This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/45D237A423E211F0A5DCED27C4F9AE02.roa
File:                     45D237A423E211F0A5DCED27C4F9AE02.roa (raw, json)
Hash identifier:          KYNpwowTPF1wR7KTk50JO1GxjKATo9B/T8x/blAJYNY=
Subject key identifier:   82:55:40:3B:C8:F3:E9:3F:B0:3D:4E:61:BE:EE:01:28:C3:8D:E6:BC
Certificate issuer:       /CN=A9199656/serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6
Certificate serial:       70
Authority key identifier: C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/45D237A423E211F0A5DCED27C4F9AE02.roa
Signing time:             Sat 29 Nov 2025 05:03:26 +0000
ROA not before:           Sat 29 Nov 2025 05:03:26 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     45597
IP address blocks:        203.176.114.0/24 maxlen: 24
                          203.176.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl
                          rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199656, serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6
        Validity
            Not Before: Nov 29 05:03:26 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692a7e9e-6d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4b:a2:8d:b4:c2:79:3d:cc:dc:c4:34:04:6c:
                    50:60:eb:3d:f8:26:8a:37:e6:17:d0:46:18:4a:f1:
                    b1:51:e3:d5:9b:ec:d1:28:47:ec:21:ce:24:8a:7e:
                    b9:a8:90:f5:49:6b:6c:af:9e:f1:93:56:27:c9:d3:
                    c8:0d:a3:09:07:c4:1b:d7:ec:52:f0:e4:0e:27:b8:
                    fd:2d:d8:0c:3c:6d:f4:48:96:24:5b:9e:5c:63:cf:
                    0f:b5:af:67:3d:3f:28:88:aa:36:28:ef:47:59:f9:
                    c9:a7:7f:f1:89:04:72:98:4d:05:01:ee:26:61:12:
                    21:55:97:e7:f4:8c:1f:db:e3:5d:b2:04:c3:ff:d3:
                    3e:4e:09:cf:12:0f:80:d7:17:6b:58:73:19:07:aa:
                    76:12:d6:75:00:02:65:31:a2:a2:30:b6:d5:3a:8e:
                    29:15:26:35:f2:56:5d:0c:32:5e:46:60:a9:27:3f:
                    87:10:b9:23:f8:15:2d:c5:cb:8c:f7:5d:eb:88:e4:
                    b6:31:a4:7e:9b:e0:80:b3:fd:29:bc:96:31:c6:d1:
                    d9:0a:a9:5a:f9:cd:63:23:e3:8e:e9:99:06:d0:e1:
                    5a:47:f2:59:45:a1:85:5f:c0:39:d6:7b:26:b9:4d:
                    8e:5f:f9:dc:ea:42:0b:d1:d5:9c:d0:43:bc:63:e9:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:55:40:3B:C8:F3:E9:3F:B0:3D:4E:61:BE:EE:01:28:C3:8D:E6:BC
            X509v3 Authority Key Identifier:
                keyid:C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/45D237A423E211F0A5DCED27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.176.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:03:7e:bc:02:65:9c:ff:e9:91:a5:42:f9:84:9a:85:d1:91:
         8d:59:cf:c8:12:80:7e:67:c2:9e:95:93:f0:6c:73:b5:c9:48:
         04:45:96:2d:89:36:67:01:5a:70:8d:ae:76:97:61:25:1e:bf:
         e0:73:93:04:09:ff:8a:23:dc:5c:35:6e:e9:1f:18:e6:21:02:
         67:a7:d5:0c:3b:47:5c:12:1e:30:29:5d:50:cf:55:60:c8:7c:
         f6:af:8a:48:ee:cd:ae:7a:24:64:2d:92:1e:4d:78:f2:e3:5c:
         c8:a9:d2:98:4b:ae:39:7d:0e:9e:85:fb:e1:8b:5b:fb:92:1a:
         68:bd:9c:91:12:fd:9a:e1:0d:eb:a9:c8:f2:e5:64:64:57:c4:
         53:63:fa:c9:c0:b6:86:07:d4:6e:d8:cb:3d:5b:8d:49:4a:bd:
         2c:2f:bf:3c:7f:23:ce:9b:fb:c8:9b:bb:6b:c2:81:a2:87:28:
         33:15:07:7c:34:aa:5b:84:48:b5:fa:0a:09:6d:e3:f5:6a:99:
         a1:f0:3a:8e:1d:9a:16:0b:b6:1a:7c:2d:c0:99:24:db:82:32:
         a5:15:db:25:d7:e4:35:3e:10:be:9a:97:e3:7e:dd:d5:bd:35:
         ef:90:64:88:52:d8:a5:46:83:0b:d7:42:0e:ce:18:17:04:ef:
         22:8b:3f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:32:27 2025 by rpki-client