:37:69:61:
         a7:54:5c:6d:cf:0f:ef:43:db:ad:23:7d:2e:02:76:10:2d:97:
         4c:45:6d:89:81:d5:3a:55:e6:51:90:f0:aa:46:23:63:14:28:
         b7:fc:1e:11:80:23:ae:2d:32:6d:57:63:e5:ca:9e:09:99:89:
         32:70:b0:be:53:64:0a:f1:6f:28:01:09:67:a3:4e:27:4a:92:
         8a:a4:57:88:ca:78:b3:9b:31:a8:31:db:ac:a3:d5:b7:46:07:
         e2:5b:3c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:36:50 2025 by rpki-client