This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/197A8B3CD23611EF9EA7495DC4F9AE02.roa
File:                     197A8B3CD23611EF9EA7495DC4F9AE02.roa (raw, json)
Hash identifier:          C6tDI3rJ/iD8oB/JqL4h4hgvRMylwXHdbQGCV6gQBXs=
Subject key identifier:   76:48:A2:A7:22:8A:C9:99:7C:10:6B:83:B1:C6:C9:61:E2:4B:4C:02
Certificate issuer:       /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Certificate serial:       A9
Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/197A8B3CD23611EF9EA7495DC4F9AE02.roa
Signing time:             Fri 05 Dec 2025 04:14:45 +0000
ROA not before:           Fri 05 Dec 2025 04:14:45 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     7604
IP address blocks:        160.250.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl
                          rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
        Validity
            Not Before: Dec  5 04:14:45 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69325c35-51e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:58:04:10:c0:44:0a:f1:bc:2f:27:6c:c9:
                    df:a8:aa:e5:b2:3a:93:ea:1d:98:c2:4f:2b:45:53:
                    d5:e6:73:e8:ce:c9:9c:f9:8d:76:69:1c:d4:9b:2c:
                    e3:e7:79:24:17:dc:34:24:67:28:30:b2:22:ff:5a:
                    b1:e2:d9:11:27:08:75:f0:ff:85:6c:3c:9b:1a:b2:
                    69:85:c4:56:b1:66:ff:77:a8:6e:4e:f4:37:a8:02:
                    fa:f3:03:5c:62:66:d1:af:c6:67:da:03:4d:77:57:
                    c2:96:d1:15:a6:ea:d6:de:40:f8:4c:7e:56:c4:6e:
                    f0:b5:10:6f:01:2f:2e:5a:d6:73:1d:d3:32:75:ad:
                    5d:dd:ad:4a:f6:2e:96:46:f1:e1:1d:15:ef:09:6f:
                    d1:3e:60:01:7a:fd:40:45:63:0f:7a:90:fc:fa:0d:
                    11:94:ae:08:68:e6:8b:8c:22:31:98:96:66:2b:98:
                    e8:ca:26:a3:8f:2c:4e:fa:57:8a:57:df:90:42:eb:
                    49:da:f2:06:f1:88:a2:4f:b2:70:7f:bf:f2:3f:11:
                    5f:3b:a5:b2:f2:9d:85:c2:a1:ca:75:15:ac:d8:98:
                    45:65:a2:2b:dd:e7:88:c2:95:f2:83:8c:cd:f6:2d:
                    01:8f:76:a7:4f:80:61:f9:f1:21:58:f6:4b:00:c8:
                    40:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:48:A2:A7:22:8A:C9:99:7C:10:6B:83:B1:C6:C9:61:E2:4B:4C:02
            X509v3 Authority Key Identifier:
                keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/197A8B3CD23611EF9EA7495DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:24:38:74:c6:19:73:43:4b:68:05:8d:7a:4e:15:98:09:d2:
         d4:8d:5b:f5:07:f4:84:e5:f2:19:03:32:c7:50:5e:e4:a2:4a:
         6a:53:01:e0:9c:58:c3:84:02:1b:03:fc:39:b6:5e:54:52:05:
         c9:21:f1:a0:c9:30:fa:b7:0d:4c:98:85:a3:56:7a:09:56:ee:
         40:b5:36:b1:f7:b5:50:bf:2e:e0:2e:e5:94:d3:e8:63:e8:e9:
         14:c7:35:94:a5:f4:b5:d1:9e:d4:ab:c9:5e:15:36:01:5b:18:
         5f:d0:29:30:2c:3a:17:da:e7:5d:13:a7:9b:2e:b7:da:91:70:
         33:d5:be:55:be:5c:44:6a:a1:ef:34:2e:60:5a:a6:01:8e:1c:
         ba:58:2e:07:e4:e9:bc:6f:7a:64:76:56:61:fa:17:fd:f0:37:
         61:f2:37:20:c7:d1:bb:78:d3:b8:80:22:aa:63:43:a7:1e:d0:
         fe:bf:0c:1a:fb:ae:7f:79:56:2c:38:dd:67:eb:db:af:85:8b:
         ca:40:a2:0a:65:19:f5:a7:07:bd:a1:dc:88:87:93:19:25:60:
         2b:c2:05:61:f5:fd:67:5f:36:18:46:3b:71:db:f9:0f:2c:77:
         82:03:69:fa:fc:30:07:d3:87:4c:8b:dd:af:8d:9a:1e:54:c1:
         20:0d:1d:81
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA0QjkxMTAvBgNVBAUTKDI3NkRDRjNGMjM0MUFEQzdEMEJDNDZGMzYzNDRGNzE1
NjAwRDlBNTgwHhcNMjUxMjA1MDQxNDQ1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTMyNWMzNS01MWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArtNYBBDARArxvC8nbMnfqKrlsjqT6h2Ywk8rRVPV5nPozsmc+Y12aRzUmyzj
53kkF9w0JGcoMLIi/1qx4tkRJwh18P+FbDybGrJphcRWsWb/d6huTvQ3qAL68wNc
YmbRr8Zn2gNNd1fCltEVpurW3kD4TH5WxG7wtRBvAS8uWtZzHdMyda1d3a1K9i6W
RvHhHRXvCW/RPmABev1ARWMPepD8+g0RlK4IaOaLjCIxmJZmK5joyiajjyxO+leK
V9+QQutJ2vIG8YiiT7Jwf7/yPxFfO6Wy8p2FwqHKdRWs2JhFZaIr3eeIwpXyg4zN
9i0Bj3anT4Bh+fEhWPZLAMhAcQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHZIoqci
ismZfBBrg7HGyWHiS0wCMB8GA1UdIwQYMBaAFCdtzz8jQa3H0LxG82NE9xVgDZpY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDRCOS9DRTg0MDU2OEQy
MzUxMUVGOEZFMjlDNUNDNEY5QUUwMi9KMjNQUHlOQnJjZlF2RWJ6WTBUM0ZXQU5t
bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0oyM1BQeU5CcmNmUXZFYnpZMFQzRldBTm1sZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTA0QjkvQ0U4NDA1NjhEMjM1MTFFRjhGRTI5QzVDQzRGOUFFMDIvMTk3QThCM0NE
MjM2MTFFRjlFQTc0OTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACg+iIwDQYJKoZIhvcNAQELBQADggEBAEMkOHTGGXNDS2gF
jXpOFZgJ0tSNW/UH9ITl8hkDMsdQXuSiSmpTAeCcWMOEAhsD/Dm2XlRSBckh8aDJ
MPq3DUyYhaNWeglW7kC1NrH3tVC/LuAu5ZTT6GPo6RTHNZSl9LXRntSryV4VNgFb
GF/QKTAsOhfa510Tp5sut9qRcDPVvlW+XERqoe80LmBapgGOHLpYLgfk6bxvemR2
VmH6F/3wN2HyNyDH0bt407iAIqpjQ6ce0P6/DBr7rn95Viw43Wfr26+Fi8pAogpl
GfWnB72h3IiHkxklYCvCBWH1/WdfNhhGO3Hb+Q8sd4IDafr8MAfTh0yL3a+Nmh5U
wSANHYE=
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:35:50 2025 by rpki-client