This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/0664C974FEF811EFB0C52572C4F9AE02.roa
File:                     0664C974FEF811EFB0C52572C4F9AE02.roa (raw, json)
Hash identifier:          qw98EXKpwezEJaUdjFxnME0guuBGI/INe4GkxMZV/98=
Subject key identifier:   E3:19:64:DD:C3:74:1E:4D:C9:38:4A:3A:63:9B:55:6B:F9:80:23:2C
Certificate issuer:       /CN=A91F8282/serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24
Certificate serial:       86
Authority key identifier: 1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/0664C974FEF811EFB0C52572C4F9AE02.roa
Signing time:             Mon 17 Nov 2025 04:52:36 +0000
ROA not before:           Mon 17 Nov 2025 04:52:36 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     7514
IP address blocks:        82.100.184.0/21 maxlen: 21
                          95.87.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8282, serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24
        Validity
            Not Before: Nov 17 04:52:36 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=691aaa13-2e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e7:a3:52:11:09:7b:5b:e9:c4:bf:51:ca:e2:
                    fe:f0:e7:cb:2e:58:9c:a3:c5:37:0d:d7:95:0d:5c:
                    d9:12:24:8e:90:b4:9a:15:57:e4:89:7a:a8:93:28:
                    7c:16:c5:4a:af:d7:d6:9e:e5:fd:75:29:36:cd:2a:
                    6e:e4:8b:f7:9e:0e:7b:df:be:07:6e:85:07:e3:df:
                    da:08:b5:bf:0c:57:ff:b0:d4:e7:c0:b8:dc:3c:c6:
                    e2:1a:65:f4:36:d9:e2:fe:91:e9:a6:4f:2e:d0:6b:
                    60:93:d2:a2:67:51:fa:0a:1e:18:f3:f4:b8:df:e5:
                    82:b8:ce:b2:04:1d:87:38:f0:55:6d:38:b9:99:ee:
                    07:cf:b9:d4:74:61:be:fd:29:05:a8:93:5e:d6:32:
                    d2:f7:58:0c:20:fd:41:9c:8a:e2:03:a6:a0:e4:69:
                    ba:67:49:1c:1b:4a:47:bc:54:77:fc:c3:4c:60:c3:
                    69:11:be:0b:93:3a:7e:85:89:9b:cd:5f:2f:85:93:
                    40:e0:8b:a6:7f:4b:46:92:9f:d3:82:c8:91:d0:d0:
                    c8:88:59:0c:8b:93:f8:2c:c5:a0:74:e0:d5:c2:db:
                    a1:14:71:7e:eb:bb:33:28:74:41:9f:30:a3:e2:45:
                    c9:73:96:e0:54:34:dc:47:e0:d8:79:06:1e:b1:d7:
                    7a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:19:64:DD:C3:74:1E:4D:C9:38:4A:3A:63:9B:55:6B:F9:80:23:2C
            X509v3 Authority Key Identifier:
                keyid:1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/0664C974FEF811EFB0C52572C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.100.184.0/21
                  95.87.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:cc:dd:06:7d:36:a2:d2:fb:6f:17:3e:40:18:b4:9a:41:05:
         8c:97:6e:1d:a1:6a:ed:0e:6d:be:ff:8e:81:d7:40:e2:93:69:
         50:c2:e3:42:55:f9:7b:5f:75:d2:41:03:75:d8:de:81:5f:50:
         9c:83:0f:a4:01:98:ee:f4:c5:62:22:6a:ac:59:91:3b:e6:c4:
         21:3c:55:9f:55:a7:79:3d:0a:9a:46:00:15:7c:63:61:73:ab:
         fe:8f:7a:03:2c:bb:91:2e:e0:66:88:d3:fe:7a:65:4a:75:e4:
         80:33:01:e9:3c:2f:5a:c5:c0:47:5e:61:11:8f:e6:f4:47:e5:
         b9:d0:6a:c3:92:5d:28:8d:2d:76:03:51:c3:e0:07:5a:69:df:
         f2:1c:2f:10:36:02:31:9a:37:68:82:2f:46:1e:5f:38:0c:e3:
         17:7a:ed:42:6e:c7:1a:b8:35:f3:22:9f:80:49:03:7f:9f:38:
         d7:20:1b:9c:57:0f:0a:fb:1f:91:7c:30:93:b7:38:37:74:fb:
         92:44:28:33:e7:7a:21:65:4f:d2:4d:95:fb:59:00:fe:ab:26:
         ab:13:4e:dd:f2:c5:be:02:fd:0d:3b:fc:01:33:41:34:60:8f:
         a7:54:ca:3d:0b:2e:f5:25:89:aa:6b:93:a9:77:00:f8:d4:8e:
         d5:76:5b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:11:10 2025 by rpki-client