This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/8146430A45BE11EF92C29882C4F9AE02.roa
File:                     8146430A45BE11EF92C29882C4F9AE02.roa (raw, json)
Hash identifier:          PxmSFkrKdWSS0b/4HxHMD4OMFaotkeq0lZg48oiZtE4=
Subject key identifier:   39:07:DF:64:70:5E:2A:05:30:A8:1B:15:EB:FC:51:CA:3C:C1:5F:88
Certificate issuer:       /CN=A91B62A9/serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140
Certificate serial:       34E2
Authority key identifier: B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/8146430A45BE11EF92C29882C4F9AE02.roa
Signing time:             Sat 22 Nov 2025 15:01:10 +0000
ROA not before:           Sat 22 Nov 2025 15:01:10 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     55296
IP address blocks:        202.70.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13538 (0x34e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B62A9, serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140
        Validity
            Not Before: Nov 22 15:01:10 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6921d035-ae35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bd:80:86:97:e3:b8:48:3b:15:ab:90:a3:22:
                    b5:fd:8e:c9:04:10:0c:c4:fd:a3:3f:b3:cf:64:f2:
                    f4:51:d8:fc:58:55:ea:18:42:64:78:48:6e:db:b3:
                    6f:29:20:f7:4e:d6:4b:58:33:5e:46:e7:79:d5:44:
                    44:00:da:05:15:1b:e1:e4:16:bd:0c:65:75:63:d1:
                    51:9a:85:d6:a6:b1:b5:26:c6:48:c7:e8:70:41:04:
                    d2:9d:1b:0b:65:ef:1f:f3:a0:82:89:e9:94:b4:93:
                    db:fb:52:0a:b6:67:4c:58:4d:ad:c9:ee:2b:ac:82:
                    b4:9f:01:54:c3:51:7e:fd:b5:98:17:6b:ec:a2:56:
                    6d:80:05:07:81:df:b7:db:5c:c5:fa:55:6c:38:35:
                    b9:9e:27:22:05:ab:b1:6e:2e:71:b6:e1:71:99:80:
                    50:78:ca:c7:d6:3a:bc:39:95:97:22:58:b4:84:2c:
                    6f:5d:b3:4a:fd:f0:c2:2a:cb:b9:f7:f2:56:a2:fc:
                    66:19:0f:6d:7a:78:e3:98:ce:1d:15:7a:ec:4a:91:
                    83:13:dd:36:28:d0:07:79:53:da:f2:0d:e1:d6:64:
                    59:26:72:73:20:e7:b4:81:70:d8:2d:26:0e:e3:d9:
                    da:53:4c:c6:97:7d:29:be:29:32:16:60:ea:de:85:
                    17:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:07:DF:64:70:5E:2A:05:30:A8:1B:15:EB:FC:51:CA:3C:C1:5F:88
            X509v3 Authority Key Identifier:
                keyid:B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/8146430A45BE11EF92C29882C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.70.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:ca:de:f9:94:80:f2:82:bf:50:5b:7c:18:2d:78:88:fc:57:
         fa:9c:c6:bb:e9:7b:1c:55:51:f4:07:e9:a0:17:c4:45:2b:69:
         ea:84:66:79:8c:d2:4a:f8:61:7a:31:51:1c:cb:e0:a7:83:cc:
         cd:93:77:18:67:c3:02:e0:27:11:0e:16:c3:f6:c5:a7:9a:d4:
         a9:d2:95:d3:2c:86:49:15:87:ee:9b:cf:bf:2e:4d:5e:fc:33:
         28:be:1d:be:05:de:c7:8b:e1:55:93:bc:94:a6:9d:da:3b:d9:
         18:15:00:c2:35:67:71:b1:be:6b:21:a8:7a:ba:bb:2e:ff:f4:
         3e:b7:dc:ef:63:60:3d:34:d3:ec:25:68:4a:87:7d:e7:0f:52:
         fd:09:30:44:00:8a:c9:da:6d:c2:31:4c:21:b4:09:30:3c:3b:
         1f:8d:a5:24:a7:76:91:b7:75:65:c0:e7:b3:f2:de:f7:07:09:
         cd:7d:76:45:82:e1:b5:e3:c7:bf:88:f1:d4:7a:56:9a:b3:d1:
         3d:e5:61:01:dc:72:23:05:77:e1:0e:10:ae:54:f2:81:33:12:
         c8:2f:f3:de:f2:a7:0b:d7:8c:79:d5:91:7c:78:55:f8:97:f7:
         22:e7:d2:5b:46:3e:a7:c6:70:d6:f7:b1:96:b8:0d:76:52:d1:
         0a:fb:e0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:36:53 2025 by rpki-client