This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/36256C16D96011F0BB00DFAC96D3641D.roa
File:                     36256C16D96011F0BB00DFAC96D3641D.roa (raw, json)
Hash identifier:          6+W+vKMYiOsOm+Y3GN2oawDDGZir37CFnIYDqFPexks=
Subject key identifier:   03:D1:F5:C2:C7:A2:86:08:F3:02:3A:5E:FF:E7:F2:09:D2:60:08:E6
Certificate issuer:       /CN=A9153B58/serialNumber=02BC8848572AB1A0D1063E57B8220F2B52D6BDE7
Certificate serial:       02
Authority key identifier: 02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/36256C16D96011F0BB00DFAC96D3641D.roa
Signing time:             Mon 15 Dec 2025 02:46:10 +0000
ROA not before:           Mon 15 Dec 2025 02:46:10 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     154170
IP address blocks:        202.6.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.crl
                          rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 07:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153B58, serialNumber=02BC8848572AB1A0D1063E57B8220F2B52D6BDE7
        Validity
            Not Before: Dec 15 02:46:10 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=693f7672-4f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dc:5a:34:8d:4f:0e:20:4e:27:10:e4:e0:74:
                    12:7c:a2:d1:39:83:df:40:b3:a6:13:ec:74:56:c7:
                    09:65:e2:0e:3f:04:b6:b4:af:85:78:85:27:df:06:
                    39:bf:9f:c0:f6:21:20:7b:7a:18:a0:74:c9:21:78:
                    6c:9a:32:fb:6e:50:f5:31:20:12:6a:85:0b:84:16:
                    11:81:93:a1:d8:f3:53:2b:2f:ef:87:56:75:ee:c5:
                    8f:bf:e8:6c:3b:13:66:b6:60:78:f6:5b:28:fa:0f:
                    06:a3:26:02:5f:85:08:88:f9:50:a5:7c:65:c5:8f:
                    a6:c3:44:78:3e:90:69:c7:e4:a8:4f:30:ed:bd:22:
                    9c:ae:77:8a:af:58:2e:09:c3:6a:67:76:0b:3c:be:
                    3d:02:83:f3:ca:84:44:75:dc:73:53:43:ef:47:82:
                    0d:29:50:25:d9:f9:c1:0f:ae:b6:46:97:86:32:5f:
                    d5:a2:b4:10:fc:88:7a:88:bf:15:6e:a6:b7:03:99:
                    c8:19:2c:cd:e6:28:ed:00:53:8d:fe:44:c2:b1:ab:
                    c1:a4:de:64:0c:95:b3:1a:a6:a7:69:c7:d0:91:5a:
                    37:98:81:03:6b:99:af:b5:30:b2:8c:d7:7a:51:fb:
                    38:57:4e:9c:60:5e:40:2e:64:72:fb:f4:b8:67:cc:
                    5e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D1:F5:C2:C7:A2:86:08:F3:02:3A:5E:FF:E7:F2:09:D2:60:08:E6
            X509v3 Authority Key Identifier:
                keyid:02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/36256C16D96011F0BB00DFAC96D3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d9:df:b1:08:25:24:55:60:96:da:cb:2e:4f:6d:57:4f:0a:d7:
         a3:ff:9a:4f:95:bc:99:27:0d:4c:05:91:8c:0c:31:32:54:d4:
         85:91:02:be:05:9f:02:52:0b:eb:00:ef:1b:f5:57:43:af:f8:
         24:c9:13:3f:2f:4b:a4:26:d9:d1:80:ce:3c:37:05:03:f9:7e:
         eb:18:02:16:e5:b4:f8:79:3c:06:2b:f8:dd:e7:1e:4e:87:db:
         d7:95:6c:0b:db:e4:1b:7f:84:05:2d:16:fe:e4:91:c4:6d:1a:
         90:5f:f2:59:7b:6c:70:a0:b2:e8:8f:c2:e0:b7:20:2e:e3:2c:
         5e:d8:19:65:5e:2a:2f:97:ab:f1:8f:41:62:d6:20:d8:33:0b:
         22:ce:8a:66:0c:28:0d:89:cd:f1:0e:70:69:60:00:19:e0:ed:
         6d:13:50:ee:ec:55:a7:21:cc:c7:ae:ae:6c:6e:ee:bf:d9:73:
         15:ea:dc:d5:a0:77:f2:34:60:c7:dd:3b:b8:16:e4:40:e2:f1:
         9d:35:88:4b:fb:5a:9f:a8:bf:a8:de:c6:b1:03:cf:cf:bd:5b:
         84:1c:24:02:6b:50:30:35:1e:1c:0a:8c:8f:cf:78:56:51:ea:
         ce:fb:30:b8:82:29:13:52:51:8d:6a:2b:95:55:30:9b:0e:f2:
         70:d5:75:32
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
M0I1ODExMC8GA1UEBRMoMDJCQzg4NDg1NzJBQjFBMEQxMDYzRTU3QjgyMjBGMkI1
MkQ2QkRFNzAeFw0yNTEyMTUwMjQ2MTBaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5M2Y3NjcyLTRmMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDT3Fo0jU8OIE4nEOTgdBJ8otE5g99As6YT7HRWxwll4g4/BLa0r4V4hSffBjm/
n8D2ISB7ehigdMkheGyaMvtuUPUxIBJqhQuEFhGBk6HY81MrL++HVnXuxY+/6Gw7
E2a2YHj2Wyj6DwajJgJfhQiI+VClfGXFj6bDRHg+kGnH5KhPMO29Ipyud4qvWC4J
w2pndgs8vj0Cg/PKhER13HNTQ+9Hgg0pUCXZ+cEPrrZGl4YyX9WitBD8iHqIvxVu
prcDmcgZLM3mKO0AU43+RMKxq8Gk3mQMlbMapqdpx9CRWjeYgQNrma+1MLKM13pR
+zhXTpxgXkAuZHL79LhnzF5HAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUA9H1wsei
hgjzAjpe/+fyCdJgCOYwHwYDVR0jBBgwFoAUAryISFcqsaDRBj5XuCIPK1LWvecw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzQjU4LzQyQTUyNjQ0RDk1
RjExRjBBQTE1ODZBMTk2RDM2NDFEL0FyeUlTRmNxc2FEUkJqNVh1Q0lQSzFMV3Zl
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQXJ5SVNGY3FzYURSQmo1WHVDSVBLMUxXdmVjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
M0I1OC80MkE1MjY0NEQ5NUYxMUYwQUExNTg2QTE5NkQzNjQxRC8zNjI1NkMxNkQ5
NjAxMUYwQkIwMERGQUM5NkQzNjQxRC5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAcoGwjANBgkqhkiG9w0BAQsFAAOCAQEA2d+xCCUkVWCW2ssu
T21XTwrXo/+aT5W8mScNTAWRjAwxMlTUhZECvgWfAlIL6wDvG/VXQ6/4JMkTPy9L
pCbZ0YDOPDcFA/l+6xgCFuW0+Hk8Biv43eceTofb15VsC9vkG3+EBS0W/uSRxG0a
kF/yWXtscKCy6I/C4LcgLuMsXtgZZV4qL5er8Y9BYtYg2DMLIs6KZgwoDYnN8Q5w
aWAAGeDtbRNQ7uxVpyHMx66ubG7uv9lzFerc1aB38jRgx907uBbkQOLxnTWIS/ta
n6i/qN7GsQPPz71bhBwkAmtQMDUeHAqMj894VlHqzvswuIIpE1JRjWorlVUwmw7y
cNV1Mg==
-----END CERTIFICATE-----
Generated at Fri Dec 19 22:05:15 2025 by rpki-client