This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8EF40956C6C311F0BC8D5768C4F9AE02.roa
File:                     8EF40956C6C311F0BC8D5768C4F9AE02.roa (raw, json)
Hash identifier:          irOc+SCQPJu9fptaR4agbINpUIe2e3Aep2oXg8zraUA=
Subject key identifier:   2F:C2:E3:24:98:6D:2F:18:CB:F6:C4:15:C1:5A:AB:BC:9E:3B:25:80
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2023
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8EF40956C6C311F0BC8D5768C4F9AE02.roa
Signing time:             Fri 21 Nov 2025 10:19:27 +0000
ROA not before:           Fri 21 Nov 2025 10:19:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134303
IP address blocks:        160.25.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8227 (0x2023)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Nov 21 10:19:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69203caf-cf77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5f:55:9d:8d:e8:34:bc:4e:7f:b3:5a:5d:c8:
                    85:87:af:53:cb:f1:f7:90:ad:c2:19:bf:7e:03:67:
                    da:e6:a5:c9:a4:ab:8f:f4:e0:fd:94:d1:a8:bf:d2:
                    95:d0:b7:f7:7c:ec:08:ed:4b:73:95:90:46:17:50:
                    16:e8:38:28:4b:60:f1:4a:dc:f3:a7:52:52:b2:31:
                    17:8f:9d:8c:1f:34:b4:ee:d5:b2:c3:f0:89:89:0e:
                    5a:8d:c0:fa:ab:49:dd:bb:81:59:76:d3:82:6f:ba:
                    f0:f4:e4:da:5f:be:ab:9d:25:b1:d6:e7:a7:96:71:
                    0e:14:ad:ee:94:00:27:63:ac:db:b4:e4:5c:15:40:
                    0c:61:c1:43:39:fc:a2:88:a6:0b:3e:34:97:28:39:
                    81:1b:29:ae:35:b4:d4:b1:94:c9:9f:a6:98:e1:12:
                    79:48:6d:4b:df:de:42:33:04:8d:42:07:b2:88:c3:
                    f2:1a:0a:fb:81:d6:a0:57:eb:7c:2e:2a:0e:d0:38:
                    ba:60:18:a2:3e:2f:22:6c:f9:c0:f3:71:4f:ff:d3:
                    bc:06:6f:ad:be:e2:7e:98:96:66:ae:83:bc:23:0d:
                    47:0e:b9:d8:98:a9:9a:d3:23:54:fc:1d:9a:50:88:
                    49:ed:1b:01:bb:da:36:84:56:ea:d0:78:ac:2f:54:
                    03:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C2:E3:24:98:6D:2F:18:CB:F6:C4:15:C1:5A:AB:BC:9E:3B:25:80
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8EF40956C6C311F0BC8D5768C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:c2:de:2c:d4:a7:3a:9f:b8:1a:56:f2:38:c7:2b:6b:d0:37:
         69:a9:dd:19:ba:79:26:3d:33:30:5c:c9:32:2c:aa:54:41:e8:
         1e:01:8d:af:68:d3:c4:68:ef:d3:c5:b4:ef:24:bd:8d:18:70:
         68:3c:57:39:01:d3:39:ef:84:5a:72:db:40:7f:43:e7:c3:30:
         0f:67:d7:68:28:36:de:ab:8e:fd:f7:92:e4:31:e4:5b:e0:0f:
         72:de:14:42:34:bd:5b:67:e9:a4:20:6e:f8:4b:68:e6:68:6c:
         7b:50:80:12:fc:9f:03:35:a4:3c:ff:a4:d2:03:22:bd:d4:7e:
         31:f6:ea:57:67:67:df:f7:c6:e4:39:b5:91:58:23:29:6e:1a:
         f6:48:f0:6b:c8:19:d8:a9:10:2d:70:41:59:71:a0:87:a2:5a:
         ba:e8:3c:5c:32:36:d7:84:ad:f3:6b:cb:06:a5:c3:6e:c3:bc:
         26:7b:eb:f4:cd:57:45:80:02:b0:ef:6e:54:98:0b:42:82:b7:
         46:99:33:10:2a:26:42:ac:2f:4d:1e:fb:68:fa:33:9d:f2:a4:
         ac:40:d0:85:06:cd:6d:6a:94:ea:c1:16:78:01:71:9e:7d:5a:
         18:b5:71:df:c6:06:95:95:a4:78:4a:e7:d6:86:a3:ed:89:4e:
         75:da:d6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:34:36 2025 by rpki-client