This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/2018750A5FC411F0ACE3A087C4F9AE02.roa
File:                     2018750A5FC411F0ACE3A087C4F9AE02.roa (raw, json)
Hash identifier:          Xm+FyoR2UwlfV7sR2mmZBo3t3Wc4XURljq2zLGzgHSc=
Subject key identifier:   B6:01:4F:37:0C:11:CD:05:63:9E:07:97:B5:55:A3:F9:BF:26:63:CB
Certificate issuer:       /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Certificate serial:       CB
Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/2018750A5FC411F0ACE3A087C4F9AE02.roa
Signing time:             Tue 23 Dec 2025 05:26:04 +0000
ROA not before:           Tue 23 Dec 2025 05:26:04 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137967
IP address blocks:        160.250.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:55:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
        Validity
            Not Before: Dec 23 05:26:04 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=694a27ec-3344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b1:53:40:c1:82:2b:e6:bc:39:5f:0a:28:40:
                    91:0c:94:30:99:01:cd:1c:9a:54:a9:2c:1c:41:15:
                    70:81:6e:86:e0:da:b7:42:0a:e7:98:4d:d7:51:05:
                    b5:75:d6:dc:84:2d:07:1e:18:c8:8e:18:fa:11:09:
                    61:44:6a:82:80:9f:4d:48:67:a9:3c:80:80:e3:6e:
                    db:98:9b:e7:d8:f2:0c:46:83:2c:2b:c6:53:0e:6c:
                    a1:77:b5:a3:54:7b:80:fa:c3:1b:04:ce:45:84:fc:
                    bc:5c:6f:08:89:7a:c0:94:ad:6e:ef:5d:73:3c:bc:
                    cf:ef:d0:9b:41:31:2b:63:08:95:69:9e:ed:1e:bf:
                    47:55:62:23:51:12:1d:03:16:cf:9d:54:8b:4c:d7:
                    c1:25:be:30:07:67:11:91:4e:01:c1:4c:99:c6:99:
                    e1:18:b7:fe:b5:b7:85:37:ef:8f:8a:28:b5:4d:07:
                    e1:87:8a:17:fd:4d:f4:30:95:bc:31:d3:6d:f6:47:
                    59:87:46:2c:b9:f4:5a:00:61:a9:57:a2:ad:48:4b:
                    c3:01:8f:98:dc:be:8d:49:17:52:a9:a2:d8:0e:bd:
                    a0:ea:45:f0:c3:cf:90:cf:82:7d:99:6d:3d:6f:81:
                    05:c5:6b:96:e1:be:41:4e:67:88:f5:25:ff:2c:05:
                    f2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:01:4F:37:0C:11:CD:05:63:9E:07:97:B5:55:A3:F9:BF:26:63:CB
            X509v3 Authority Key Identifier:
                keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/2018750A5FC411F0ACE3A087C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:12:b4:ca:93:f6:15:51:8d:dd:2b:57:c9:f8:10:10:5e:11:
         c5:91:02:7d:83:9e:15:19:38:2a:61:96:0b:f6:ce:29:5a:d5:
         73:e6:a0:f8:17:b9:b0:c7:1f:47:8e:14:3c:eb:5a:d6:bf:8b:
         46:61:7e:66:66:aa:dd:a1:53:19:b1:a4:0d:c7:98:f4:65:20:
         d4:35:59:83:58:5c:d4:04:d6:84:bd:55:5b:41:83:a4:cb:14:
         31:dc:87:3f:72:ca:87:a3:5e:d1:b9:41:94:47:20:55:6c:cb:
         bf:ae:75:26:65:eb:32:da:ad:bf:8b:6f:20:17:08:4a:40:30:
         0e:98:f8:8e:b7:7a:e8:df:e7:6b:76:40:f4:ba:64:8b:d2:e8:
         03:76:f1:51:7b:c3:71:58:da:ee:f3:79:89:c7:9c:29:50:7f:
         75:f0:c5:01:e9:14:9f:61:18:71:15:dd:33:10:66:e5:98:90:
         7e:e1:af:ae:31:00:df:52:99:de:f4:b0:46:3d:18:2b:18:d6:
         84:d4:b9:08:06:61:a0:0d:01:f9:f4:0a:c3:66:29:e7:6f:d4:
         58:71:83:8b:81:ff:28:8c:0b:69:3e:1a:80:e4:4c:97:f3:77:
         96:52:93:25:ae:35:8b:84:f5:f5:32:e7:5e:43:5e:35:29:03:
         4c:b2:48:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:21:58 2026 by rpki-client