This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/902A638ED68011F0B036527A68D3641D.roa
File:                     902A638ED68011F0B036527A68D3641D.roa (raw, json)
Hash identifier:          2It0NfBqTerLdCUquomD/v4NX3dFAT9hIqZfvaAKNZU=
Subject key identifier:   68:77:05:87:BE:A9:A9:80:17:FB:E9:0E:3B:1F:36:6A:D4:D8:EA:B6
Certificate issuer:       /CN=A9136067/serialNumber=8EA815D03A51C51CED5EBE5FD99352B6376B557D
Certificate serial:       02
Authority key identifier: 8E:A8:15:D0:3A:51:C5:1C:ED:5E:BE:5F:D9:93:52:B6:37:6B:55:7D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqgV0DpRxRztXr5f2ZNStjdrVX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/902A638ED68011F0B036527A68D3641D.roa
Signing time:             Thu 11 Dec 2025 11:00:11 +0000
ROA not before:           Thu 11 Dec 2025 11:00:11 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154409
IP address blocks:        144.79.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.crl
                          rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqgV0DpRxRztXr5f2ZNStjdrVX0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136067, serialNumber=8EA815D03A51C51CED5EBE5FD99352B6376B557D
        Validity
            Not Before: Dec 11 11:00:11 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=693aa43b-a1e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:38:27:80:a2:08:53:b2:56:5a:c2:0f:cb:be:
                    3d:0f:50:bc:24:d5:49:17:e5:50:91:ee:f1:1c:1f:
                    a4:d3:f3:85:66:0e:65:2d:cc:72:c5:70:c5:ff:df:
                    88:ab:22:21:92:94:03:e2:05:30:5e:83:7e:89:36:
                    8c:c8:f6:e5:72:16:12:82:2c:c6:c7:5e:ae:d5:31:
                    6d:e8:60:88:cd:7b:ef:6b:67:02:51:07:e9:cd:5c:
                    91:ca:89:19:87:aa:88:c0:65:fe:b9:25:21:59:08:
                    71:b1:a5:e1:0b:f3:d3:b5:57:2e:4b:1e:81:a1:94:
                    3e:25:0f:61:49:9b:ee:c9:9f:7a:1d:f3:9f:b9:9a:
                    e0:ae:92:eb:c6:89:d4:c9:e0:a2:ce:47:34:5f:34:
                    19:dc:34:35:a9:f7:d7:ce:f9:36:c8:34:73:38:a0:
                    1a:cc:14:9d:e9:97:84:0b:5f:48:78:2a:1c:66:af:
                    d6:ef:81:7f:11:fb:39:bf:25:d8:09:71:b9:ed:75:
                    d7:48:89:38:7c:e1:21:8e:ae:e3:27:37:93:ac:fc:
                    5a:7b:ee:19:7f:67:3d:7e:80:d4:24:20:6c:2d:83:
                    9a:34:54:04:2e:bb:eb:5b:a5:1b:68:24:b8:86:7c:
                    3a:2c:9d:22:25:00:16:42:26:e4:67:d0:32:88:2f:
                    8e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:77:05:87:BE:A9:A9:80:17:FB:E9:0E:3B:1F:36:6A:D4:D8:EA:B6
            X509v3 Authority Key Identifier:
                keyid:8E:A8:15:D0:3A:51:C5:1C:ED:5E:BE:5F:D9:93:52:B6:37:6B:55:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqgV0DpRxRztXr5f2ZNStjdrVX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/902A638ED68011F0B036527A68D3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:94:15:1a:e0:8d:14:f7:bb:44:d7:d6:97:aa:b8:0d:81:60:
         b2:19:47:84:a6:f2:d2:3d:8d:3d:21:3f:7a:dc:92:2c:2b:8e:
         54:35:9c:0b:95:2b:2e:c6:41:97:51:45:fd:4b:7b:f4:ab:00:
         a3:58:b3:70:ea:0a:ed:22:a3:90:5e:f9:29:74:14:9d:97:b2:
         f2:d4:ce:5b:32:b0:30:87:5f:6a:78:80:8d:a8:69:46:c2:f1:
         da:95:a4:03:d3:72:9b:e1:7b:3b:56:1c:17:e6:ad:a8:ef:88:
         ae:e3:fc:eb:ca:d4:98:44:7f:d0:7c:b5:0a:4b:32:32:9a:cc:
         bf:eb:88:44:96:e1:20:f5:80:ea:01:cb:01:a8:39:07:31:cf:
         3c:d5:bf:1d:33:fa:37:34:91:73:d7:f4:44:b6:e4:cb:a8:fb:
         4f:50:c3:93:3e:e3:61:f2:a0:c4:16:9d:17:0f:87:df:cf:64:
         9a:5a:26:0b:12:72:68:e1:27:14:17:d2:8d:91:7c:05:aa:11:
         9c:90:5e:0b:9c:c9:2a:68:d2:e0:3c:ce:a6:e7:93:1f:78:5d:
         4b:c7:8c:3e:c9:c3:87:0a:dd:df:ef:04:18:62:5b:55:97:48:
         c0:7a:dc:d5:f8:2b:cd:ad:20:3b:2a:fd:6c:8f:39:f9:a6:07:
         3c:7c:75:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:37:41 2025 by rpki-client