This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/54EA0F76D36B11EBADF6AD2CC4F9AE02.roa
File:                     54EA0F76D36B11EBADF6AD2CC4F9AE02.roa (raw, json)
Hash identifier:          Sq85s45uXrl7JCtJVQFpetKJe1yt9d4AgSzwgFH0KeQ=
Subject key identifier:   91:2B:C3:E6:F7:F7:91:A8:14:5C:3F:6A:09:E0:2B:DE:7A:3B:93:86
Certificate issuer:       /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Certificate serial:       12B1
Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/54EA0F76D36B11EBADF6AD2CC4F9AE02.roa
Signing time:             Wed 10 Dec 2025 16:39:37 +0000
ROA not before:           Wed 10 Dec 2025 16:39:37 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     55784
IP address blocks:        182.50.184.0/24 maxlen: 24
                          182.50.187.0/24 maxlen: 24
                          182.50.188.0/22 maxlen: 24
                          203.190.222.0/24 maxlen: 24
                          2402:d00::/32 maxlen: 32
                          2402:d00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
                          rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 16:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4785 (0x12b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177358, serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
        Validity
            Not Before: Dec 10 16:39:37 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6939a248-46d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:c9:4b:65:93:38:a6:ce:00:d9:8a:58:c2:
                    c9:9f:a4:1e:04:3a:8d:88:ab:63:81:ad:92:7b:61:
                    b3:ce:cd:37:03:ff:88:60:6f:a0:ad:4e:11:f8:26:
                    46:c9:a4:7b:bf:f9:06:33:a7:84:5e:11:68:ec:a1:
                    c2:6b:42:87:62:9f:9d:f3:6d:46:32:e7:c8:90:6a:
                    87:5b:ac:be:8c:5c:09:34:56:af:f1:ff:c3:5c:53:
                    13:00:fa:f5:80:3a:1b:7d:38:43:86:82:d8:5d:73:
                    4d:12:a9:a8:be:79:3a:a7:92:99:2b:f8:7b:bb:ef:
                    72:f3:71:4f:49:ef:39:c2:f1:31:ea:51:a1:6b:aa:
                    3c:c5:3e:e2:7d:7c:b2:cc:33:0e:15:a6:0c:45:b5:
                    a3:98:fe:82:61:42:54:a9:7a:35:18:a2:58:f1:8f:
                    44:52:14:10:5d:d5:fe:62:b0:e3:66:ec:4b:83:e3:
                    0e:8e:4e:32:da:5e:19:50:ad:c1:6a:c3:be:07:e5:
                    59:66:9c:02:7d:61:06:b0:72:f7:80:12:30:11:e6:
                    16:4c:ff:4e:21:9a:c5:8f:fa:dd:be:0e:10:81:6c:
                    75:75:91:19:7e:0b:12:73:52:08:d3:4f:a0:9e:db:
                    65:f6:44:fc:23:a3:79:1f:1e:3a:8a:66:e7:50:a1:
                    2a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2B:C3:E6:F7:F7:91:A8:14:5C:3F:6A:09:E0:2B:DE:7A:3B:93:86
            X509v3 Authority Key Identifier:
                keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/54EA0F76D36B11EBADF6AD2CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.184.0/24
                  182.50.187.0-182.50.191.255
                  203.190.222.0/24
                IPv6:
                  2402:d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:b5:ec:0d:40:d3:96:0d:c2:dd:25:42:92:ab:44:66:d6:f2:
         42:87:3b:42:49:85:93:0d:58:ff:cf:af:18:41:2a:ed:b2:09:
         8b:fd:ab:17:50:3b:75:6f:59:43:d7:7e:e2:77:30:8d:97:b0:
         58:58:f6:d2:b4:01:9f:b6:9c:28:d4:85:72:5a:24:19:fd:04:
         c3:ec:08:fd:d9:83:fc:0f:d2:0b:d6:ac:58:18:b6:60:0a:38:
         97:6e:4e:d8:28:d8:e6:bf:06:e0:45:66:1f:41:79:80:c9:92:
         21:1b:3b:5e:8d:07:b2:52:2c:10:43:2a:6e:64:2a:94:a1:11:
         9a:f3:b9:21:5b:16:62:6f:b5:6b:57:9c:92:2c:c4:8f:d7:d1:
         fd:0d:c5:3a:94:5c:f5:80:ef:6d:88:d0:59:81:7b:2e:14:a9:
         66:5d:bf:87:28:6e:5c:e1:cc:5e:8e:48:f2:78:79:a1:01:99:
         37:17:54:39:6c:45:f7:22:15:18:28:d5:19:b1:86:58:15:ce:
         22:19:46:b7:07:ea:dd:23:32:0a:a2:a7:de:54:2f:eb:ff:c0:
         b0:c9:93:f7:bf:97:33:a1:4d:23:03:1f:b3:2f:5c:7d:9f:c4:
         7a:a7:ca:b7:aa:d6:a5:c9:05:52:b1:c7:b3:6d:d9:c2:d3:0d:
         c0:9c:27:0b
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICErEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzczNTgxMTAvBgNVBAUTKDgwRTNDM0FFNTE5QTRGMTgzNzVBQzZBNDNGNTM3QTg1
RkY3QTJBODIwHhcNMjUxMjEwMTYzOTM3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTM5YTI0OC00NmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo/7JS2WTOKbOANmKWMLJn6QeBDqNiKtjga2Se2Gzzs03A/+IYG+grU4R+CZG
yaR7v/kGM6eEXhFo7KHCa0KHYp+d821GMufIkGqHW6y+jFwJNFav8f/DXFMTAPr1
gDobfThDhoLYXXNNEqmovnk6p5KZK/h7u+9y83FPSe85wvEx6lGha6o8xT7ifXyy
zDMOFaYMRbWjmP6CYUJUqXo1GKJY8Y9EUhQQXdX+YrDjZuxLg+MOjk4y2l4ZUK3B
asO+B+VZZpwCfWEGsHL3gBIwEeYWTP9OIZrFj/rdvg4QgWx1dZEZfgsSc1II00+g
nttl9kT8I6N5Hx46imbnUKEqQwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFJErw+b3
95GoFFw/agngK956O5OGMB8GA1UdIwQYMBaAFIDjw65Rmk8YN1rGpD9TeoX/eiqC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzM1OC9CRTg0RjA5NERE
MEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4ZzNXc2FrUDFONmhmOTZL
b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dPUERybEdhVHhnM1dzYWtQMU42aGY5NktvSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzczNTgvQkU4NEYwOTRERDBCMTFFODg1NDQ5QTQwQzRGOUFFMDIvNTRFQTBGNzZE
MzZCMTFFQkFERjZBRDJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E
MzAxMCAEAgABMBoDBAC2MrgwDAMEALYyuwMEBrYygAMEAMu+3jANBAIAAjAHAwUA
JAINADANBgkqhkiG9w0BAQsFAAOCAQEAa7XsDUDTlg3C3SVCkqtEZtbyQoc7QkmF
kw1Y/8+vGEEq7bIJi/2rF1A7dW9ZQ9d+4ncwjZewWFj20rQBn7acKNSFclokGf0E
w+wI/dmD/A/SC9asWBi2YAo4l25O2CjY5r8G4EVmH0F5gMmSIRs7Xo0HslIsEEMq
bmQqlKERmvO5IVsWYm+1a1eckizEj9fR/Q3FOpRc9YDvbYjQWYF7LhSpZl2/hyhu
XOHMXo5I8nh5oQGZNxdUOWxF9yIVGCjVGbGGWBXOIhlGtwfq3SMyCqKn3lQv6//A
sMmT97+XM6FNIwMfsy9cfZ/EeqfKt6rWpckFUrHHs23ZwtMNwJwnCw==
-----END CERTIFICATE-----
Generated at Fri Dec 19 22:01:19 2025 by rpki-client