This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1E157DAD99411F0B61ED2F763D3641D.roa
File:                     D1E157DAD99411F0B61ED2F763D3641D.roa (raw, json)
Hash identifier:          WffbWLbadjPrRwCUN0zlwJFLl2rFC24bTFPQy38A78I=
Subject key identifier:   81:03:4E:CC:1F:C7:ED:D0:36:EC:2D:3D:89:AC:87:07:D2:D3:CF:FB
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2159
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1E157DAD99411F0B61ED2F763D3641D.roa
Signing time:             Mon 15 Dec 2025 09:02:45 +0000
ROA not before:           Mon 15 Dec 2025 09:02:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136904
IP address blocks:        138.252.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 15:19:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8537 (0x2159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Dec 15 09:02:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=693fceb5-75f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:a1:73:07:5b:85:1e:7a:46:46:3f:85:4f:2a:
                    91:bf:9e:c9:2c:2e:2a:64:22:be:45:2b:61:c8:c3:
                    93:91:68:7b:c3:65:ba:91:3b:0b:b4:3e:e4:fe:37:
                    8f:de:b7:a1:60:66:df:b8:74:f3:c4:51:68:99:09:
                    3d:e1:90:23:ef:ca:4f:bb:f5:85:f7:98:0a:26:f1:
                    45:06:29:b2:d3:f4:2a:55:cc:70:91:27:d5:e6:33:
                    1d:51:9c:6f:0a:7e:ea:86:91:6d:d3:f4:c4:7c:b2:
                    8a:45:ae:64:71:e3:0f:21:54:6c:93:f8:a2:ae:5a:
                    71:0d:4d:95:2d:39:b4:4d:bc:b4:fc:6d:47:7b:a8:
                    44:3e:dd:99:ce:3e:3f:a4:c7:72:ca:30:df:28:12:
                    65:e1:d0:b2:ed:70:75:e2:28:f3:ef:2f:ec:74:ea:
                    13:2f:bc:b1:99:b0:c6:6d:da:56:78:2a:02:60:5b:
                    f2:de:ef:0c:db:45:0c:23:75:bd:30:1d:6c:8f:22:
                    8b:be:40:bc:d1:92:44:d2:9a:65:7a:b7:04:98:3d:
                    a8:b4:de:e0:55:28:51:25:85:05:98:10:2b:9f:a1:
                    5b:b4:0d:d8:85:8b:39:e8:02:1e:fa:7d:d8:20:11:
                    1d:21:4f:9a:56:2b:5c:95:f4:04:56:35:89:5e:d2:
                    a4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:03:4E:CC:1F:C7:ED:D0:36:EC:2D:3D:89:AC:87:07:D2:D3:CF:FB
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1E157DAD99411F0B61ED2F763D3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:68:d7:89:74:1f:fb:00:39:c7:4e:80:c6:0a:a7:02:0f:ed:
         37:b6:9b:42:f1:44:3e:d0:e4:aa:f5:63:8e:34:b0:09:84:0e:
         a4:c5:1f:3f:1f:97:2a:ad:a5:ff:1b:48:03:3b:e4:1e:f0:57:
         ea:36:48:a4:ec:7b:00:61:f8:e2:af:ab:b1:79:dd:b7:36:ff:
         01:36:69:2e:ed:e6:06:fe:4c:bf:7d:7c:c9:c1:bd:49:77:e4:
         50:af:16:68:e0:ee:eb:7a:1a:ba:f1:63:bb:e6:7d:e4:99:f0:
         39:99:f9:07:9a:a3:f2:49:6e:04:4a:6c:ee:cf:f5:a9:82:29:
         7b:f5:bc:06:54:4e:22:c7:08:95:08:6e:a1:9c:ec:ea:3f:47:
         86:1e:1e:93:cc:b5:63:60:35:33:0e:d1:ae:13:a4:17:27:b5:
         1f:d9:de:14:4e:e9:94:32:c2:6d:fc:a4:c1:d4:76:a8:f7:82:
         0a:57:48:3e:76:56:85:96:d5:1d:23:8f:26:d9:3f:bb:12:da:
         e6:7c:87:cb:9f:35:3f:de:3a:d9:49:83:1d:85:3d:1c:e0:25:
         1e:3b:d1:1c:1f:4c:51:f6:6e:1a:39:40:51:50:a3:85:78:85:
         f5:c3:f1:39:db:e5:89:cc:e0:cb:f1:97:58:f1:0c:bf:13:90:
         9a:90:0f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:46:16 2025 by rpki-client