This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/42230DF42DE211F0A991F83DC4F9AE02.roa
File:                     42230DF42DE211F0A991F83DC4F9AE02.roa (raw, json)
Hash identifier:          itU/hy7zLegaI59kUx80GxVnUpGnbgPB7QtFznO9eTs=
Subject key identifier:   F5:46:ED:C5:B8:2C:D5:A3:4D:F5:92:31:05:F3:6B:8D:3B:A8:C1:E5
Certificate issuer:       /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Certificate serial:       DD
Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/42230DF42DE211F0A991F83DC4F9AE02.roa
Signing time:             Mon 29 Dec 2025 05:24:34 +0000
ROA not before:           Mon 29 Dec 2025 05:24:33 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     137868
IP address blocks:        160.250.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
                          rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
        Validity
            Not Before: Dec 29 05:24:33 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69521091-07be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:60:81:2d:8e:21:a8:06:59:0c:08:23:95:
                    50:7d:36:55:22:c9:c6:eb:77:ae:0b:4f:b5:7f:4a:
                    ba:ee:cc:62:f8:bf:d7:39:56:4b:13:94:8a:3a:00:
                    f5:15:e7:c8:89:64:1a:ca:ed:64:cb:46:44:39:84:
                    0f:8b:c4:45:7a:1e:88:3a:8a:6f:f3:a1:f4:7c:17:
                    73:06:9e:94:2e:2e:c5:33:05:86:46:f0:15:f4:89:
                    55:db:23:a5:92:99:eb:37:3e:2a:f6:e7:07:7e:0a:
                    b2:dd:b3:eb:0b:d6:ae:58:8e:93:7a:72:11:be:13:
                    13:9e:fa:23:28:be:c5:ad:18:7c:3f:a7:e1:4c:dc:
                    08:f7:81:c3:38:b2:6e:c0:1d:51:a8:4c:80:71:67:
                    3c:86:1b:7e:ab:dc:57:bf:b7:a5:11:1f:da:75:21:
                    78:5e:1e:1f:56:bd:51:09:26:d0:8b:6d:18:d5:1d:
                    16:49:62:de:70:44:86:e3:29:2b:c4:41:2e:1c:e9:
                    b8:15:5a:77:4e:b5:2a:50:1c:78:a0:29:a5:29:d2:
                    61:d9:75:21:bd:d6:8a:0d:01:40:b9:64:93:7a:32:
                    ba:ec:58:01:ca:fc:37:47:a1:16:50:9e:84:5d:fe:
                    64:7c:67:cf:14:ff:1a:65:89:7d:df:15:81:98:c7:
                    87:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:46:ED:C5:B8:2C:D5:A3:4D:F5:92:31:05:F3:6B:8D:3B:A8:C1:E5
            X509v3 Authority Key Identifier:
                keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/42230DF42DE211F0A991F83DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:3e:72:2b:00:b6:71:62:64:8f:f5:6d:06:32:13:a2:a4:7e:
         6b:19:60:8b:94:d4:f1:bb:9f:32:f9:be:5d:d0:e4:e5:e8:d5:
         cf:57:5b:cf:31:96:7f:c7:54:e6:3d:8e:5c:f0:20:79:51:6a:
         c2:4d:e4:76:11:22:a3:28:63:cc:35:bc:e3:c9:81:24:08:81:
         09:3b:6f:a1:74:7f:0a:9b:40:68:df:f0:e3:9a:c6:1b:50:d3:
         65:bb:d4:a0:48:94:0e:8e:5a:47:db:54:95:7d:fd:f0:48:4a:
         1c:25:7a:62:bd:d5:98:eb:bd:57:fa:e7:d6:31:15:2a:eb:fc:
         e3:a2:4d:68:6c:d6:05:7f:2d:68:87:a0:ee:b8:da:f7:0b:6c:
         5b:7a:5d:9a:7e:b6:55:d1:53:c1:a4:45:e7:81:16:06:cc:80:
         8e:b1:da:19:56:5a:35:f0:d9:2a:1d:a6:45:2d:93:6c:28:1b:
         61:4f:7a:9a:5f:0d:0e:a4:37:f0:2d:98:ce:7c:45:57:8c:32:
         df:02:92:0e:0c:5c:37:eb:16:e2:0f:d5:e9:06:4d:a4:19:95:
         de:8a:9a:92:1f:d5:65:e8:66:91:ed:a8:3d:c6:1d:52:34:4d:
         c6:39:c2:41:77:92:a6:88:20:85:4c:cd:35:ac:31:62:98:fb:
         ae:d1:55:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:29:41 2026 by rpki-client