This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/7DCD6940E59211F08B61DB89486F56BC.roa
File:                     7DCD6940E59211F08B61DB89486F56BC.roa (raw, json)
Hash identifier:          89BQOiulnGKKaTJdNAG0XNXtRZ29+eJDZyjsRdZKe0k=
Subject key identifier:   2A:C6:CA:8E:3D:F9:C0:8D:3E:B5:1B:7F:21:CA:06:84:E2:3E:AB:64
Certificate issuer:       /CN=A91E0855/serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
Certificate serial:       0121
Authority key identifier: D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/7DCD6940E59211F08B61DB89486F56BC.roa
Signing time:             Tue 30 Dec 2025 15:16:19 +0000
ROA not before:           Tue 30 Dec 2025 15:16:19 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153473
IP address blocks:        160.25.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl
                          rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0855, serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
        Validity
            Not Before: Dec 30 15:16:19 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6953ecc3-9148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:47:ac:7d:bd:85:f3:cc:ea:84:bb:18:f3:e7:
                    81:2e:ae:13:a3:e9:ef:e7:6c:cd:f3:7f:9b:cf:39:
                    e4:b8:24:04:77:e6:77:9a:dd:e6:ba:7c:35:3d:e7:
                    b0:fe:e4:a2:ba:b7:a6:00:20:81:2c:a3:be:ba:e4:
                    8b:2a:8d:44:9d:83:2b:81:39:3b:5f:ff:34:ba:34:
                    12:80:6a:56:b9:bd:f7:2e:7b:ec:31:bd:75:ce:b2:
                    fb:89:78:6e:c0:c6:89:8d:00:4f:9d:17:bb:80:94:
                    c6:69:d0:1f:20:8a:9c:74:10:e1:49:28:a7:3d:65:
                    f5:6d:e9:8a:16:0f:85:03:b4:76:d0:ef:0f:18:b5:
                    6c:83:35:b0:4b:5a:57:3f:95:d7:74:c8:b8:28:00:
                    10:05:0a:01:51:9b:9d:92:fa:dd:0a:68:c4:5c:d9:
                    ba:0c:12:55:b4:d1:90:da:50:1f:91:d5:b9:4e:7d:
                    0a:e1:5a:4c:42:bb:7f:dd:6b:6b:eb:09:d4:6d:f7:
                    0b:a7:d2:df:c2:42:47:9d:a6:89:36:2c:3c:56:24:
                    a1:61:04:55:cb:33:02:02:8f:bf:7d:41:b2:45:24:
                    62:74:e1:7b:b8:6d:82:4d:9b:c8:32:f2:4f:e5:a8:
                    82:64:ac:b1:97:b5:1e:1f:e3:d6:05:75:f6:ce:67:
                    3d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C6:CA:8E:3D:F9:C0:8D:3E:B5:1B:7F:21:CA:06:84:E2:3E:AB:64
            X509v3 Authority Key Identifier:
                keyid:D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/7DCD6940E59211F08B61DB89486F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:d6:f6:97:82:29:3f:75:67:a5:a1:92:a6:bf:6f:91:7a:64:
         a2:80:5d:86:49:1a:4c:36:77:db:e5:6e:b9:08:8f:72:5e:f9:
         cc:b2:0a:ff:a3:e4:35:ca:d9:b4:4c:91:9a:3a:8f:0a:17:e6:
         d5:d4:56:07:9f:c8:12:77:be:c8:76:33:ad:f3:02:be:a3:b8:
         f4:92:22:c3:e0:ab:32:d4:58:6c:80:17:fd:f2:40:ba:3f:be:
         48:a1:b4:2c:42:a2:38:e9:39:a9:a4:4e:2a:42:3f:29:6b:3f:
         98:23:3a:a5:a6:65:c8:09:9b:d1:44:1c:11:81:29:23:83:d5:
         85:36:18:4b:3b:97:19:30:6d:70:4a:47:4c:26:b2:18:92:7a:
         1c:e7:28:ee:8e:2c:7b:db:a2:9a:8b:fd:51:c0:05:c4:52:64:
         3a:87:0b:db:37:c3:8e:22:ce:26:2c:bb:17:62:1a:c5:6e:38:
         3b:d7:75:25:cd:02:96:36:7f:dc:95:81:83:b2:34:e9:1d:53:
         d0:cf:99:e5:6f:b5:6a:4a:b3:49:fd:84:9e:65:54:2d:09:47:
         f7:01:c8:47:5f:fb:13:12:5c:32:91:ef:84:24:f1:d9:7b:ff:
         bb:cc:8c:c2:cf:b7:88:c5:60:4a:90:71:8d:d7:a0:86:a3:41:
         cc:44:ec:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:01:28 2026 by rpki-client