This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/E984676EB5E611F0BCCCFA59C4F9AE02.roa
File:                     E984676EB5E611F0BCCCFA59C4F9AE02.roa (raw, json)
Hash identifier:          e79uMm9d9d2sMrfZFQKyNez6EK836OZIdpe1x4pJt20=
Subject key identifier:   C9:9D:31:BD:5F:F8:40:43:9F:EA:04:BA:F9:84:64:DD:AF:BA:5E:DA
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0507
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/E984676EB5E611F0BCCCFA59C4F9AE02.roa
Signing time:             Fri 14 Nov 2025 22:18:22 +0000
ROA not before:           Fri 14 Nov 2025 22:18:22 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     150110
IP address blocks:        203.32.25.0/24 maxlen: 24
                          203.32.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1287 (0x507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Nov 14 22:18:22 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6917aaae-6c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:25:f7:11:12:2e:41:2f:ec:30:3e:31:78:c6:
                    d1:8b:6e:dd:66:f4:60:f2:da:ac:f8:72:62:0a:2a:
                    28:a6:f9:f1:bc:77:90:8a:d1:e7:f3:6c:39:3f:0f:
                    ab:57:b0:10:e3:cf:98:a7:7e:db:37:ab:69:1d:eb:
                    a4:40:86:56:8d:cd:f9:10:da:a9:23:9e:37:9e:72:
                    6d:0e:5b:63:30:76:9d:0f:10:29:8a:6b:8e:ef:b0:
                    38:30:5f:65:31:0c:a3:57:40:8b:45:18:95:f1:6a:
                    91:45:de:f6:cf:13:5d:93:fe:40:61:29:24:27:2f:
                    f2:b5:29:54:ae:09:97:92:b6:c9:63:c8:34:40:77:
                    83:28:a4:1d:24:11:46:a8:8f:8e:64:5d:a3:4a:90:
                    3c:cd:15:1f:1f:1f:9e:9d:d4:c1:b1:8e:b8:1c:c9:
                    64:3f:69:1e:28:72:7b:e4:a5:1d:fa:84:90:6d:98:
                    87:61:06:5f:42:48:8c:bf:b8:28:94:92:a5:86:4a:
                    1f:94:46:d1:24:d4:d4:75:81:04:6e:c1:46:fd:52:
                    9b:86:1d:c7:1f:66:56:f5:f6:b6:3d:5b:83:33:12:
                    27:11:9a:00:20:36:ee:58:8b:6e:6a:88:9f:ff:04:
                    3e:b1:f8:17:4e:d4:6a:26:aa:9b:74:9b:ec:db:14:
                    24:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9D:31:BD:5F:F8:40:43:9F:EA:04:BA:F9:84:64:DD:AF:BA:5E:DA
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/E984676EB5E611F0BCCCFA59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.25.0/24
                  203.32.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:f7:90:07:87:ad:0a:8a:e3:bd:94:69:db:eb:6a:e3:21:4e:
         8a:78:bd:04:01:01:b2:d7:30:a4:1b:40:f6:2b:1c:e1:ae:0f:
         70:da:0d:fe:14:da:5f:cc:ce:45:b1:74:5c:80:de:92:4b:3d:
         6f:b5:00:43:66:75:44:99:0c:d1:18:7c:57:b8:be:6f:51:9d:
         e3:4a:3a:17:b9:90:6d:f0:b9:e8:e4:6b:59:f2:09:26:35:a2:
         c3:93:e5:7e:0f:f2:37:b6:10:b1:23:5a:d6:2d:98:e9:15:75:
         8b:ba:36:0c:a4:9d:ae:e2:14:f7:d1:e5:e8:97:c4:52:91:e0:
         d3:3c:4c:ae:cf:d3:14:d6:b9:1a:25:ff:af:7b:65:45:b4:99:
         b3:bc:85:be:52:b6:45:38:25:dc:05:54:8e:f9:37:98:18:2a:
         61:1c:79:b4:91:c7:7e:83:a2:8a:ab:9e:61:0a:14:14:c2:13:
         24:73:cc:7c:24:0c:91:67:b5:4a:fb:7f:16:ea:64:a9:a3:2d:
         21:b6:ea:29:b2:a4:16:2e:13:6d:64:fc:e5:4a:a3:ed:12:04:
         c0:46:1c:e1:b0:1e:22:58:87:1d:28:83:ed:e7:56:be:09:23:
         e0:f1:10:36:46:76:0f:0f:6e:03:6b:44:5a:19:61:0e:bc:ff:
         32:bb:d2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:48:16 2025 by rpki-client