This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/F563CE94E3DB11F0B70B396D576F56BC.roa
File:                     F563CE94E3DB11F0B70B396D576F56BC.roa (raw, json)
Hash identifier:          fjPDJiKju03AA8lU0D2QmcVCCtb0KyFe0fVSVd+RtbQ=
Subject key identifier:   EC:AE:2C:71:BC:DC:39:39:53:4D:1C:42:3C:FC:D5:B5:EC:BC:56:81
Certificate issuer:       /CN=A9113BB0/serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124
Certificate serial:       7A
Authority key identifier: 45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/F563CE94E3DB11F0B70B396D576F56BC.roa
Signing time:             Sun 28 Dec 2025 10:57:10 +0000
ROA not before:           Sun 28 Dec 2025 10:57:10 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     153898
IP address blocks:        165.99.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl
                          rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 05:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113BB0, serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124
        Validity
            Not Before: Dec 28 10:57:10 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69510d06-e0b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:77:bf:52:e0:1d:86:cf:90:be:2e:c1:65:a7:
                    f7:f5:ab:d4:19:03:8f:58:ac:6e:58:44:b4:9e:1e:
                    0d:0b:eb:e3:62:da:be:4f:db:04:f8:74:23:36:dd:
                    92:91:c8:36:b9:7e:66:93:2a:13:82:a5:9d:34:d2:
                    6a:a4:ec:d9:5b:27:ea:e9:06:d3:5c:a5:71:63:dd:
                    c8:37:5e:0f:d2:54:5a:02:5d:51:2b:9c:f6:8f:26:
                    f6:aa:4b:ec:bd:3a:ba:0e:a2:9e:89:56:2a:51:52:
                    a6:30:a9:ef:b9:19:c6:68:25:5c:22:38:74:ba:80:
                    f5:db:9e:37:28:65:d0:45:a4:de:f1:e5:7a:f1:a9:
                    1c:2b:88:86:12:d3:c3:53:c8:4f:cd:b1:b3:e1:b8:
                    81:b5:89:28:39:5f:ae:b2:14:49:42:b5:7e:b5:61:
                    b0:cb:27:e6:fa:43:7b:64:a7:29:55:c2:fa:e5:05:
                    a4:55:2f:3b:c4:27:7c:6e:46:29:5d:e2:2b:2f:c9:
                    ef:f3:69:22:3c:a5:d1:ea:b1:c6:15:a8:a5:3b:1e:
                    9c:94:66:10:d7:64:59:67:b2:75:e2:85:03:c3:67:
                    52:39:c5:d6:52:77:7c:1a:e9:eb:04:c3:9f:c5:ea:
                    6b:f1:09:f6:30:58:f4:71:dd:90:cd:1b:26:cb:71:
                    eb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AE:2C:71:BC:DC:39:39:53:4D:1C:42:3C:FC:D5:B5:EC:BC:56:81
            X509v3 Authority Key Identifier:
                keyid:45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/F563CE94E3DB11F0B70B396D576F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:2f:f1:41:16:e4:1c:24:b2:fd:7e:4e:ff:97:3c:83:3b:9e:
         85:b8:96:ea:31:61:c4:4b:46:9e:a6:6c:86:80:6a:52:68:43:
         dc:84:08:2a:83:dc:97:e5:ba:ac:c6:68:72:77:a5:45:e5:42:
         03:ef:5c:a0:9c:0c:94:51:70:7c:cc:30:ae:25:53:90:4e:a1:
         97:8e:76:67:64:2e:47:b8:e8:e1:e9:e7:96:80:ce:1b:17:10:
         90:05:47:e9:f7:18:78:da:e6:6a:5f:18:3e:ec:ac:ba:66:d5:
         f4:4e:fc:2f:87:cb:1c:79:45:8c:29:e2:6a:38:ad:50:70:09:
         3c:95:aa:e2:ee:75:1a:33:93:7d:16:d3:c8:65:34:e2:e3:b7:
         aa:20:74:2d:98:32:7d:f8:3a:1c:bb:23:de:73:d6:90:2b:2d:
         da:4c:59:d7:f2:7f:3d:d5:69:4e:fb:21:1c:c8:2b:d4:b2:ea:
         10:fa:1e:49:f7:03:af:86:a8:79:bc:88:39:c9:c0:1f:d0:1a:
         06:46:dc:a1:6b:d5:97:2d:56:1e:71:27:2a:81:95:e0:e7:41:
         25:81:8e:5e:52:f6:24:26:2e:8d:f4:d6:ee:67:41:30:b5:2a:
         cf:fe:2b:3b:d4:a7:a2:22:9c:76:fe:e6:f6:61:1a:43:46:07:
         dd:f3:87:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 14:56:29 2026 by rpki-client