This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/0A6F23BCD89011F0809DF24792D3641D.roa
File:                     0A6F23BCD89011F0809DF24792D3641D.roa (raw, json)
Hash identifier:          w54n3xroRGH8dke7e/Dx0FmQj9Q9lWiOIK95NdES2bA=
Subject key identifier:   F8:BB:2E:B8:E6:0A:37:0E:1D:B7:55:4F:EF:26:0B:EB:CD:BE:AC:70
Certificate issuer:       /CN=A9142127/serialNumber=ECA7877541A6933DD5061A6C82083D3B83915C85
Certificate serial:       04
Authority key identifier: EC:A7:87:75:41:A6:93:3D:D5:06:1A:6C:82:08:3D:3B:83:91:5C:85
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/0A6F23BCD89011F0809DF24792D3641D.roa
Signing time:             Sun 14 Dec 2025 01:56:01 +0000
ROA not before:           Sun 14 Dec 2025 01:56:01 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     4049
IP address blocks:        157.85.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.crl
                          rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142127, serialNumber=ECA7877541A6933DD5061A6C82083D3B83915C85
        Validity
            Not Before: Dec 14 01:56:01 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=693e1931-de6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:13:f8:06:9e:73:84:85:66:c3:83:5d:9f:08:
                    4f:79:51:3a:34:52:2a:b6:01:a5:62:8b:39:76:a5:
                    a7:ff:97:e2:50:e5:8c:15:6e:59:2c:21:c8:66:90:
                    4d:d4:7a:c1:59:06:9a:b7:fc:60:b5:37:fb:01:6c:
                    33:52:cd:cf:b4:b5:39:00:84:de:40:7a:c0:0b:78:
                    61:ad:91:55:27:16:13:08:03:da:11:34:52:35:87:
                    5e:6f:6d:89:df:18:31:6d:fe:8e:13:4f:15:26:a8:
                    3f:0a:63:f7:e4:dc:05:05:2f:3e:f4:39:43:78:b9:
                    60:47:75:9c:bc:48:23:8c:4c:ed:25:69:e7:b2:2f:
                    85:ee:92:0d:05:f5:20:89:4d:58:98:cb:16:ec:79:
                    a9:7d:cc:ba:83:1b:3b:e4:89:3e:89:df:71:ad:d9:
                    3b:5e:81:90:0f:05:f5:56:85:12:65:da:a1:09:80:
                    80:58:aa:e0:1f:b1:4d:d4:3c:50:bc:44:c1:64:b2:
                    c2:d5:e5:33:22:80:fd:cd:3f:a1:63:10:01:8b:cc:
                    c2:9e:b5:cd:54:09:c3:1f:a5:47:bf:68:94:39:90:
                    79:1a:fc:ea:b4:b6:cb:fc:8a:ad:8c:e3:6b:6a:e7:
                    ff:d5:a9:2e:e5:a9:9a:33:c6:df:7d:d8:54:d7:89:
                    b8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BB:2E:B8:E6:0A:37:0E:1D:B7:55:4F:EF:26:0B:EB:CD:BE:AC:70
            X509v3 Authority Key Identifier:
                keyid:EC:A7:87:75:41:A6:93:3D:D5:06:1A:6C:82:08:3D:3B:83:91:5C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/0A6F23BCD89011F0809DF24792D3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:e5:2a:31:af:6d:b0:f4:13:c5:12:49:7a:8a:77:04:e2:ea:
         cd:93:5b:b1:62:11:87:4c:60:92:6e:09:98:9d:54:eb:c2:e4:
         06:23:2b:dc:41:38:55:0f:00:00:cb:4e:5d:64:b2:91:a1:69:
         0d:86:d0:63:d6:03:a8:c9:8f:51:4c:0d:da:85:74:9c:68:b1:
         db:8a:bc:87:7a:a2:6d:aa:81:19:92:8d:9a:8e:49:89:86:bc:
         81:4d:fa:96:14:f1:c0:6a:b3:c9:74:89:af:b7:30:92:0a:e2:
         0e:fe:91:c3:dd:50:88:53:4c:37:01:e5:79:43:d1:12:68:ea:
         d7:1e:70:db:c6:62:d6:72:bc:15:75:df:da:63:be:7e:64:da:
         f6:2d:d3:8e:79:72:1d:ec:84:de:8b:67:97:5d:f9:3c:19:63:
         cc:39:c3:e5:7c:86:95:dc:8d:7d:6c:76:b3:f8:2e:75:25:db:
         7c:2a:fa:7f:d9:97:dd:0b:ad:56:99:e6:4b:de:0d:16:9e:c3:
         9d:e3:91:86:10:c6:ed:9d:22:fb:d1:9c:0b:3c:5d:2f:c5:90:
         b2:1c:1a:c5:e7:cf:9a:c7:35:ff:23:0b:04:b7:38:b8:b5:5c:
         14:97:9f:3b:d3:5e:0f:e0:5a:a2:62:42:1a:3a:0e:3d:95:56:
         6e:3d:90:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:37:39 2025 by rpki-client