This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/F63AE892D0EA11F0ABD63D41C4F9AE02.roa
File:                     F63AE892D0EA11F0ABD63D41C4F9AE02.roa (raw, json)
Hash identifier:          Dzn3sksu9AWhENIZ0pYx9MNaFbrpkCqwLZyubYj2Yqg=
Subject key identifier:   14:C7:8A:F7:A6:E0:79:E8:5B:3D:73:02:D8:63:24:C0:0B:91:58:09
Certificate issuer:       /CN=A91EBD8F/serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398
Certificate serial:       02
Authority key identifier: 59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/F63AE892D0EA11F0ABD63D41C4F9AE02.roa
Signing time:             Thu 04 Dec 2025 08:26:42 +0000
ROA not before:           Thu 04 Dec 2025 08:26:42 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        144.79.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl
                          rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBD8F, serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398
        Validity
            Not Before: Dec  4 08:26:42 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=693145c2-012e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:02:03:32:0d:da:7d:ad:24:54:a8:d1:b8:45:
                    22:52:94:bf:40:e2:da:aa:96:d3:a5:08:02:a3:1d:
                    9b:0c:36:9e:3a:a4:fb:1a:0b:6c:be:67:2b:5b:0a:
                    33:8d:2d:b9:d2:4f:f7:68:a2:bc:da:66:34:f0:72:
                    9f:7a:bb:29:83:fc:3a:8d:60:09:16:33:f1:60:45:
                    17:c7:a4:b3:b3:fc:25:25:39:e5:d3:63:43:d6:75:
                    71:59:6d:0a:2e:61:2c:70:c3:8f:06:4c:ed:e4:c8:
                    48:95:b7:56:50:8e:a4:55:25:00:b2:f2:5d:46:82:
                    0f:3b:f4:bd:3f:2d:c2:9b:85:02:7e:0d:7c:f2:fe:
                    ef:ed:b8:86:55:b6:a7:d6:a5:6d:bf:2e:49:a5:9a:
                    d1:82:20:c7:07:c4:95:e9:72:e5:ea:5c:09:a0:2f:
                    93:ec:1c:8d:48:99:f8:5a:ea:04:00:79:19:74:d3:
                    45:de:3e:4e:be:17:bf:95:9d:2f:cb:f7:41:a1:c1:
                    a8:1a:4f:1a:b8:5e:63:56:88:52:1a:07:24:13:f4:
                    3a:d1:83:b8:7e:82:3e:50:44:de:1f:87:f7:ab:eb:
                    51:64:be:ce:e3:4e:e8:ac:f5:56:e2:77:88:c8:8a:
                    f5:0f:37:20:01:cd:56:d7:b1:c7:cf:73:be:57:fa:
                    31:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C7:8A:F7:A6:E0:79:E8:5B:3D:73:02:D8:63:24:C0:0B:91:58:09
            X509v3 Authority Key Identifier:
                keyid:59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/F63AE892D0EA11F0ABD63D41C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:64:dc:77:c9:d6:d4:41:2b:e5:94:8d:f6:fa:2a:be:48:c4:
         4d:96:7a:1e:bd:26:5b:f5:0b:8f:8c:54:9e:22:58:c7:b9:db:
         86:f8:51:d3:d5:c5:0d:d6:80:91:37:f3:e0:6e:1e:98:63:f2:
         c4:3e:d8:7d:a7:6e:b4:9a:af:10:e3:d7:ad:42:93:ba:51:b8:
         09:f2:4d:a1:4d:96:87:50:36:f6:1e:b1:77:f6:53:cd:13:15:
         67:de:e8:e3:0b:8b:34:f5:e3:86:92:6c:a3:b6:5c:32:34:7f:
         80:11:4d:fd:fb:d1:fb:49:60:5b:6f:8e:da:d3:5b:05:33:8a:
         83:bf:99:2b:44:5c:cc:97:31:56:0f:92:96:df:74:e6:59:61:
         08:b2:3f:b7:94:67:83:08:c7:c0:8e:a6:8a:d1:a2:58:c0:4c:
         4a:04:fe:db:be:7f:8b:fa:c1:bb:b7:f0:df:3b:62:af:d8:06:
         0e:ca:e7:f6:bb:31:1a:3e:d3:26:5d:55:69:0d:48:d0:4e:7a:
         21:ac:99:d4:fe:3f:9f:fa:24:f0:67:c0:dd:2c:0b:00:72:a0:
         70:e5:a9:b6:42:b3:35:f3:81:57:49:29:b5:18:7d:75:e1:26:
         b0:da:89:30:a0:87:9d:c6:53:20:81:c7:71:9b:9c:b2:53:05:
         4b:48:01:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:54:16 2025 by rpki-client