This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/B8CCCFC8FE4711EF9822D46AC4F9AE02.roa
File:                     B8CCCFC8FE4711EF9822D46AC4F9AE02.roa (raw, json)
Hash identifier:          w8qjowphXmL3PeFkL+vLq5jeZxo5de+/HBCWCnByUF4=
Subject key identifier:   B6:71:34:32:2F:B0:70:06:FA:2F:9A:1E:28:AD:8C:C5:57:E4:8F:2C
Certificate issuer:       /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Certificate serial:       023A
Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/B8CCCFC8FE4711EF9822D46AC4F9AE02.roa
Signing time:             Fri 05 Dec 2025 01:11:00 +0000
ROA not before:           Fri 05 Dec 2025 01:11:00 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     141153
IP address blocks:        43.224.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
                          rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:11:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
        Validity
            Not Before: Dec  5 01:11:00 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69323124-c8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:70:5e:2e:f9:1e:b5:4a:59:2b:b0:10:fa:
                    5e:27:ff:1d:19:63:7c:26:8f:4b:e6:9c:26:05:52:
                    b4:04:b4:94:29:65:56:31:c7:84:6f:87:17:0a:bc:
                    5c:12:8f:16:d4:76:c5:15:95:95:9f:44:36:89:c0:
                    e5:7d:77:c9:fe:71:80:a1:15:f8:47:1c:e0:98:2b:
                    6d:d0:de:d6:a4:60:81:04:e1:10:25:a8:67:5b:7c:
                    28:6e:96:a2:aa:78:1f:ce:ec:99:97:b4:e5:5b:2a:
                    bc:5f:39:61:96:cd:b7:0a:24:d0:37:c2:5d:f1:0b:
                    0e:0e:73:b9:75:e3:58:4a:71:c1:40:6b:66:d7:24:
                    73:54:32:3d:0e:ba:5b:f9:65:c5:fd:95:f2:a7:86:
                    7f:5b:8b:b1:cc:48:86:56:e1:5b:53:0f:fd:78:ac:
                    27:5b:6f:73:ba:8e:b3:b4:3b:1d:27:28:99:f5:d0:
                    4d:1b:2a:98:06:53:96:27:05:ca:10:dc:d1:75:47:
                    6c:d4:1c:cf:6d:ea:b2:99:c6:df:e3:2e:82:32:29:
                    42:fa:f8:49:dd:b0:6d:9b:77:0b:96:71:6a:88:bc:
                    63:3f:e5:42:68:ef:b7:56:d6:14:8f:23:f8:cc:d8:
                    40:f9:6e:57:8c:e1:45:c1:4e:bc:20:af:b8:04:bc:
                    b1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:71:34:32:2F:B0:70:06:FA:2F:9A:1E:28:AD:8C:C5:57:E4:8F:2C
            X509v3 Authority Key Identifier:
                keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/B8CCCFC8FE4711EF9822D46AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.224.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:61:27:3e:34:44:ca:9c:06:4b:56:b8:da:13:2a:1a:2c:3a:
         40:97:ee:ae:fd:33:20:97:cb:90:18:ff:de:67:a3:11:ed:77:
         a6:fc:f2:b9:a8:fd:d5:39:fa:1e:75:42:13:4f:16:59:fa:a8:
         78:10:4f:c0:a1:13:2a:98:46:58:2e:17:dd:60:35:52:35:a4:
         02:0e:ef:bc:8b:2a:ce:82:bb:48:09:cb:11:8d:4d:a9:8b:4c:
         5d:c3:14:c0:41:47:eb:2a:5e:b3:97:bf:c1:0b:d2:6b:ba:65:
         ad:27:05:5f:48:dc:9c:02:85:1e:13:7d:de:c8:0c:e2:4e:db:
         ad:e6:f4:96:cd:44:73:00:af:28:4f:25:97:18:cd:06:b2:ce:
         1d:65:00:61:a4:ed:53:ac:75:f7:b9:81:56:8e:de:e0:20:87:
         8c:49:ea:aa:a0:66:10:ff:71:c0:d0:d9:7d:18:e9:cc:67:17:
         77:a1:ff:7d:43:d0:73:de:28:b6:e6:d9:18:2e:c5:08:e5:52:
         36:df:04:18:98:12:c4:d7:45:5e:93:b7:28:c0:98:35:24:8a:
         ed:9f:27:c7:90:20:85:c5:99:1f:ed:b1:d4:3d:52:7c:79:fd:
         7b:f8:00:9b:6f:4f:70:3d:4f:1c:b1:b0:5a:a5:8a:d2:75:fc:
         2c:75:69:f7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjNDODcxMTAvBgNVBAUTKEVGOUZFMzgxREEzRDQyRUI3QzRFMEQwNDlDQ0FFNzIy
OEUyOEZCNEIwHhcNMjUxMjA1MDExMTAwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTMyMzEyNC1jOGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyQlwXi75HrVKWSuwEPpeJ/8dGWN8Jo9L5pwmBVK0BLSUKWVWMceEb4cXCrxc
Eo8W1HbFFZWVn0Q2icDlfXfJ/nGAoRX4RxzgmCtt0N7WpGCBBOEQJahnW3wobpai
qngfzuyZl7TlWyq8Xzlhls23CiTQN8Jd8QsODnO5deNYSnHBQGtm1yRzVDI9Drpb
+WXF/ZXyp4Z/W4uxzEiGVuFbUw/9eKwnW29zuo6ztDsdJyiZ9dBNGyqYBlOWJwXK
ENzRdUds1BzPbeqymcbf4y6CMilC+vhJ3bBtm3cLlnFqiLxjP+VCaO+3VtYUjyP4
zNhA+W5XjOFFwU68IK+4BLyxoQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLZxNDIv
sHAG+i+aHiitjMVX5I8sMB8GA1UdIwQYMBaAFO+f44HaPULrfE4NBJzK5yKOKPtL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0M4Ny9FNzgyODU0RUVG
MEIxMUVEODFERDJENzJDNEY5QUUwMi83NV9qZ2RvOVF1dDhUZzBFbk1ybklvNG8t
MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzc1X2pnZG85UXV0OFRnMEVuTXJuSW80by0wcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjNDODcvRTc4Mjg1NEVFRjBCMTFFRDgxREQyRDcyQzRGOUFFMDIvQjhDQ0NGQzhG
RTQ3MTFFRjk4MjJENDZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAr4JQwDQYJKoZIhvcNAQELBQADggEBAINhJz40RMqcBktW
uNoTKhosOkCX7q79MyCXy5AY/95noxHtd6b88rmo/dU5+h51QhNPFln6qHgQT8Ch
EyqYRlguF91gNVI1pAIO77yLKs6Cu0gJyxGNTamLTF3DFMBBR+sqXrOXv8EL0mu6
Za0nBV9I3JwChR4Tfd7IDOJO263m9JbNRHMAryhPJZcYzQayzh1lAGGk7VOsdfe5
gVaO3uAgh4xJ6qqgZhD/ccDQ2X0Y6cxnF3eh/31D0HPeKLbm2RguxQjlUjbfBBiY
EsTXRV6TtyjAmDUkiu2fJ8eQIIXFmR/tsdQ9Unx5/Xv4AJtvT3A9TxyxsFqlitJ1
/Cx1afc=
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:01:08 2025 by rpki-client