This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/115BD35AA41611EFA0D7CD42C4F9AE02.roa
File:                     115BD35AA41611EFA0D7CD42C4F9AE02.roa (raw, json)
Hash identifier:          aniyMN410sjj0MEX+PDPaHXzJQYHXYAopGV6HCn0kcs=
Subject key identifier:   3D:60:5A:DC:A3:48:20:37:91:70:CB:AE:17:2F:50:2E:15:CD:F6:8A
Certificate issuer:       /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Certificate serial:       CB
Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/115BD35AA41611EFA0D7CD42C4F9AE02.roa
Signing time:             Sat 13 Dec 2025 05:44:32 +0000
ROA not before:           Sat 13 Dec 2025 05:44:32 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     153399
IP address blocks:        160.191.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl
                          rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 04:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
        Validity
            Not Before: Dec 13 05:44:32 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=693cfd3f-08b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b3:63:3d:e2:25:09:6e:c7:67:60:6d:e6:f2:
                    e2:1d:14:98:a0:52:4f:03:7a:b8:95:e3:8c:8c:7d:
                    c5:43:5b:7b:c9:e9:24:a9:3c:fa:63:b6:ce:92:22:
                    a3:09:fb:97:8c:42:0d:f9:1a:74:7e:a5:d4:13:e2:
                    96:cd:0a:e3:e4:29:4b:45:19:59:75:e5:6e:b9:67:
                    16:eb:6b:33:32:fc:f3:2a:77:26:ce:43:d3:f7:3c:
                    35:dd:e7:c0:59:67:cd:17:2a:20:ea:e2:04:a4:e5:
                    fa:bc:4a:89:68:d9:a4:a2:88:3f:c8:4c:15:bd:ec:
                    50:7f:32:83:0e:58:37:a6:f2:1c:49:23:41:9f:bf:
                    45:2a:2d:6f:b6:22:03:8b:d3:b5:c0:9b:f8:4c:44:
                    05:dd:89:24:46:27:53:0b:2f:fc:83:dc:ea:24:f0:
                    5c:b1:09:87:d4:a5:85:5d:c1:ed:c0:75:d0:90:51:
                    e9:7b:2d:d1:c1:e4:38:34:eb:01:31:8c:9e:6d:96:
                    b9:0d:31:be:25:92:94:84:f5:2c:77:d3:85:7e:f5:
                    40:75:f9:13:f4:35:83:f5:74:45:6d:a2:d1:1d:fc:
                    37:be:36:b5:d7:90:e6:20:ca:36:36:79:ef:bb:77:
                    8c:72:a7:33:82:7b:75:7e:72:20:2a:5f:a5:b4:87:
                    43:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:60:5A:DC:A3:48:20:37:91:70:CB:AE:17:2F:50:2E:15:CD:F6:8A
            X509v3 Authority Key Identifier:
                keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/115BD35AA41611EFA0D7CD42C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:51:68:59:db:8a:73:2a:53:9e:f1:30:7a:9f:af:1a:c6:b9:
         f4:99:7d:bb:6e:33:0c:a5:7f:3d:1b:66:f8:29:38:06:4f:ac:
         61:80:94:99:d5:27:a3:c8:af:42:37:86:da:8a:f1:59:1b:d2:
         c8:df:69:e1:74:30:d9:89:88:c3:eb:70:9f:95:f7:64:9b:ce:
         88:a0:01:1a:72:a3:a0:e0:60:99:17:e9:e7:dd:5e:4c:b2:76:
         03:d7:e6:ec:64:94:58:26:c0:00:b7:39:1d:e3:da:a1:7f:15:
         8d:88:02:67:43:8d:dc:e7:b5:2e:48:0b:8e:a3:b8:ca:95:70:
         af:b3:6a:13:a9:41:46:20:d2:83:07:84:90:f5:bf:9c:4e:01:
         dd:45:3d:b0:0c:28:24:25:3a:d5:86:02:fc:49:2e:ba:59:50:
         42:27:5a:bb:c8:c8:8b:60:ac:4f:50:26:9a:7d:9e:ed:62:14:
         d4:bd:ee:78:50:f7:e0:7c:9b:5d:94:5d:6b:b6:ba:18:d9:c9:
         fc:c2:6f:67:fb:c9:e8:c1:a3:d8:77:0b:3c:a6:89:e5:41:67:
         eb:02:0a:67:da:25:db:40:d9:18:a1:36:7f:25:e1:22:ab:58:
         41:cf:77:6d:d8:9a:cf:67:4b:3c:b6:5e:a6:6c:31:5c:72:b8:
         7f:e8:0b:e2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzFCRjAxMTAvBgNVBAUTKDIxQ0ZDRTgxRDg3NUQ1Q0Y4RjU5NkFEQkZDQzM2MDE5
NjFDNDQxRTcwHhcNMjUxMjEzMDU0NDMyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTNjZmQzZi0wOGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwrNjPeIlCW7HZ2Bt5vLiHRSYoFJPA3q4leOMjH3FQ1t7yekkqTz6Y7bOkiKj
CfuXjEIN+Rp0fqXUE+KWzQrj5ClLRRlZdeVuuWcW62szMvzzKncmzkPT9zw13efA
WWfNFyog6uIEpOX6vEqJaNmkoog/yEwVvexQfzKDDlg3pvIcSSNBn79FKi1vtiID
i9O1wJv4TEQF3YkkRidTCy/8g9zqJPBcsQmH1KWFXcHtwHXQkFHpey3RweQ4NOsB
MYyebZa5DTG+JZKUhPUsd9OFfvVAdfkT9DWD9XRFbaLRHfw3vja115DmIMo2Nnnv
u3eMcqczgnt1fnIgKl+ltIdDYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD1gWtyj
SCA3kXDLrhcvUC4VzfaKMB8GA1UdIwQYMBaAFCHPzoHYddXPj1lq2/zDYBlhxEHn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUJGMC85RjU5MUU4RUE0
MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi9JY19PZ2RoMTFjLVBXV3JiX01OZ0dXSEVR
ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0ljX09nZGgxMWMtUFdXcmJfTU5nR1dIRVFlYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzFCRjAvOUY1OTFFOEVBNDE1MTFFRkExNEZCRDNGQzRGOUFFMDIvMTE1QkQzNUFB
NDE2MTFFRkEwRDdDRDQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGgv8QwDQYJKoZIhvcNAQELBQADggEBABdRaFnbinMqU57x
MHqfrxrGufSZfbtuMwylfz0bZvgpOAZPrGGAlJnVJ6PIr0I3htqK8Vkb0sjfaeF0
MNmJiMPrcJ+V92SbzoigARpyo6DgYJkX6efdXkyydgPX5uxklFgmwAC3OR3j2qF/
FY2IAmdDjdzntS5IC46juMqVcK+zahOpQUYg0oMHhJD1v5xOAd1FPbAMKCQlOtWG
AvxJLrpZUEInWrvIyItgrE9QJpp9nu1iFNS97nhQ9+B8m12UXWu2uhjZyfzCb2f7
yejBo9h3CzymieVBZ+sCCmfaJdtA2RihNn8l4SKrWEHPd23Yms9nSzy2XqZsMVxy
uH/oC+I=
-----END CERTIFICATE-----
Generated at Sun Jan 11 14:39:58 2026 by rpki-client