This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/1506B298B00711EF863A582EC4F9AE02.roa
File:                     1506B298B00711EF863A582EC4F9AE02.roa (raw, json)
Hash identifier:          JGdoimcsZId56ABxtYNO3O8F9yLyNcE47QHhWM1CwzM=
Subject key identifier:   35:6E:C3:4E:5D:F9:3C:96:11:0B:D5:ED:F2:83:3B:6A:F5:7E:59:03
Certificate issuer:       /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874
Certificate serial:       C7
Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/1506B298B00711EF863A582EC4F9AE02.roa
Signing time:             Mon 15 Dec 2025 05:24:59 +0000
ROA not before:           Mon 15 Dec 2025 05:24:59 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     399861
IP address blocks:        160.191.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874
        Validity
            Not Before: Dec 15 05:24:59 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=693f9bab-be80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:66:a0:1f:19:8a:ad:f0:25:23:0a:ad:95:5a:
                    67:8d:5d:f0:63:7c:d3:71:80:12:3e:81:8b:fd:2d:
                    21:a7:56:4e:c7:6d:81:b9:c6:90:3d:97:28:3f:9c:
                    af:6f:4e:77:29:84:51:e0:8a:f8:3c:58:09:fc:5c:
                    23:b5:43:c5:a9:92:48:c6:7f:a8:41:3c:c3:9e:1f:
                    79:f7:e2:2d:83:77:3c:b5:2c:f3:a5:a3:41:cc:94:
                    6d:e8:c5:36:cd:ad:e5:8f:b9:b8:1c:2c:7d:00:05:
                    9e:0e:7a:71:5b:b2:88:4e:91:b1:00:62:56:75:c6:
                    cd:67:df:bf:d4:91:c8:b7:96:0b:6f:59:16:77:e6:
                    e8:30:2c:81:e6:71:90:ec:d0:f9:6e:82:8e:55:08:
                    42:69:3a:c4:25:bc:d9:bf:d6:a7:42:ff:8b:77:8f:
                    7b:20:46:ff:9d:b2:64:5d:72:9a:a1:f5:f6:b2:f3:
                    2c:98:8e:42:a2:0f:7b:b5:ee:09:01:23:8b:af:6e:
                    85:2e:4b:ba:46:13:07:70:0b:7b:cf:81:11:ff:2d:
                    86:2f:10:7f:51:73:68:17:90:83:02:44:6e:f1:83:
                    fe:5a:48:4f:52:5d:be:3d:6b:1e:5a:5a:a4:84:e0:
                    88:9d:28:42:f3:48:b4:55:27:ca:d3:e5:e3:31:06:
                    8c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6E:C3:4E:5D:F9:3C:96:11:0B:D5:ED:F2:83:3B:6A:F5:7E:59:03
            X509v3 Authority Key Identifier:
                keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/1506B298B00711EF863A582EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:42:39:ae:2e:c5:11:f7:70:93:4b:cb:62:17:83:29:65:73:
         f8:44:d6:f7:1b:e3:a1:c9:68:eb:37:e5:c9:d6:38:76:e6:cc:
         2a:78:02:c3:c7:a8:6a:5d:bc:7f:f9:f7:91:5e:cb:4a:15:77:
         58:d9:9e:91:d4:10:f8:a2:e3:8f:96:87:42:45:55:cd:db:0e:
         12:59:f6:20:d0:16:3f:82:0b:28:a7:97:ce:61:52:30:e0:bc:
         38:ee:cd:50:91:42:fd:82:66:ee:73:d7:e0:e5:28:6c:cd:f3:
         26:bf:8b:4d:d4:e7:77:fd:46:d8:86:28:de:ea:59:5f:f4:f9:
         f3:ed:56:cf:54:64:a6:25:f4:5d:20:20:6b:69:c7:60:50:b4:
         1d:1f:1e:28:b6:df:3b:48:fd:7f:ef:90:b2:37:ff:ff:37:7e:
         2f:6c:62:cb:17:d7:13:29:b0:62:1f:bc:ca:df:34:52:40:c2:
         98:bc:f7:5f:2a:ab:bc:8c:2a:0b:d0:f0:3c:04:d7:ee:69:16:
         f6:5a:1d:ae:b9:f6:45:94:00:89:2b:d6:25:6b:19:12:97:13:
         c6:fd:db:d1:d4:a3:29:a6:66:29:04:18:99:08:d7:ae:d8:51:
         11:b3:b5:85:b1:d7:a3:b8:96:dc:2f:3d:a4:e7:ef:55:82:bf:
         d6:11:dd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:49:38 2025 by rpki-client