This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa
File:                     D66D72562EAB11EF9B369566C4F9AE02.roa (raw, json)
Hash identifier:          2SwNRMkj6T5I+xJhiTiqcowlNSulg8/xazw4aFKGVAU=
Subject key identifier:   CA:40:92:70:46:C6:E9:21:F0:99:4C:29:D0:E9:FB:88:57:94:6E:47
Certificate issuer:       /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Certificate serial:       015E
Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa
Signing time:             Thu 13 Nov 2025 02:12:37 +0000
ROA not before:           Thu 13 Nov 2025 02:12:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132139
IP address blocks:        185.81.70.0/24 maxlen: 24
                          185.81.70.144/29 maxlen: 29
                          185.81.70.160/29 maxlen: 29
                          185.81.70.176/29 maxlen: 29
                          185.81.70.184/29 maxlen: 29
                          185.81.70.192/29 maxlen: 29
                          185.81.70.200/29 maxlen: 29
                          185.81.70.208/29 maxlen: 29
                          185.81.70.216/29 maxlen: 29
                          185.81.70.224/31 maxlen: 31
                          185.81.70.226/31 maxlen: 31
                          185.81.70.236/31 maxlen: 31
                          185.81.70.238/31 maxlen: 31
                          185.81.70.240/29 maxlen: 29
                          185.81.70.248/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
                          rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
        Validity
            Not Before: Nov 13 02:12:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69153e94-c411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:6d:c9:39:04:74:da:cd:a9:85:37:be:d2:
                    c7:d3:87:96:ca:0d:8b:50:8f:e3:75:1e:79:2a:b2:
                    ec:e2:c8:7f:13:a5:52:ca:36:d8:25:49:ef:58:3a:
                    95:60:62:b4:d8:01:7f:58:cf:52:b8:b3:13:4d:3f:
                    a0:23:1b:04:38:e7:86:75:ca:0c:a3:07:ce:5f:6b:
                    4b:fe:b5:ef:b2:76:b1:c6:45:4e:55:c0:2b:36:d7:
                    12:65:5d:58:5a:e4:e7:85:bc:a9:2c:2d:64:ad:d4:
                    25:40:3f:91:8d:87:c8:93:4b:32:57:cc:8d:47:05:
                    a3:da:4a:78:4a:cf:80:5c:9f:3f:8e:2a:63:a4:4a:
                    c5:cb:6f:91:4c:3a:72:2c:49:eb:93:87:43:88:f6:
                    20:97:33:d2:ca:62:64:da:19:e0:66:db:51:0b:83:
                    3c:99:81:27:28:57:c1:88:41:d6:d5:50:5e:df:51:
                    07:29:80:dd:f3:03:2b:46:de:09:9d:21:bd:d6:61:
                    37:80:64:3e:33:7d:0e:a1:34:6b:58:4e:22:80:9c:
                    d7:6c:df:d1:08:77:05:ac:3a:b5:c6:de:20:2b:9d:
                    49:a8:16:2f:37:1d:67:ca:98:20:3a:34:cd:5a:8b:
                    b2:8a:69:91:6e:cc:bb:53:cf:5e:50:de:4b:30:1b:
                    05:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:40:92:70:46:C6:E9:21:F0:99:4C:29:D0:E9:FB:88:57:94:6E:47
            X509v3 Authority Key Identifier:
                keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:d5:09:b6:cf:76:62:eb:3e:de:00:07:be:62:17:69:d2:68:
         d9:6e:89:9c:9c:10:60:b0:b6:e0:8d:ef:36:f4:cb:1a:30:e8:
         a0:a8:4d:c3:3f:cf:0c:f2:ca:39:46:ad:49:7f:de:e1:1c:9e:
         6a:89:60:c2:2e:4f:9d:44:16:6b:68:d5:8d:d0:90:f3:6e:b6:
         8d:c0:b7:e9:64:60:81:3e:d3:fc:d9:a1:bb:85:24:75:0c:12:
         d3:e1:5e:05:60:b4:b0:e9:31:e9:c6:b1:ea:4e:08:bb:a9:db:
         db:40:72:1d:0b:5b:2e:a4:f3:d9:d4:6b:5b:c5:00:ef:47:f6:
         25:6f:79:fd:87:fe:ae:4d:c8:e7:d8:e7:f5:cb:0f:e3:c5:4d:
         38:81:1e:60:9f:e2:dd:d1:e4:d8:f2:cf:ad:e8:29:3b:bc:95:
         46:c4:4e:3c:4b:72:f4:1b:7e:01:00:b3:1d:9d:c3:fc:72:ef:
         e9:83:b2:1d:aa:ee:0a:47:98:e5:35:26:ca:40:4e:58:a6:40:
         91:44:f1:1a:25:a9:a0:f0:74:01:38:d0:ab:52:91:23:be:ce:
         7e:16:5a:c9:c8:51:15:2f:5e:68:b5:d2:63:25:0b:39:45:c4:
         f7:01:13:83:5e:3b:ee:a5:80:15:cc:e2:fb:25:bd:da:38:d2:
         2b:10:65:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:47:16 2025 by rpki-client