This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/15F2CAD0D0AD11F08058D727C4F9AE02.roa
File:                     15F2CAD0D0AD11F08058D727C4F9AE02.roa (raw, json)
Hash identifier:          /PKG8wIjekSYApgOkwbdLrLLH3ha9coEuDnaItwW/mA=
Subject key identifier:   89:CE:D6:6B:64:93:8A:7A:51:F5:49:4A:D1:F0:1A:98:71:55:56:30
Certificate issuer:       /CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
Certificate serial:       01F2
Authority key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/15F2CAD0D0AD11F08058D727C4F9AE02.roa
Signing time:             Thu 04 Dec 2025 01:03:47 +0000
ROA not before:           Thu 04 Dec 2025 01:03:47 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     134143
IP address blocks:        157.85.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl
                          rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7578, serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
        Validity
            Not Before: Dec  4 01:03:47 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6930ddf2-a6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c9:6f:1d:17:bc:c4:fa:08:5a:c2:75:74:18:
                    30:73:e8:05:dc:f4:54:94:04:e8:ef:dd:b1:0c:52:
                    cb:40:91:cc:8d:1b:42:93:78:fc:8c:ce:c0:45:21:
                    27:b9:8f:73:e5:79:c4:bc:c5:6c:98:42:29:54:35:
                    c1:eb:7b:ab:2c:f3:09:86:1a:49:ba:6e:d5:a6:f9:
                    b9:bb:02:37:56:cd:bf:12:37:c5:86:bf:91:08:9f:
                    9f:29:f1:9f:a2:4a:6f:16:53:42:b0:77:c9:08:af:
                    6b:e5:f3:4a:16:48:bc:fd:52:9a:73:34:55:3a:2e:
                    b9:de:51:3a:9b:82:c4:66:ae:f1:b2:e2:b9:c9:75:
                    fa:73:eb:58:1d:4d:23:b4:af:98:64:30:86:0e:8c:
                    cb:3a:b0:b0:5f:0f:6c:68:fd:99:68:04:ce:17:93:
                    90:d8:e2:e2:ed:3b:a0:4a:1c:7e:e8:77:31:ae:81:
                    51:43:d6:e0:a3:18:c6:8e:09:55:e1:ce:52:c7:12:
                    85:73:57:b7:3c:fe:5d:cb:c0:20:55:ad:c7:e2:9a:
                    ae:3e:46:08:67:a5:dd:37:17:07:95:ef:57:79:5e:
                    f1:40:d6:4d:65:bc:f4:06:14:ec:c9:49:3b:1a:10:
                    14:ee:18:20:2a:f0:d4:b3:8f:b5:a7:8c:f5:7a:f4:
                    fe:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CE:D6:6B:64:93:8A:7A:51:F5:49:4A:D1:F0:1A:98:71:55:56:30
            X509v3 Authority Key Identifier:
                keyid:9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/15F2CAD0D0AD11F08058D727C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         48:11:0e:26:c5:17:8c:4a:e1:09:d7:92:76:93:89:e3:1f:09:
         9f:7e:98:a8:c2:d0:d7:83:4d:b0:e0:c3:0b:5d:64:ff:92:85:
         ce:08:55:d3:68:1a:c8:bd:10:32:c0:84:fa:61:87:4e:b9:10:
         08:eb:58:bf:3c:41:db:26:21:e7:ab:a9:77:24:4e:51:94:8c:
         2a:b7:ed:da:87:96:1d:f8:97:c4:ff:81:c2:61:cf:6c:1c:67:
         95:20:6f:b9:ff:1a:76:ea:cc:70:c2:ea:68:e4:ca:42:df:df:
         32:dc:a5:b6:ad:6e:ec:c7:df:11:67:ad:5b:90:11:e3:af:d0:
         4b:ea:86:d4:2f:59:d1:fe:92:db:e8:32:c1:46:c7:e4:21:57:
         17:b9:e4:cb:b9:2a:58:97:66:67:f0:ae:40:62:1c:ba:9b:4c:
         b2:36:3c:9e:8d:d8:d7:a3:b0:c0:b9:05:16:5c:ad:be:53:fd:
         24:3d:2c:49:81:25:fa:57:91:e8:dc:f3:4c:b8:72:c3:d1:3a:
         70:fd:25:c7:9d:c1:8a:ff:39:36:56:26:45:fd:75:4d:ec:be:
         76:64:4d:5e:b1:79:79:fe:98:2e:c3:1b:f9:4a:12:6e:34:3a:
         a6:3c:a7:f6:2d:f8:8d:b4:51:89:71:f4:93:95:f0:5f:c0:0c:
         59:c1:d3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:19:13 2025 by rpki-client