This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/7155C8563E5E11EAB043A522C4F9AE02.roa
File:                     7155C8563E5E11EAB043A522C4F9AE02.roa (raw, json)
Hash identifier:          M3bsS+Xk9LNsygw5XkjDTpnJwQmvk0v371BaGHqkpV4=
Subject key identifier:   24:B9:67:BB:E1:10:00:C6:C6:8A:A7:15:DA:C0:35:C4:B9:CA:4B:8E
Certificate issuer:       /CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B
Certificate serial:       0CAC
Authority key identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/7155C8563E5E11EAB043A522C4F9AE02.roa
Signing time:             Thu 04 Dec 2025 17:58:59 +0000
ROA not before:           Thu 04 Dec 2025 17:58:59 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     45638
IP address blocks:        198.244.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3244 (0xcac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3A3, serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B
        Validity
            Not Before: Dec  4 17:58:59 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6931cbe3-cda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:7d:57:59:2e:d5:18:05:49:5b:6b:1f:de:
                    53:ee:79:95:0a:47:cd:0e:80:8a:56:05:33:b4:7f:
                    3f:9b:91:b2:2b:be:08:a0:bb:9a:d7:1a:ec:71:1b:
                    31:21:da:0d:21:85:30:6d:8e:da:9f:6c:ac:3c:d0:
                    65:41:95:de:e4:a4:cd:b1:b8:89:46:66:c0:9e:3a:
                    7b:03:f2:16:43:09:3c:30:8c:ad:1f:f4:19:48:80:
                    b6:36:51:33:96:dd:7a:f9:5b:ab:51:a4:36:32:c2:
                    f6:16:6c:41:c6:81:f5:d4:4c:00:de:47:b7:5d:a5:
                    74:f2:ca:09:62:ac:30:bf:a3:97:b5:ec:b5:2f:a0:
                    5d:c7:56:c4:e1:f6:9a:db:ba:f1:36:9b:84:ef:9b:
                    5d:a8:11:55:e2:d4:08:6d:11:1a:c0:bc:1b:cc:47:
                    ed:96:5a:23:3f:f7:c8:3e:d2:f7:78:57:9a:b0:e2:
                    99:8b:27:09:13:2c:f7:c0:47:70:6e:6c:29:c0:cc:
                    bc:16:51:2c:93:de:07:7c:1c:44:b0:8b:8e:ac:fb:
                    26:81:96:b5:33:13:fa:a6:5d:7c:80:94:91:1d:2c:
                    59:60:55:bc:dd:f6:4f:b8:17:08:70:22:c6:6f:60:
                    d3:ec:61:9a:14:12:42:ae:db:68:18:77:64:10:19:
                    10:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B9:67:BB:E1:10:00:C6:C6:8A:A7:15:DA:C0:35:C4:B9:CA:4B:8E
            X509v3 Authority Key Identifier:
                keyid:44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/7155C8563E5E11EAB043A522C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.244.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:60:9b:d1:ca:6e:47:5e:1c:7b:ae:e1:39:0f:08:07:d1:88:
         34:d3:c6:d4:83:c1:82:02:11:b4:ca:1d:e9:81:c3:06:d8:fb:
         8b:5b:68:19:ce:31:fb:07:f0:35:c6:ea:23:d9:f5:f6:a1:c4:
         68:1a:11:d6:d2:43:9d:61:a9:d3:8f:05:d5:11:bf:5e:b1:8a:
         ef:cc:0e:3c:d0:b4:9f:69:20:2e:87:99:c0:90:19:b1:09:d7:
         22:df:0d:fc:d3:5a:7f:c5:6e:f9:98:9a:b3:28:31:57:46:ce:
         1a:d5:a8:2c:04:b9:da:5d:5b:8c:cd:e7:3c:b1:cc:7d:76:e6:
         f7:df:39:8f:de:8c:35:77:c9:39:04:29:65:a0:ad:b3:66:ab:
         1d:55:f5:34:2a:f1:ed:00:ca:c8:1f:75:6d:cc:fe:5d:27:88:
         aa:a3:f5:04:d5:4a:c6:88:23:29:2d:eb:87:c0:c4:cd:e1:d5:
         7f:81:b3:0f:72:a5:87:c8:da:17:93:19:ff:d5:f9:44:f8:fb:
         c2:f3:b1:19:53:1c:8d:36:b4:18:70:59:c9:dd:be:93:17:7c:
         df:bf:35:2f:3e:8a:18:ef:71:c4:ef:ca:15:50:a2:58:07:2c:
         d1:21:c2:ee:e4:80:68:ab:77:23:ea:6d:a6:b4:c7:bd:9e:41:
         74:6b:47:bf
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UzQTMxMTAvBgNVBAUTKDQ0NDBFRTIxQjM0ODlBNjUwQTYxNkIxMjBEOEU1QkU1
NzkyRUUwNEIwHhcNMjUxMjA0MTc1ODU5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTMxY2JlMy1jZGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvpd9V1ku1RgFSVtrH95T7nmVCkfNDoCKVgUztH8/m5GyK74IoLua1xrscRsx
IdoNIYUwbY7an2ysPNBlQZXe5KTNsbiJRmbAnjp7A/IWQwk8MIytH/QZSIC2NlEz
lt16+VurUaQ2MsL2FmxBxoH11EwA3ke3XaV08soJYqwwv6OXtey1L6Bdx1bE4faa
27rxNpuE75tdqBFV4tQIbREawLwbzEftllojP/fIPtL3eFeasOKZiycJEyz3wEdw
bmwpwMy8FlEsk94HfBxEsIuOrPsmgZa1MxP6pl18gJSRHSxZYFW83fZPuBcIcCLG
b2DT7GGaFBJCrttoGHdkEBkQ/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFCS5Z7vh
EADGxoqnFdrANcS5ykuOMB8GA1UdIwQYMBaAFERA7iGzSJplCmFrEg2OW+V5LuBL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8xODgyM0M4QzA1
MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1tVUtZV3NTRFk1YjVYa3U0
RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1JFRHVJYk5JbW1VS1lXc1NEWTViNVhrdTRFcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0UzQTMvMTg4MjNDOEMwNTAxMTFFQUJEOUIyMDJDQzRGOUFFMDIvNzE1NUM4NTYz
RTVFMTFFQUIwNDNBNTIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHG9AowDQYJKoZIhvcNAQELBQADggEBAG5gm9HKbkdeHHuu
4TkPCAfRiDTTxtSDwYICEbTKHemBwwbY+4tbaBnOMfsH8DXG6iPZ9fahxGgaEdbS
Q51hqdOPBdURv16xiu/MDjzQtJ9pIC6HmcCQGbEJ1yLfDfzTWn/FbvmYmrMoMVdG
zhrVqCwEudpdW4zN5zyxzH125vffOY/ejDV3yTkEKWWgrbNmqx1V9TQq8e0Aysgf
dW3M/l0niKqj9QTVSsaIIykt64fAxM3h1X+Bsw9ypYfI2heTGf/V+UT4+8LzsRlT
HI02tBhwWcndvpMXfN+/NS8+ihjvccTvyhVQolgHLNEhwu7kgGirdyPqbaa0x72e
QXRrR78=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:18:10 2025 by rpki-client