This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B2A621DADA4711F0A0B4C6A990D3641D.roa
File:                     B2A621DADA4711F0A0B4C6A990D3641D.roa (raw, json)
Hash identifier:          0YoPMQw7ZQ5kCQUd3F7ZIgdfuVPe710u9EKW9PtZo3w=
Subject key identifier:   0C:38:12:DF:E1:65:F4:1F:91:80:2C:93:69:C5:53:FD:34:04:DF:1B
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       0F02
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B2A621DADA4711F0A0B4C6A990D3641D.roa
Signing time:             Tue 16 Dec 2025 06:23:12 +0000
ROA not before:           Tue 16 Dec 2025 06:23:12 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     141372
IP address blocks:        111.92.158.0/24 maxlen: 24
                          111.92.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3842 (0xf02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Dec 16 06:23:12 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6940fad0-02e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:dd:12:a6:5c:96:c5:b7:cb:e7:19:11:9a:
                    15:5d:59:bc:62:74:a9:5d:4e:77:6f:2a:5b:b6:c3:
                    fe:bd:d8:bc:77:53:84:57:ce:0a:da:75:1f:2c:f9:
                    6d:72:06:8e:4a:be:97:77:5d:69:90:0c:fd:10:32:
                    09:a0:d3:af:a3:17:57:b0:35:a3:ff:e7:ab:b9:f3:
                    68:c5:ec:e2:bf:30:91:50:8c:88:f6:a6:9b:e1:0e:
                    0c:cd:54:ba:ac:f2:c3:23:88:94:b5:49:68:98:74:
                    ee:26:ca:9f:71:22:7c:10:d8:c7:46:c5:3a:d9:b6:
                    0a:e6:48:df:ea:6d:ab:b4:31:73:c9:5e:4a:29:2a:
                    92:80:1e:e5:56:6e:c7:6b:56:40:86:ce:44:e5:12:
                    1c:52:17:7e:27:c6:30:6f:45:d3:43:4b:40:78:f6:
                    c7:71:21:6d:e9:a0:61:7f:19:46:ce:28:b5:60:90:
                    20:f8:93:25:5d:53:fd:3b:3f:eb:14:f0:eb:cd:f2:
                    00:d3:82:da:14:0d:97:cc:2e:ad:c2:8f:93:61:a2:
                    dc:f7:c0:e9:c8:75:95:40:08:5a:9b:9d:f9:53:df:
                    99:5e:0c:e7:e2:87:4a:ba:1c:5b:18:de:64:ed:25:
                    b2:8a:95:75:c4:bd:e4:6b:89:1b:ff:5c:72:87:ff:
                    64:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:38:12:DF:E1:65:F4:1F:91:80:2C:93:69:C5:53:FD:34:04:DF:1B
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B2A621DADA4711F0A0B4C6A990D3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:d0:4b:d3:c6:4d:80:60:58:69:a6:a4:e1:5c:f4:d6:f6:30:
         f1:59:df:28:58:d2:05:3b:bf:59:4b:a0:b4:82:a9:54:6e:71:
         1a:68:ed:80:fc:80:b2:68:59:ee:d6:02:d5:26:01:64:83:30:
         6b:5f:a8:16:b6:d0:01:58:b1:d4:3a:91:93:63:87:69:96:e2:
         0e:51:75:55:e3:c5:54:95:3a:d5:ff:46:d0:ad:4d:e6:7a:8b:
         22:74:94:b7:85:7b:c3:4b:91:8e:44:35:f4:b3:2c:76:d3:7a:
         54:0f:ee:60:00:2f:ce:41:97:f8:2e:fc:39:63:b1:5f:e0:15:
         c4:7f:9a:c0:f2:b8:fb:b9:d8:4d:5a:34:d2:a0:1f:57:ba:a1:
         80:06:f9:be:ab:5f:aa:3d:58:81:32:b7:00:22:0a:85:4d:40:
         54:27:e3:58:b7:d9:8c:b0:8c:74:8d:74:b9:df:76:8f:57:a6:
         32:70:40:10:2c:2b:f1:91:3b:34:8c:07:41:35:58:02:f0:ef:
         64:f3:56:d4:3e:12:af:98:fb:88:b6:51:e3:79:94:40:07:dc:
         fa:b0:da:ee:81:b7:12:e0:91:b2:7a:0f:43:1e:96:80:ae:d8:
         7a:43:f5:bf:4b:d4:7f:5f:c4:a5:ce:f0:23:5d:80:f7:ab:f5:
         13:51:bd:be
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjUxMjE2MDYyMzEyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQwZmFkMC0wMmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtKHdEqZclsW3y+cZEZoVXVm8YnSpXU53bypbtsP+vdi8d1OEV84K2nUfLPlt
cgaOSr6Xd11pkAz9EDIJoNOvoxdXsDWj/+erufNoxezivzCRUIyI9qab4Q4MzVS6
rPLDI4iUtUlomHTuJsqfcSJ8ENjHRsU62bYK5kjf6m2rtDFzyV5KKSqSgB7lVm7H
a1ZAhs5E5RIcUhd+J8Ywb0XTQ0tAePbHcSFt6aBhfxlGzii1YJAg+JMlXVP9Oz/r
FPDrzfIA04LaFA2XzC6two+TYaLc98DpyHWVQAham535U9+ZXgzn4odKuhxbGN5k
7SWyipV1xL3ka4kb/1xyh/9kbwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAw4Et/h
ZfQfkYAsk2nFU/00BN8bMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvQjJBNjIxREFE
QTQ3MTFGMEEwQjRDNkE5OTBEMzY0MUQucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFvXJ4wDQYJKoZIhvcNAQELBQADggEBAGPQS9PGTYBgWGmm
pOFc9Nb2MPFZ3yhY0gU7v1lLoLSCqVRucRpo7YD8gLJoWe7WAtUmAWSDMGtfqBa2
0AFYsdQ6kZNjh2mW4g5RdVXjxVSVOtX/RtCtTeZ6iyJ0lLeFe8NLkY5ENfSzLHbT
elQP7mAAL85Bl/gu/DljsV/gFcR/msDyuPu52E1aNNKgH1e6oYAG+b6rX6o9WIEy
twAiCoVNQFQn41i32YywjHSNdLnfdo9XpjJwQBAsK/GROzSMB0E1WALw72TzVtQ+
Eq+Y+4i2UeN5lEAH3Pqw2u6BtxLgkbJ6D0MeloCu2HpD9b9L1H9fxKXO8CNdgPer
9RNRvb4=
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:45:49 2025 by rpki-client