This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/B8E35E8AD8C811F08AAE626967D3641D.roa
File:                     B8E35E8AD8C811F08AAE626967D3641D.roa (raw, json)
Hash identifier:          cZEumhKRL1OxAifgyf4FGxQYkuP7+gq2SZ1K3WxbiAo=
Subject key identifier:   B8:22:23:AE:ED:DB:4F:10:DE:83:D5:36:08:C6:19:99:B7:35:E7:5A
Certificate issuer:       /CN=A918E4B7/serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
Certificate serial:       21
Authority key identifier: 97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/B8E35E8AD8C811F08AAE626967D3641D.roa
Signing time:             Sun 14 Dec 2025 08:41:46 +0000
ROA not before:           Sun 14 Dec 2025 08:41:46 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     36007
IP address blocks:        79.108.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl
                          rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E4B7, serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
        Validity
            Not Before: Dec 14 08:41:46 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=693e7849-8d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:35:a6:30:80:aa:df:df:33:9d:81:4a:df:3f:
                    00:f1:59:17:38:73:9f:91:c2:49:4e:75:4b:a0:a0:
                    ec:88:44:50:fd:7f:54:10:fc:a8:3a:17:b8:fd:9d:
                    1c:06:51:c8:11:50:1a:21:09:f0:55:5c:db:84:0a:
                    d1:b4:aa:47:7e:a4:f6:09:ae:48:b4:65:14:f0:b4:
                    0f:9d:a7:ac:9f:06:eb:ee:69:6b:d3:60:e7:bc:b3:
                    cb:f3:c1:0f:7f:52:52:33:a5:36:5a:e4:73:59:c5:
                    e8:a1:61:de:34:c5:80:66:58:0c:00:7c:f8:63:c7:
                    f5:37:46:2c:63:a2:0f:3a:97:f6:6e:bc:6a:3d:e7:
                    08:69:70:ba:d5:28:a6:80:16:6b:56:a1:5a:e6:80:
                    3f:48:3a:45:dc:ee:a8:ad:e7:d4:c8:af:02:0e:fc:
                    de:15:03:87:76:50:66:0a:59:14:a1:0c:4f:38:e4:
                    ea:94:48:4b:0d:8d:03:57:de:95:72:b1:9a:95:f6:
                    a1:7a:54:09:62:10:fc:5f:4f:94:b2:4a:f8:29:c3:
                    62:cc:a7:a2:9c:5e:97:3e:ee:2e:c1:d3:3c:90:00:
                    01:37:8a:30:b9:b1:35:b3:24:29:20:b5:13:ad:c1:
                    ec:c9:4e:36:cb:46:3b:43:77:e8:dc:b5:8a:a7:65:
                    dd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:22:23:AE:ED:DB:4F:10:DE:83:D5:36:08:C6:19:99:B7:35:E7:5A
            X509v3 Authority Key Identifier:
                keyid:97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/B8E35E8AD8C811F08AAE626967D3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.108.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:5d:1b:19:9c:13:d9:9f:8f:be:3c:25:d2:b1:dc:3f:2f:e3:
         24:08:e4:15:86:49:2e:68:a2:a9:10:a1:8a:35:a0:df:70:a5:
         6c:3a:7d:be:22:06:6b:0d:7f:e7:fd:15:5b:ff:5b:89:0b:95:
         b3:16:03:a7:44:d0:a2:18:95:6a:de:1d:05:ce:6a:2c:16:b7:
         8b:ae:99:05:14:98:df:2d:fd:1f:2a:c7:a9:a3:6b:b2:03:48:
         0f:4c:10:d4:6e:df:fb:61:1f:8a:c3:e9:95:9e:ab:43:9f:a1:
         96:83:c1:a4:f7:5b:e4:ff:20:14:89:de:42:18:de:a1:0b:42:
         2a:0e:53:e2:2d:54:f7:81:c1:bb:da:3b:64:1c:a7:83:30:41:
         fa:88:e2:38:59:89:09:75:36:ed:f7:cf:e8:8b:b6:40:db:91:
         01:ff:4f:b7:c6:36:a4:f7:01:57:1d:96:6e:18:a1:3a:37:80:
         00:a0:7a:ec:f4:3f:90:51:41:f3:0d:b5:73:f4:e6:7b:aa:1a:
         3a:4d:cd:2a:af:e7:64:bd:82:31:26:88:2b:91:cb:f6:c4:be:
         6c:4b:eb:c9:92:4d:c4:f7:31:63:8e:9c:24:2d:23:cd:5f:46:
         dc:6c:81:0e:b9:3f:e6:ba:f1:20:49:ad:38:8e:f9:7d:7b:aa:
         b2:15:90:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:11:22 2025 by rpki-client