This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/158B72F480FB11ED9B35954DC4F9AE02.roa
File:                     158B72F480FB11ED9B35954DC4F9AE02.roa (raw, json)
Hash identifier:          obiTww85QuSqqaBr+wHlV1xXUBQMd397eQ+sOdxR/MM=
Subject key identifier:   C4:2E:B5:3D:8B:7C:C8:14:0A:B2:DB:D0:C7:23:5A:07:49:4C:8F:0B
Certificate issuer:       /CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
Certificate serial:       022B
Authority key identifier: B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/158B72F480FB11ED9B35954DC4F9AE02.roa
Signing time:             Thu 27 Nov 2025 00:47:28 +0000
ROA not before:           Thu 27 Nov 2025 00:47:27 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     58611
IP address blocks:        192.94.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl
                          rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EA40, serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
        Validity
            Not Before: Nov 27 00:47:27 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69279f9f-2def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:dd:22:08:29:80:fa:1d:3d:a3:3c:c6:31:
                    12:61:d3:a0:c2:58:94:e0:31:1a:b4:42:55:13:2c:
                    57:6f:ce:98:05:52:68:f5:91:44:e6:75:89:68:49:
                    43:7d:14:e7:a9:6c:8e:83:20:5a:c6:bb:12:5d:db:
                    97:f4:5c:d7:5e:ea:84:c5:ab:7d:49:a0:4c:b6:83:
                    7e:1c:d6:8a:1b:07:d3:ef:53:2f:6a:2c:f1:94:ff:
                    a9:44:50:c3:1c:df:d7:8c:03:79:05:f0:ab:e0:b8:
                    72:fa:90:4d:55:e2:02:4f:28:d0:df:a2:a9:2a:83:
                    2a:05:51:6a:9a:a9:e2:ab:a5:94:42:b1:99:f0:d4:
                    a2:5a:1c:8d:4a:1b:b8:d4:d6:87:c4:57:5c:01:2a:
                    70:e7:c7:eb:d8:96:bd:9d:b4:10:af:3b:a4:46:0b:
                    da:8b:e0:88:6d:6a:af:c7:bb:4d:95:fe:49:43:53:
                    d1:a1:6c:e7:9e:bc:84:e2:97:7a:69:be:0c:05:bf:
                    a4:65:07:01:e6:14:40:93:6a:18:d2:f6:45:d0:d1:
                    05:09:86:31:6d:c6:f0:27:ec:9b:b8:82:2e:21:59:
                    9d:24:51:21:77:29:8d:27:55:84:b9:65:90:aa:64:
                    a9:0a:94:f5:c8:08:f1:9d:81:9c:d3:c7:07:c4:5c:
                    ff:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2E:B5:3D:8B:7C:C8:14:0A:B2:DB:D0:C7:23:5A:07:49:4C:8F:0B
            X509v3 Authority Key Identifier:
                keyid:B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/158B72F480FB11ED9B35954DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.94.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:a7:67:0b:a5:bf:5a:99:16:f6:0e:ea:8f:1f:03:b2:80:c2:
         8e:4d:de:aa:d3:9a:ac:7d:f4:63:ca:1b:2d:de:46:c4:2b:ed:
         c6:21:50:3e:85:fc:26:a0:31:fe:cc:b2:f9:2f:ec:74:b4:a7:
         fb:7e:59:c9:0e:8a:96:63:f8:15:5e:0d:68:8c:ec:66:94:a8:
         07:70:41:5b:41:5a:88:7d:8b:72:ce:a4:5f:f3:ac:4d:95:77:
         5f:b9:64:7a:4c:76:ab:7c:b7:3d:77:95:11:94:e6:c7:c6:00:
         80:1e:a6:a3:0b:8d:fa:70:ef:d8:87:aa:a1:23:dd:ac:a8:03:
         5b:dc:9f:60:c5:71:6a:f5:34:d9:57:4f:d7:a3:e1:0c:2e:52:
         98:80:93:c1:29:cb:07:0d:7e:3d:8a:7c:84:9e:8f:c4:33:e3:
         e1:7b:1d:d6:b6:a0:1e:b2:b5:c2:8c:df:dc:75:f0:64:27:ea:
         40:d2:df:bb:08:28:d2:2a:5c:11:16:fc:0e:b0:1d:a6:33:94:
         46:4a:09:3f:1b:dd:dc:42:a5:05:39:cd:5b:ee:94:46:e6:9e:
         57:27:d2:f3:e3:4d:0e:f5:9e:fa:5f:0b:76:1f:d6:69:be:69:
         72:47:f6:33:aa:fc:9a:00:2b:df:8c:a4:99:d7:86:c1:fc:de:
         15:85:bb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:23:58 2025 by rpki-client