This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/709A2E7CDB9A11F0BFEA763F67D3641D.roa
File:                     709A2E7CDB9A11F0BFEA763F67D3641D.roa (raw, json)
Hash identifier:          udlS7juzmeuQlkwLVxxTsFHAd8fr37TAQ2KMyNZgZi0=
Subject key identifier:   48:E4:EA:92:E5:AF:1B:CA:7B:08:A0:03:25:24:84:28:D3:54:89:A2
Certificate issuer:       /CN=A915D062/serialNumber=47D7DFF6B41BD468C1F0C9D04C5E85E0C33F9FAB
Certificate serial:       02
Authority key identifier: 47:D7:DF:F6:B4:1B:D4:68:C1:F0:C9:D0:4C:5E:85:E0:C3:3F:9F:AB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/709A2E7CDB9A11F0BFEA763F67D3641D.roa
Signing time:             Wed 17 Dec 2025 22:48:01 +0000
ROA not before:           Wed 17 Dec 2025 22:48:01 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154439
IP address blocks:        144.79.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl
                          rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 07:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D062, serialNumber=47D7DFF6B41BD468C1F0C9D04C5E85E0C33F9FAB
        Validity
            Not Before: Dec 17 22:48:01 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69433321-403a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:58:f2:f6:10:08:a8:b5:26:4c:0f:ce:9c:ae:
                    55:98:65:97:7d:58:23:2b:44:ac:99:ba:34:e6:ca:
                    22:eb:b7:6b:17:ed:6e:8a:71:0b:ef:6a:b4:b2:3a:
                    75:ad:df:09:c5:00:c4:94:41:6f:d2:1f:46:5d:8a:
                    4e:71:1d:7c:64:03:46:cc:67:80:66:bf:1c:d5:9a:
                    ca:fa:ec:29:13:2b:c5:c6:69:2a:69:a2:cd:8d:da:
                    c4:55:4b:70:47:eb:b2:c8:e0:60:74:9d:fc:c9:75:
                    b1:9f:67:65:b4:a6:a7:11:96:4b:9a:8a:ff:e3:43:
                    45:7e:0c:7f:59:1c:cd:0e:e7:6e:41:f8:b1:05:e1:
                    47:f4:7f:5c:ec:ee:f7:b2:f0:34:4d:10:4c:54:c7:
                    b4:f5:ce:6c:da:38:ad:96:a9:09:f0:ca:94:be:50:
                    d5:e0:bc:13:fc:a7:5e:b8:90:97:be:f6:8a:b0:25:
                    97:b5:4d:d5:6c:df:19:0e:53:b7:31:ea:0c:ed:e6:
                    89:79:70:0f:f2:69:33:80:6e:36:af:97:22:44:6a:
                    02:11:98:33:2b:cb:a1:52:94:27:77:5a:a0:7a:1c:
                    0c:2a:91:f7:71:4f:a4:99:20:38:77:e7:0a:7f:c5:
                    31:9d:d3:6e:ed:fd:c2:dd:f7:45:5b:b8:af:44:39:
                    d4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E4:EA:92:E5:AF:1B:CA:7B:08:A0:03:25:24:84:28:D3:54:89:A2
            X509v3 Authority Key Identifier:
                keyid:47:D7:DF:F6:B4:1B:D4:68:C1:F0:C9:D0:4C:5E:85:E0:C3:3F:9F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/709A2E7CDB9A11F0BFEA763F67D3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:99:fc:00:ed:61:31:77:f6:6d:00:1b:98:f8:31:a1:b4:5d:
         11:8f:f4:d0:3e:34:96:83:74:f1:09:d4:f1:9c:1a:18:05:4b:
         f3:78:12:94:9c:c3:00:eb:bc:5b:02:51:ab:d2:f2:4f:0d:7e:
         0a:da:d9:55:65:bd:46:37:ad:ad:d9:af:84:ec:06:32:17:02:
         4c:da:e7:f7:78:cd:27:23:4b:1d:f1:b1:e5:aa:b6:87:c5:ae:
         75:c5:1a:00:cc:f5:e9:13:75:2a:62:05:7a:8a:54:a7:b2:c7:
         15:79:35:80:5f:e2:da:39:ee:2c:bc:48:7b:a0:fa:86:29:59:
         cc:cf:1d:17:5f:a0:80:04:0c:02:e8:3d:2d:77:86:59:9a:27:
         04:74:95:b8:ec:03:6b:87:c8:c1:e3:86:11:ea:29:b2:dd:00:
         b2:1f:94:67:5d:96:04:b2:17:8b:af:63:28:4e:ad:dd:eb:6d:
         07:07:28:d4:a4:f9:53:e0:3f:5e:84:04:3a:50:fe:05:c6:d7:
         11:b5:0e:61:cf:cc:05:79:59:b3:0a:95:5b:63:55:36:03:ed:
         b7:07:f4:10:33:41:70:b0:e8:65:82:dc:88:a7:8a:eb:d4:3f:
         ce:35:a0:ac:6b:a5:d3:83:3d:72:2d:fa:bb:e7:e6:18:1f:8c:
         c5:71:53:08
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
RDA2MjExMC8GA1UEBRMoNDdEN0RGRjZCNDFCRDQ2OEMxRjBDOUQwNEM1RTg1RTBD
MzNGOUZBQjAeFw0yNTEyMTcyMjQ4MDFaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5NDMzMzIxLTQwM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD6WPL2EAiotSZMD86crlWYZZd9WCMrRKyZujTmyiLrt2sX7W6KcQvvarSyOnWt
3wnFAMSUQW/SH0Zdik5xHXxkA0bMZ4BmvxzVmsr67CkTK8XGaSppos2N2sRVS3BH
67LI4GB0nfzJdbGfZ2W0pqcRlkuaiv/jQ0V+DH9ZHM0O525B+LEF4Uf0f1zs7vey
8DRNEExUx7T1zmzaOK2WqQnwypS+UNXgvBP8p164kJe+9oqwJZe1TdVs3xkOU7cx
6gzt5ol5cA/yaTOAbjavlyJEagIRmDMry6FSlCd3WqB6HAwqkfdxT6SZIDh35wp/
xTGd027t/cLd90VbuK9EOdRVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUSOTqkuWv
G8p7CKADJSSEKNNUiaIwHwYDVR0jBBgwFoAUR9ff9rQb1GjB8MnQTF6F4MM/n6sw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVEMDYyL0IxQjhCRUE2REI5
OTExRjA5MEE0QkNEMTY2RDM2NDFEL1I5ZmY5clFiMUdqQjhNblFURjZGNE1NX242
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUjlmZjlyUWIxR2pCOE1uUVRGNkY0TU1fbjZzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDA2Mi9CMUI4QkVBNkRCOTkxMUYwOTBBNEJDRDE2NkQzNjQxRC83MDlBMkU3Q0RC
OUExMUYwQkZFQTc2M0Y2N0QzNjQxRC5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAZBPojANBgkqhkiG9w0BAQsFAAOCAQEApJn8AO1hMXf2bQAb
mPgxobRdEY/00D40loN08QnU8ZwaGAVL83gSlJzDAOu8WwJRq9LyTw1+CtrZVWW9
RjetrdmvhOwGMhcCTNrn93jNJyNLHfGx5aq2h8WudcUaAMz16RN1KmIFeopUp7LH
FXk1gF/i2jnuLLxIe6D6hilZzM8dF1+ggAQMAug9LXeGWZonBHSVuOwDa4fIweOG
Eeopst0Ash+UZ12WBLIXi69jKE6t3ettBwco1KT5U+A/XoQEOlD+BcbXEbUOYc/M
BXlZswqVW2NVNgPttwf0EDNBcLDoZYLciKeK69Q/zjWgrGul04M9ci36u+fmGB+M
xXFTCA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 01:11:28 2025 by rpki-client