This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B2BDB7CCBDDE11EA9977C550C4F9AE02.roa
File:                     B2BDB7CCBDDE11EA9977C550C4F9AE02.roa (raw, json)
Hash identifier:          AEBGsXSUDEPlH7dqvsLW1KiBJKnjYB0rT1lJa5tMnDY=
Subject key identifier:   E9:62:D1:2F:FF:5F:8E:A5:32:27:8F:5F:E8:02:4F:0E:15:30:55:6C
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2151
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B2BDB7CCBDDE11EA9977C550C4F9AE02.roa
Signing time:             Wed 10 Dec 2025 22:42:57 +0000
ROA not before:           Wed 10 Dec 2025 22:42:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     24186
IP address blocks:        144.16.0.0/18 maxlen: 18
                          144.16.0.0/24 maxlen: 24
                          144.16.1.0/24 maxlen: 24
                          144.16.2.0/24 maxlen: 24
                          144.16.3.0/24 maxlen: 24
                          144.16.4.0/24 maxlen: 24
                          144.16.5.0/24 maxlen: 24
                          144.16.6.0/24 maxlen: 24
                          144.16.7.0/24 maxlen: 24
                          144.16.8.0/24 maxlen: 24
                          144.16.9.0/24 maxlen: 24
                          144.16.10.0/24 maxlen: 24
                          144.16.11.0/24 maxlen: 24
                          144.16.12.0/24 maxlen: 24
                          144.16.13.0/24 maxlen: 24
                          144.16.14.0/24 maxlen: 24
                          144.16.15.0/24 maxlen: 24
                          144.16.16.0/24 maxlen: 24
                          144.16.17.0/24 maxlen: 24
                          144.16.18.0/24 maxlen: 24
                          144.16.19.0/24 maxlen: 24
                          144.16.20.0/24 maxlen: 24
                          144.16.21.0/24 maxlen: 24
                          144.16.22.0/24 maxlen: 24
                          144.16.23.0/24 maxlen: 24
                          144.16.24.0/24 maxlen: 24
                          144.16.25.0/24 maxlen: 24
                          144.16.26.0/24 maxlen: 24
                          144.16.27.0/24 maxlen: 24
                          144.16.28.0/24 maxlen: 24
                          144.16.29.0/24 maxlen: 24
                          144.16.30.0/24 maxlen: 24
                          144.16.31.0/24 maxlen: 24
                          144.16.32.0/24 maxlen: 24
                          144.16.33.0/24 maxlen: 24
                          144.16.34.0/24 maxlen: 24
                          144.16.35.0/24 maxlen: 24
                          144.16.36.0/24 maxlen: 24
                          144.16.37.0/24 maxlen: 24
                          144.16.38.0/24 maxlen: 24
                          144.16.39.0/24 maxlen: 24
                          144.16.40.0/24 maxlen: 24
                          144.16.41.0/24 maxlen: 24
                          144.16.42.0/24 maxlen: 24
                          144.16.43.0/24 maxlen: 24
                          144.16.44.0/24 maxlen: 24
                          144.16.45.0/24 maxlen: 24
                          144.16.46.0/24 maxlen: 24
                          144.16.47.0/24 maxlen: 24
                          144.16.48.0/24 maxlen: 24
                          144.16.49.0/24 maxlen: 24
                          144.16.50.0/24 maxlen: 24
                          144.16.51.0/24 maxlen: 24
                          144.16.52.0/24 maxlen: 24
                          144.16.53.0/24 maxlen: 24
                          144.16.54.0/24 maxlen: 24
                          144.16.55.0/24 maxlen: 24
                          144.16.56.0/24 maxlen: 24
                          144.16.57.0/24 maxlen: 24
                          144.16.58.0/24 maxlen: 24
                          144.16.59.0/24 maxlen: 24
                          144.16.60.0/24 maxlen: 24
                          144.16.61.0/24 maxlen: 24
                          144.16.62.0/24 maxlen: 24
                          144.16.63.0/24 maxlen: 24
                          144.16.192.0/18 maxlen: 18
                          144.16.192.0/24 maxlen: 24
                          144.16.193.0/24 maxlen: 24
                          144.16.194.0/24 maxlen: 24
                          144.16.195.0/24 maxlen: 24
                          144.16.196.0/24 maxlen: 24
                          144.16.197.0/24 maxlen: 24
                          144.16.198.0/24 maxlen: 24
                          144.16.199.0/24 maxlen: 24
                          144.16.200.0/24 maxlen: 24
                          144.16.201.0/24 maxlen: 24
                          144.16.202.0/24 maxlen: 24
                          144.16.203.0/24 maxlen: 24
                          144.16.204.0/24 maxlen: 24
                          144.16.205.0/24 maxlen: 24
                          144.16.206.0/24 maxlen: 24
                          144.16.207.0/24 maxlen: 24
                          144.16.208.0/24 maxlen: 24
                          144.16.209.0/24 maxlen: 24
                          144.16.210.0/24 maxlen: 24
                          144.16.211.0/24 maxlen: 24
                          144.16.212.0/24 maxlen: 24
                          144.16.213.0/24 maxlen: 24
                          144.16.214.0/24 maxlen: 24
                          144.16.215.0/24 maxlen: 24
                          144.16.216.0/24 maxlen: 24
                          144.16.217.0/24 maxlen: 24
                          144.16.218.0/24 maxlen: 24
                          144.16.219.0/24 maxlen: 24
                          144.16.220.0/24 maxlen: 24
                          144.16.221.0/24 maxlen: 24
                          144.16.222.0/24 maxlen: 24
                          144.16.223.0/24 maxlen: 24
                          144.16.224.0/24 maxlen: 24
                          144.16.225.0/24 maxlen: 24
                          144.16.226.0/24 maxlen: 24
                          144.16.227.0/24 maxlen: 24
                          144.16.228.0/24 maxlen: 24
                          144.16.229.0/24 maxlen: 24
                          144.16.230.0/24 maxlen: 24
                          144.16.231.0/24 maxlen: 24
                          144.16.232.0/24 maxlen: 24
                          144.16.233.0/24 maxlen: 24
                          144.16.234.0/24 maxlen: 24
                          144.16.235.0/24 maxlen: 24
                          144.16.236.0/24 maxlen: 24
                          144.16.237.0/24 maxlen: 24
                          144.16.238.0/24 maxlen: 24
                          144.16.239.0/24 maxlen: 24
                          144.16.240.0/24 maxlen: 24
                          144.16.241.0/24 maxlen: 24
                          144.16.242.0/24 maxlen: 24
                          144.16.243.0/24 maxlen: 24
                          144.16.244.0/24 maxlen: 24
                          144.16.245.0/24 maxlen: 24
                          144.16.246.0/24 maxlen: 24
                          144.16.247.0/24 maxlen: 24
                          144.16.248.0/24 maxlen: 24
                          144.16.249.0/24 maxlen: 24
                          144.16.250.0/24 maxlen: 24
                          144.16.251.0/24 maxlen: 24
                          144.16.252.0/24 maxlen: 24
                          144.16.253.0/24 maxlen: 24
                          144.16.254.0/24 maxlen: 24
                          144.16.255.0/24 maxlen: 24
                          158.144.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 15:19:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8529 (0x2151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Dec 10 22:42:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6939f770-74d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a1:ce:38:a9:d5:15:ce:e5:50:55:05:4c:2f:
                    94:7e:b3:10:26:94:0d:ad:ee:87:6c:98:01:c7:0e:
                    34:b9:3b:7a:a2:15:f3:70:b6:4c:67:c6:b6:7c:e8:
                    6b:9b:0a:b5:fa:6a:d0:a9:da:a9:29:c7:a1:e4:22:
                    83:8f:17:98:c7:75:c2:20:b3:b2:cf:0b:4a:86:b1:
                    0e:df:b0:6d:e8:94:e1:a1:bf:52:1a:c5:d1:c6:71:
                    8d:9a:cf:30:85:a2:98:20:09:1b:44:c4:08:23:a4:
                    99:c7:93:21:99:07:7e:61:0a:71:6a:11:2c:0b:8d:
                    c4:74:90:90:da:e8:08:3c:40:8c:c8:12:7b:21:6f:
                    51:21:f1:b7:bb:25:5f:fb:24:ae:9b:a3:e1:15:a6:
                    59:82:7d:ac:df:fd:03:32:11:a7:89:9e:b2:66:8e:
                    04:60:94:33:6a:f0:84:ad:6a:c8:f3:1f:cf:a3:63:
                    b3:c6:60:6e:ab:b6:fe:ed:f3:f0:5a:b2:29:7b:fd:
                    3d:88:43:ba:c1:ef:6f:ba:ed:e3:3b:a1:2c:c2:40:
                    5a:d6:be:6b:36:63:97:d7:de:50:31:b0:5f:25:cd:
                    22:18:6a:2f:d4:01:d4:9d:c8:1c:16:bc:e4:c2:60:
                    e6:5d:d8:7b:6e:39:04:b3:dd:84:63:43:77:92:9e:
                    5a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:62:D1:2F:FF:5F:8E:A5:32:27:8F:5F:E8:02:4F:0E:15:30:55:6C
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B2BDB7CCBDDE11EA9977C550C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.16.0.0/18
                  144.16.192.0/18
                  158.144.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:07:f5:a0:29:78:5a:e9:c7:d4:4a:68:be:2d:78:3c:14:ea:
         b9:51:35:70:64:44:b7:61:b8:8b:4b:33:49:96:42:3c:b2:77:
         68:3f:ad:de:b9:41:bd:28:15:c3:61:fe:8b:6b:b4:04:85:81:
         da:d7:26:29:96:18:cd:d2:85:9f:84:cb:94:a0:7b:1e:c2:14:
         2b:1f:27:e2:5d:d5:e2:00:e7:d2:71:c4:8b:12:86:69:e8:72:
         4b:13:e7:33:16:4f:9c:dd:76:11:a3:e9:58:2a:46:77:ab:b3:
         01:8b:0e:10:de:31:d2:c0:57:f0:fe:40:f7:56:84:2d:84:fb:
         dd:20:69:de:cc:1f:b0:36:ec:4e:cc:24:6f:f0:ca:8d:ab:e8:
         d5:67:01:1c:cb:35:fc:5c:c1:c8:ed:b5:ff:59:07:50:53:ac:
         c8:d6:eb:48:3e:8c:62:79:41:16:6a:1c:ff:11:3a:14:e5:b2:
         26:be:8a:ac:d4:99:27:ed:2d:39:c9:92:00:42:3b:d8:ba:8b:
         ff:64:b9:58:07:f3:55:9a:82:5b:fd:f6:98:13:1c:88:22:f5:
         a8:7c:c5:25:35:16:c5:44:a9:6c:cf:14:25:8c:a9:eb:52:56:
         b7:34:0e:74:22:5f:62:12:b2:9f:c9:95:fc:bf:45:18:e9:9e:
         6f:61:11:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:50:43 2025 by rpki-client