This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/6B7CC19C73B811F08DDFF784C4F9AE02.roa
File:                     6B7CC19C73B811F08DDFF784C4F9AE02.roa (raw, json)
Hash identifier:          n+54z7fslNXJ7in5uQGFK69nm0/AotBzwzG1jXO7P88=
Subject key identifier:   13:4B:E6:2C:91:8F:7B:70:A9:22:57:2F:3B:C8:68:4D:E2:E4:8A:77
Certificate issuer:       /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982
Certificate serial:       E8
Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/6B7CC19C73B811F08DDFF784C4F9AE02.roa
Signing time:             Tue 25 Nov 2025 03:51:51 +0000
ROA not before:           Tue 25 Nov 2025 03:51:51 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     153379
IP address blocks:        160.191.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl
                          rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982
        Validity
            Not Before: Nov 25 03:51:51 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692527d7-46f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:36:1f:fd:04:d8:d9:e4:89:dc:4b:3e:3a:c9:
                    0b:ae:3d:77:dc:28:75:50:c2:c2:5b:43:45:27:66:
                    7d:4a:87:49:b3:81:e8:74:60:86:13:47:87:33:db:
                    71:e1:9a:ec:50:41:5e:16:09:31:a4:20:0f:27:f1:
                    31:7d:c9:7c:b7:c1:3d:3e:c7:ca:68:5e:f1:e7:43:
                    c2:17:5d:80:f8:06:8b:4e:75:fd:29:23:f6:31:d1:
                    38:ea:fa:c5:e9:8a:b0:12:16:a5:a3:33:bf:34:50:
                    2b:8d:ad:46:9a:69:75:3d:12:59:a9:b0:d7:65:f6:
                    2f:cb:6b:d9:3c:20:ca:98:83:61:89:73:9d:a7:55:
                    28:7e:33:2c:6b:d9:95:37:6c:8d:e4:02:f9:d1:ca:
                    0e:d0:0d:47:e3:11:0f:2d:db:44:63:07:55:6b:18:
                    0b:75:52:b6:e0:16:6a:63:11:5d:83:cf:d9:de:00:
                    c5:70:77:8b:97:c2:f2:45:1b:6c:58:03:05:3c:fa:
                    d0:77:0d:fb:60:a3:31:e4:a3:bd:f5:ae:41:e4:d7:
                    67:a6:b0:5a:7b:30:ff:c7:ba:49:74:d1:63:af:36:
                    49:99:dc:26:62:6c:01:99:7d:23:c5:9d:83:24:9b:
                    48:93:7d:df:1b:ae:76:2c:9a:cf:d3:ea:b2:15:ee:
                    9c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4B:E6:2C:91:8F:7B:70:A9:22:57:2F:3B:C8:68:4D:E2:E4:8A:77
            X509v3 Authority Key Identifier:
                keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/6B7CC19C73B811F08DDFF784C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:1a:11:59:58:cc:8c:9a:4b:05:59:cb:8c:29:38:14:7e:dc:
         46:f5:b0:4c:02:22:66:43:c7:63:7f:c4:b8:d5:b1:db:5e:b1:
         a3:5e:3c:a2:29:28:ff:9c:29:14:a0:87:0a:6f:0d:f0:c6:54:
         ff:96:ff:15:a0:e5:99:66:d9:13:b4:83:06:0d:71:f5:96:b6:
         c2:eb:87:1e:3c:17:a6:c2:bb:22:35:76:f9:d4:f9:13:38:16:
         e8:d1:c5:e8:8a:c2:f5:52:9b:52:a9:6a:a7:37:e9:c4:bd:ad:
         8e:89:98:84:26:85:11:3c:82:3a:68:e7:5e:b3:35:e1:bd:da:
         c1:fb:2e:b9:ce:4f:0d:8f:47:e1:54:95:b6:13:53:ed:66:2f:
         f6:e1:26:1c:a1:e2:4f:b9:a3:7e:5c:85:7c:6e:5c:66:ce:7f:
         23:a2:d5:ba:09:d1:b2:0d:93:3b:37:f5:32:10:9b:44:59:bb:
         f7:11:72:28:14:df:8f:c7:4e:57:38:34:f1:d2:2f:b2:2e:66:
         cb:6d:c7:63:41:54:a5:ed:9a:93:8e:9d:6f:c4:5f:f7:ed:97:
         f7:9e:57:5c:21:34:33:4b:26:7e:e9:65:d5:34:85:9b:a7:9c:
         7a:48:01:b5:51:33:2a:d6:f3:a1:42:d2:4a:ed:04:10:b6:63:
         ed:d8:af:29
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUZDOTQxMTAvBgNVBAUTKDY1M0NCOEE3NTEwREI5QjZDMUEyN0Q4NzdEMjEyMUU2
REY0MjE5ODIwHhcNMjUxMTI1MDM1MTUxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI1MjdkNy00NmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyjYf/QTY2eSJ3Es+OskLrj133Ch1UMLCW0NFJ2Z9SodJs4HodGCGE0eHM9tx
4ZrsUEFeFgkxpCAPJ/Exfcl8t8E9PsfKaF7x50PCF12A+AaLTnX9KSP2MdE46vrF
6YqwEhalozO/NFArja1Gmml1PRJZqbDXZfYvy2vZPCDKmINhiXOdp1UofjMsa9mV
N2yN5AL50coO0A1H4xEPLdtEYwdVaxgLdVK24BZqYxFdg8/Z3gDFcHeLl8LyRRts
WAMFPPrQdw37YKMx5KO99a5B5NdnprBaezD/x7pJdNFjrzZJmdwmYmwBmX0jxZ2D
JJtIk33fG652LJrP0+qyFe6cmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBNL5iyR
j3twqSJXLzvIaE3i5Ip3MB8GA1UdIwQYMBaAFGU8uKdRDbm2waJ9h30hIebfQhmC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9BOENEMDE2NDk0
REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnViYkJvbjJIZlNFaDV0OUNH
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1pUeTRwMUVOdWJiQm9uMkhmU0VoNXQ5Q0dZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUZDOTQvQThDRDAxNjQ5NERBMTFFRjg5MDg2RDIxQzRGOUFFMDIvNkI3Q0MxOUM3
M0I4MTFGMDhEREZGNzg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACgv3MwDQYJKoZIhvcNAQELBQADggEBAIwaEVlYzIyaSwVZ
y4wpOBR+3Eb1sEwCImZDx2N/xLjVsdtesaNePKIpKP+cKRSghwpvDfDGVP+W/xWg
5Zlm2RO0gwYNcfWWtsLrhx48F6bCuyI1dvnU+RM4FujRxeiKwvVSm1Kpaqc36cS9
rY6JmIQmhRE8gjpo516zNeG92sH7LrnOTw2PR+FUlbYTU+1mL/bhJhyh4k+5o35c
hXxuXGbOfyOi1boJ0bINkzs39TIQm0RZu/cRcigU34/HTlc4NPHSL7IuZsttx2NB
VKXtmpOOnW/EX/ftl/eeV1whNDNLJn7pZdU0hZunnHpIAbVRMyrW86FC0krtBBC2
Y+3Yryk=
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:09:38 2025 by rpki-client