This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/58256D9AC4A711EEBE4ED82BC4F9AE02.roa
File:                     58256D9AC4A711EEBE4ED82BC4F9AE02.roa (raw, json)
Hash identifier:          MSiqxpYJFTj1mqJsP/FHM6nzHWsaFOCAoH2CBWgeUBc=
Subject key identifier:   CC:EF:C3:9F:6B:45:C6:E4:E2:69:70:17:BE:DD:3D:00:7A:1C:A0:DB
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2056
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/58256D9AC4A711EEBE4ED82BC4F9AE02.roa
Signing time:             Tue 02 Dec 2025 08:08:45 +0000
ROA not before:           Tue 02 Dec 2025 08:08:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150099
IP address blocks:        157.10.92.0/24 maxlen: 24
                          157.10.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8278 (0x2056)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Dec  2 08:08:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=692e9e8c-49b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4b:de:f0:4d:59:2f:a5:8a:5a:bf:dc:3f:89:
                    24:de:9e:ac:09:81:fd:db:48:18:92:5e:da:5b:f2:
                    10:e7:c3:0c:63:69:2b:4d:5f:db:d2:1b:e5:fc:4b:
                    12:c6:2b:1f:7c:34:e5:62:45:54:2e:a7:7a:e9:93:
                    5a:24:d9:50:26:07:f3:c6:74:c7:6b:15:3c:d2:8f:
                    31:06:10:af:32:12:54:1b:bf:60:e3:e3:72:62:4f:
                    4e:78:91:62:15:33:7a:6f:ca:28:86:66:7d:4e:4f:
                    f9:ca:e7:33:1b:3a:da:3f:4a:b7:41:46:50:95:4d:
                    7d:0f:7d:88:a3:df:e1:8d:9d:1a:2e:eb:75:6c:3d:
                    ec:99:52:e8:c9:fc:87:5b:87:76:3e:48:b5:90:4d:
                    e5:d8:18:14:b9:90:53:e3:a3:fd:5c:92:d2:f6:b2:
                    03:04:cb:57:12:4e:e9:20:ca:8c:c6:25:5d:e7:ac:
                    ce:f5:cf:3b:d4:bf:16:04:1d:57:f6:4f:18:9b:7e:
                    3f:a9:ec:29:8b:ae:c9:09:5b:1e:9a:a0:64:be:9c:
                    bd:6b:41:3a:cd:dc:c2:40:60:10:0a:05:1c:ec:23:
                    64:ae:99:5f:fd:09:f9:ea:e6:8a:4c:b1:6a:d4:d0:
                    0b:63:85:50:e6:7e:82:8a:f0:0f:e6:29:38:45:96:
                    28:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EF:C3:9F:6B:45:C6:E4:E2:69:70:17:BE:DD:3D:00:7A:1C:A0:DB
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/58256D9AC4A711EEBE4ED82BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:3f:29:cb:36:52:6b:65:8c:18:43:91:48:6b:26:64:20:73:
         1e:bb:15:37:c2:5e:eb:b1:67:7a:30:0d:ec:67:e9:e7:fa:60:
         d6:4c:56:67:98:4a:db:f6:d1:b1:33:15:62:bb:fa:f8:8c:ae:
         b8:7a:b5:5c:16:37:de:f9:18:20:1c:2d:92:ec:95:fc:43:d9:
         14:9b:00:0e:1c:cf:b0:0f:91:af:6b:91:42:b7:8f:2d:d4:5b:
         5e:29:11:cd:28:91:ed:31:d7:77:ec:c0:84:7b:84:e2:ee:87:
         dc:a2:7d:70:86:9f:3f:45:75:36:4e:c2:24:29:4d:de:cf:e3:
         58:a7:8d:25:af:c3:10:03:b0:36:51:16:ff:18:03:b0:8a:f5:
         27:5a:b0:cf:df:ff:66:f7:a0:bc:76:82:98:58:72:4c:e3:a9:
         b2:bb:80:8b:5d:72:21:13:45:62:99:fa:d1:0c:a8:51:8b:e8:
         39:db:8b:fe:5c:78:b9:44:ce:e3:3b:aa:57:e5:f0:a0:0d:45:
         28:fa:25:36:6c:66:1d:8e:b4:f1:7c:52:1f:41:a7:e8:0a:4d:
         e1:3c:31:14:0d:bf:28:c2:83:a9:fa:e4:51:65:ee:25:0d:0d:
         67:07:d6:1a:96:f5:21:56:90:38:52:fc:97:9f:8c:02:f3:0e:
         5b:dc:90:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:04:53 2025 by rpki-client