This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/52040BECDCBF11F0B2EC67DA4A6F56BC.roa
File:                     52040BECDCBF11F0B2EC67DA4A6F56BC.roa (raw, json)
Hash identifier:          J3cr7aFhE+Huye89XrrWvGR0/Ulqtufirb1CU+6Cs+M=
Subject key identifier:   DA:F2:2D:4D:F8:6C:CE:C0:4C:7C:4E:C4:77:28:6F:52:F7:82:2A:E0
Certificate issuer:       /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial:       AA
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/52040BECDCBF11F0B2EC67DA4A6F56BC.roa
Signing time:             Fri 19 Dec 2025 09:44:32 +0000
ROA not before:           Fri 19 Dec 2025 09:44:32 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     9304
IP address blocks:        202.181.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
                          rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 10:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
        Validity
            Not Before: Dec 19 09:44:32 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=69451e80-7c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:74:d0:58:10:96:9a:2d:4d:21:f0:be:64:72:
                    fd:6d:5c:b9:66:a7:b9:d0:08:26:ba:5e:d4:9c:a1:
                    5e:51:84:d8:fd:14:2f:70:8f:a5:b2:09:d5:16:f5:
                    0c:25:21:d8:ef:b6:cb:de:6b:91:3a:26:71:26:4c:
                    20:4c:2f:3e:17:8f:3a:bc:34:ed:c2:e6:e7:e2:35:
                    b9:9a:b7:91:89:1c:90:80:e2:4f:28:c0:2d:c1:d0:
                    24:d6:d5:13:70:f5:2e:ff:a9:1d:7a:d1:2d:33:7d:
                    fc:25:b5:65:da:ce:3a:26:84:f1:2b:e2:3b:24:af:
                    d0:ba:28:d9:c6:91:f2:0c:c1:e4:66:a2:dc:62:12:
                    77:6e:28:4e:2f:c5:ec:cd:ee:7d:7f:89:41:89:86:
                    49:51:0d:51:18:25:6c:c6:4d:14:40:4c:c4:fe:d9:
                    d6:37:bd:70:d1:9b:bf:cb:1b:91:2e:51:27:cc:55:
                    2b:bd:ef:e9:05:17:bf:32:7d:f3:08:74:8e:df:df:
                    8a:a2:3d:92:22:9f:e3:10:28:e1:0c:8a:6c:e2:ca:
                    1b:d3:19:18:c9:7e:a9:4f:71:1f:18:27:20:d1:b7:
                    23:62:ee:eb:3c:96:d9:83:e4:7e:47:69:e0:48:c5:
                    c6:51:09:7f:8d:24:0b:6e:28:06:51:70:32:f6:7e:
                    df:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F2:2D:4D:F8:6C:CE:C0:4C:7C:4E:C4:77:28:6F:52:F7:82:2A:E0
            X509v3 Authority Key Identifier:
                keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/52040BECDCBF11F0B2EC67DA4A6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.181.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:2f:14:87:c5:35:19:51:55:f0:bc:de:bf:90:4d:dd:d6:e2:
         5c:d3:08:e6:65:d6:3c:1a:05:05:00:3b:76:a6:17:c6:fa:4d:
         a8:c6:4f:85:6b:37:53:36:95:c9:44:6f:33:c3:2a:8f:9c:91:
         58:3a:5e:9d:33:b2:53:b7:6b:e7:d1:6b:7f:1d:b7:3a:64:5d:
         9e:71:65:95:64:91:7d:7d:a0:b2:9d:e6:25:bb:1e:76:dd:6f:
         44:3a:e5:c8:77:68:cf:38:bf:55:98:97:ca:89:d4:5d:e7:24:
         59:87:61:85:b7:3a:b5:1f:6d:44:0c:ac:ae:a2:6b:31:1f:9e:
         91:cb:dc:c0:b0:64:0c:1c:4d:47:0f:e5:6c:f3:49:fb:e0:2d:
         c1:0c:69:b8:8c:e2:61:5f:6e:bd:19:c5:de:f0:5a:3e:8e:fb:
         68:6a:6d:a2:1a:61:28:e7:2b:f6:9a:78:d8:37:d0:e1:92:9b:
         cc:7e:ac:83:7b:de:d3:cf:17:2f:bb:7f:be:83:40:f0:a2:ce:
         4a:8f:84:1d:00:71:b3:62:e8:ea:d7:9e:19:70:8f:06:8b:0f:
         54:02:fe:c9:82:98:a3:a3:6d:55:9d:ed:64:01:95:74:45:ee:
         36:16:96:6e:4d:fe:65:b3:c3:14:7f:bb:0a:ea:37:1b:50:03:
         61:5a:ac:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:11:32 2025 by rpki-client