This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/B7A4FD5EDD9A11F0956A19D3406F56BC.roa
File:                     B7A4FD5EDD9A11F0956A19D3406F56BC.roa (raw, json)
Hash identifier:          tfcxbYznbfdNFe5IyNR+LEROebxYb/8i/hlu8FYb7dY=
Subject key identifier:   3F:9A:32:03:2E:8F:50:AA:55:18:EB:41:11:C6:CF:BC:3A:A8:29:9D
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       02ED
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/B7A4FD5EDD9A11F0956A19D3406F56BC.roa
Signing time:             Sat 20 Dec 2025 11:55:02 +0000
ROA not before:           Sat 20 Dec 2025 11:55:02 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     137969
IP address blocks:        202.155.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 00:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 749 (0x2ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Dec 20 11:55:02 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69468e96-321d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5a:17:57:cf:6e:46:44:d7:0b:28:95:fc:21:
                    a8:d8:b3:54:f7:4f:57:94:b5:4b:67:66:1a:da:2f:
                    89:86:01:81:a7:d8:50:96:4a:bb:c6:2e:c1:87:f3:
                    f3:94:af:2d:0b:4d:e2:ba:54:e4:90:d0:8d:66:29:
                    ef:31:0b:cf:8b:c4:34:ef:89:ab:e9:74:34:f1:d7:
                    0d:24:89:a1:06:78:02:eb:ba:75:98:95:94:9b:fe:
                    05:29:83:08:eb:52:a5:c0:b8:b5:a9:f5:e4:84:11:
                    eb:b5:68:97:c1:c0:b7:62:eb:08:0e:55:d9:dd:cf:
                    44:82:83:16:a4:c9:ed:25:08:7a:17:f2:a4:f3:22:
                    1a:8a:ab:cf:f7:1b:55:6a:1c:3f:47:94:48:6d:30:
                    dd:26:c2:ca:fc:a0:cb:9f:72:c2:ea:4c:39:f4:cd:
                    04:91:85:1a:18:5c:d7:cc:ee:4a:a2:88:62:83:6c:
                    0c:fd:6a:39:72:2b:45:98:a8:b5:bf:12:49:63:e5:
                    32:5e:be:7b:0d:d9:73:0d:b9:7c:b2:a6:b5:aa:14:
                    c8:62:76:1e:90:17:45:1a:8c:ca:f2:26:52:16:15:
                    a5:2a:52:9f:46:e4:79:c5:ba:95:11:9b:7f:18:cb:
                    0f:f0:15:6e:83:39:33:a9:22:10:73:06:e9:65:87:
                    24:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9A:32:03:2E:8F:50:AA:55:18:EB:41:11:C6:CF:BC:3A:A8:29:9D
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/B7A4FD5EDD9A11F0956A19D3406F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:7a:b6:9c:ba:fd:98:9e:ef:28:c8:af:aa:6e:dc:f7:f7:c9:
         c0:ff:08:e2:09:30:f2:93:c8:6e:31:7b:e9:af:27:93:46:a4:
         e6:59:76:57:28:bb:45:df:8c:89:1d:96:ac:13:f1:40:bb:c3:
         0a:4c:8b:e1:b0:56:58:40:45:43:85:cc:47:2c:61:54:97:f5:
         fc:82:04:53:69:48:93:0d:aa:4a:27:45:ef:41:4e:24:f2:79:
         8d:45:3e:d0:42:80:56:bf:82:db:e6:27:c0:d3:dd:c1:2d:9a:
         17:fb:29:34:08:10:07:c0:c3:6b:d0:e5:3e:ad:1e:0d:00:42:
         b7:a7:63:df:1e:a6:21:75:fc:b7:28:29:66:e7:ae:45:db:8f:
         c6:7e:a1:4f:1c:e8:d1:a4:93:17:8d:09:0d:14:a6:de:a2:93:
         32:9d:34:31:cb:77:e7:12:e3:ed:f0:98:e8:99:51:27:12:0e:
         f5:ab:b9:cc:75:10:31:d2:30:47:f6:b5:50:81:f4:5e:15:46:
         28:69:76:05:1f:41:2e:da:53:14:3e:0a:6d:3b:bf:46:2d:ac:
         b9:80:81:eb:62:02:33:00:81:c5:a5:29:e5:79:a2:90:28:07:
         cc:c4:75:63:92:71:aa:30:0e:53:70:d9:53:c6:a4:bf:65:aa:
         e0:15:8f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:12:59 2025 by rpki-client