This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/13EE3260596A11ECB1394271C4F9AE02.roa
File:                     13EE3260596A11ECB1394271C4F9AE02.roa (raw, json)
Hash identifier:          pNXwK+NLW6WN3eFo++mYFK5ET5lmuZ4PR6VBVBIThu8=
Subject key identifier:   D2:80:5A:D2:79:7E:AC:D7:F1:18:BE:B9:E7:31:E6:BD:E2:8B:92:68
Certificate issuer:       /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D
Certificate serial:       04CE
Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/13EE3260596A11ECB1394271C4F9AE02.roa
Signing time:             Sat 20 Dec 2025 17:14:43 +0000
ROA not before:           Sat 20 Dec 2025 17:14:43 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     208046
IP address blocks:        45.129.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl
                          rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 17:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1230 (0x4ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157DAE, serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D
        Validity
            Not Before: Dec 20 17:14:43 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6946d983-0283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:78:41:83:74:e1:53:38:6e:eb:43:90:cf:cf:
                    09:3e:a7:f2:4c:49:50:fc:77:3c:a3:2c:ef:9a:fa:
                    c8:e8:68:73:75:51:76:8b:1c:33:f6:6c:42:94:41:
                    4b:34:ec:8f:37:01:47:5a:06:6f:4e:05:ac:74:29:
                    08:dc:c9:37:c7:03:05:de:e7:d6:dc:ed:8d:00:96:
                    83:53:f8:7c:b0:e1:22:67:3b:f7:00:ce:50:2e:07:
                    80:ba:58:a3:ee:59:a8:e0:e0:3c:e4:d9:12:54:53:
                    a3:fe:fc:15:ce:20:17:59:49:bd:3a:03:6f:8d:3b:
                    f3:64:1e:b0:10:ae:6b:7c:a9:c0:63:2e:4f:47:2a:
                    b9:7c:15:be:c2:e5:94:23:3e:01:0e:82:9c:43:00:
                    f0:cc:71:dd:ee:51:6d:9f:83:34:01:11:8d:be:6a:
                    a8:9e:83:8c:0c:f3:35:53:6a:19:84:40:d2:e8:39:
                    59:80:6f:be:4b:a2:05:57:09:b7:96:63:0c:87:f2:
                    ed:41:5c:6d:d6:96:75:0f:05:b1:bf:f6:cb:d3:b8:
                    e2:f5:1d:dc:42:f1:af:b1:6f:b3:ba:3f:2f:db:4f:
                    9c:a4:2f:e8:ef:74:44:a5:a8:8b:1e:0d:a4:35:82:
                    f4:06:3a:6b:3d:fb:e6:b5:5c:0a:8f:25:97:28:bc:
                    2e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:80:5A:D2:79:7E:AC:D7:F1:18:BE:B9:E7:31:E6:BD:E2:8B:92:68
            X509v3 Authority Key Identifier:
                keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/13EE3260596A11ECB1394271C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:5a:dc:0d:3f:9c:64:65:2c:ad:16:5d:b4:8f:06:e9:6c:d5:
         4c:0e:81:27:5d:32:0a:a0:53:73:a3:77:e5:01:f4:3f:45:2b:
         29:77:d4:9a:f4:44:51:b7:45:22:6c:55:2b:91:41:24:f8:b2:
         8a:2b:cd:20:70:b8:e6:03:75:82:4f:a7:a6:de:5b:d9:2b:04:
         b3:33:2f:a5:aa:eb:0a:c7:f5:f3:c5:d0:ae:75:8c:25:85:52:
         74:e4:62:47:69:50:c6:b3:f6:19:bd:25:0b:61:36:15:67:69:
         1a:67:98:da:bf:7a:fd:aa:c9:df:31:91:b3:bb:42:4a:82:ff:
         c8:1e:64:0e:d5:bb:61:55:af:d2:34:1b:52:83:8e:c4:f3:22:
         1c:99:23:8a:eb:49:9e:d0:03:0f:d9:48:ec:f1:56:a6:c0:39:
         65:1d:bd:5e:e7:c0:92:43:52:b7:2d:c0:0e:1e:53:4d:63:a5:
         04:74:73:ec:5e:96:21:45:5e:61:09:74:78:0a:f3:85:1b:9e:
         6d:6b:e1:9f:4e:a2:63:36:4c:d7:cb:98:fe:d6:19:a0:91:c0:
         88:ad:6f:71:1b:93:21:55:8e:7e:73:17:69:8a:fc:0a:d7:88:
         5a:97:7a:8d:2a:9c:8b:29:a6:19:71:75:51:d2:92:1b:92:64:
         d0:fb:9a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:42:58 2025 by rpki-client