This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/18066BD682CD11EE82EA6452C4F9AE02.roa
File:                     18066BD682CD11EE82EA6452C4F9AE02.roa (raw, json)
Hash identifier:          /BQmNlfACvCT3aNUmWEnHPO5ztwiqIfPtomWyL5VTPs=
Subject key identifier:   CC:69:AF:42:53:77:52:72:37:1E:73:6C:50:9C:1C:73:A7:63:DE:D0
Certificate issuer:       /CN=A91DB916/serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C
Certificate serial:       018C
Authority key identifier: D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/18066BD682CD11EE82EA6452C4F9AE02.roa
Signing time:             Wed 03 Dec 2025 02:33:16 +0000
ROA not before:           Wed 03 Dec 2025 02:33:16 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     152103
IP address blocks:        180.131.134.0/23 maxlen: 23
                          180.131.134.0/24 maxlen: 24
                          180.131.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl
                          rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB916, serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C
        Validity
            Not Before: Dec  3 02:33:16 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692fa16c-d3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0e:0a:11:a3:8e:8d:29:fd:20:9e:a3:f2:ad:
                    27:e6:64:4b:eb:b6:2c:2f:6e:3e:4c:8f:b7:74:92:
                    f5:dd:67:b4:24:f1:eb:84:c6:a7:c0:fb:63:7e:7a:
                    01:e4:3e:b0:7b:07:ed:01:66:5c:cb:75:51:78:63:
                    fc:8b:38:9c:c6:2f:43:61:64:93:48:ef:2f:4a:af:
                    4c:73:17:6a:f2:bc:0d:e1:4a:b5:2f:4f:57:37:f9:
                    f6:c2:08:26:94:14:93:1f:c3:74:4d:d6:e6:2c:3f:
                    8e:67:46:d5:cf:b3:ea:d9:8e:30:e1:e0:da:1e:85:
                    03:b5:c5:19:05:84:ff:a2:7c:36:e6:3b:0d:87:bd:
                    c0:e3:a1:59:ca:e7:8b:6a:f0:25:0b:72:d9:c0:54:
                    74:4d:80:42:ee:95:34:f6:55:30:38:8e:80:bc:3f:
                    7e:c2:1c:3f:5e:36:95:ae:06:06:91:87:71:f2:4b:
                    33:9f:98:08:dc:6a:f3:04:02:c1:ab:96:d3:d3:03:
                    a4:29:ca:13:8b:9f:70:1a:89:c0:e7:1c:49:78:de:
                    5d:2e:8f:02:2c:7e:90:ae:fd:e1:6d:cf:2b:aa:a2:
                    94:5c:17:e0:e2:b6:d9:db:42:ce:8b:f0:00:36:b8:
                    b7:6d:b4:a2:0b:4d:ec:90:94:5e:f8:7e:e4:36:ae:
                    a8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:69:AF:42:53:77:52:72:37:1E:73:6C:50:9C:1C:73:A7:63:DE:D0
            X509v3 Authority Key Identifier:
                keyid:D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/18066BD682CD11EE82EA6452C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:e0:db:8e:19:8c:a7:f3:d3:68:a2:f5:d1:02:69:85:5a:df:
         b6:d4:c8:01:ec:76:2d:35:6e:a4:ee:93:07:64:67:65:c6:f5:
         65:cc:16:7d:03:97:e6:8d:3f:ef:3e:fb:6e:67:95:3f:14:e8:
         f0:68:8a:9a:06:69:8e:7f:a1:f7:67:96:00:b8:d4:71:40:d9:
         26:e6:95:26:1a:03:b9:1d:ac:3b:83:93:41:be:39:cb:bc:19:
         71:33:12:3b:aa:8e:2a:70:c6:4e:56:be:06:4f:8f:0b:66:6a:
         88:2e:cd:e7:8f:09:ac:78:b0:d6:b9:62:67:2b:44:1f:3a:37:
         98:88:5d:1a:bb:33:ca:97:d9:78:87:8e:24:42:0d:be:10:0a:
         45:9f:2c:68:c5:e1:50:cd:6a:d2:ff:26:8c:18:5a:09:4a:28:
         f3:38:ca:b3:d9:90:7d:bb:05:73:2a:d9:65:bc:6e:4c:a4:f1:
         f6:37:50:75:e0:86:4f:56:3e:5c:5c:ce:e3:90:75:2d:71:bb:
         ae:9a:74:c9:4d:57:7b:dc:14:a5:a4:89:f3:0b:61:04:d2:15:
         b2:1b:8b:8b:9c:5c:b9:5d:e3:c0:81:f1:6b:93:61:fd:81:18:
         d9:64:31:0e:dd:37:f1:1a:3b:be:90:28:56:8e:fb:25:73:65:
         38:f9:ec:bb
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI5MTYxMTAvBgNVBAUTKEQ1MEQxMTgzNzMwOEFCMUYxNUE3NUYzNTE2NDNGQjdG
QzAxNDg1NEMwHhcNMjUxMjAzMDIzMzE2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTJmYTE2Yy1kM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAug4KEaOOjSn9IJ6j8q0n5mRL67YsL24+TI+3dJL13We0JPHrhManwPtjfnoB
5D6wewftAWZcy3VReGP8izicxi9DYWSTSO8vSq9Mcxdq8rwN4Uq1L09XN/n2wggm
lBSTH8N0TdbmLD+OZ0bVz7Pq2Y4w4eDaHoUDtcUZBYT/onw25jsNh73A46FZyueL
avAlC3LZwFR0TYBC7pU09lUwOI6AvD9+whw/XjaVrgYGkYdx8kszn5gI3GrzBALB
q5bT0wOkKcoTi59wGonA5xxJeN5dLo8CLH6Qrv3hbc8rqqKUXBfg4rbZ20LOi/AA
Nri3bbSiC03skJRe+H7kNq6oBQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMxpr0JT
d1JyNx5zbFCcHHOnY97QMB8GA1UdIwQYMBaAFNUNEYNzCKsfFadfNRZD+3/AFIVM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjkxNi83NEVDMzk3RTdE
M0QxMUVFOUFGNzM5MUFDNEY5QUUwMi8xUTBSZzNNSXF4OFZwMTgxRmtQN2Y4QVVo
VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFRMFJnM01JcXg4VnAxODFGa1A3ZjhBVWhVdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REI5MTYvNzRFQzM5N0U3RDNEMTFFRTlBRjczOTFBQzRGOUFFMDIvMTgwNjZCRDY4
MkNEMTFFRTgyRUE2NDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAG0g4YwDQYJKoZIhvcNAQELBQADggEBAB3g244ZjKfz02ii
9dECaYVa37bUyAHsdi01bqTukwdkZ2XG9WXMFn0Dl+aNP+8++25nlT8U6PBoipoG
aY5/ofdnlgC41HFA2SbmlSYaA7kdrDuDk0G+Ocu8GXEzEjuqjipwxk5WvgZPjwtm
aoguzeePCax4sNa5YmcrRB86N5iIXRq7M8qX2XiHjiRCDb4QCkWfLGjF4VDNatL/
JowYWglKKPM4yrPZkH27BXMq2WW8bkyk8fY3UHXghk9WPlxczuOQdS1xu66adMlN
V3vcFKWkifMLYQTSFbIbi4ucXLld48CB8WuTYf2BGNlkMQ7dN/EaO76QKFaO+yVz
ZTj57Ls=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:30:42 2025 by rpki-client