This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/926A40AC205E11F0A7552513C4F9AE02.roa
File:                     926A40AC205E11F0A7552513C4F9AE02.roa (raw, json)
Hash identifier:          FIWiDkBaYvaikmyCG+HfrIe8Wsn7dENJVYQ/p9hb52Y=
Subject key identifier:   F1:FF:A3:E4:B7:47:AE:52:B8:5D:07:D5:D1:AA:D4:B4:7E:8F:40:CC
Certificate issuer:       /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Certificate serial:       01FE
Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/926A40AC205E11F0A7552513C4F9AE02.roa
Signing time:             Tue 16 Dec 2025 16:40:56 +0000
ROA not before:           Tue 16 Dec 2025 16:40:56 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     202736
IP address blocks:        185.254.242.0/24 maxlen: 24
                          213.139.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
                          rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510 (0x1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
        Validity
            Not Before: Dec 16 16:40:56 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69418b98-2b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:df:e1:e4:60:de:35:aa:ed:7d:e0:b0:27:e1:
                    cd:74:96:4c:d0:eb:30:d7:e4:5e:45:52:0d:4b:a6:
                    60:24:86:e9:cf:2e:d6:58:5e:0d:98:99:c4:90:b4:
                    60:5b:77:09:59:c6:fd:b2:3d:10:44:b9:35:b7:5b:
                    ac:bf:98:84:d3:ea:ac:46:f9:d8:42:27:a0:2d:c2:
                    82:72:a5:dd:66:90:57:dc:1f:55:15:8f:59:97:d1:
                    f1:41:93:29:2a:04:0f:d5:ef:2d:71:5a:0b:13:57:
                    6f:e2:80:d5:93:31:e4:e6:c9:3e:86:87:b2:22:97:
                    8c:70:c2:b1:53:41:23:a2:59:a1:19:1b:d5:bb:4b:
                    83:94:33:dc:3f:d8:39:0c:b1:59:60:b6:6b:ad:a4:
                    67:b3:5d:9d:15:1f:52:2d:4d:17:8b:ca:1f:0a:3e:
                    35:11:e1:bf:65:7c:a7:73:08:97:f1:0e:17:6a:3b:
                    71:02:16:be:ec:1f:5d:0c:5d:69:4a:67:26:29:80:
                    96:3c:e5:1c:f4:2b:1e:57:a9:df:d1:0a:ce:f0:fb:
                    c1:34:2e:c3:f1:09:5d:c4:bc:fa:82:32:e1:b8:18:
                    45:7d:e6:a7:1a:72:15:16:a2:62:45:55:d5:82:c2:
                    c8:a4:49:6e:a2:8b:ac:5d:b6:c0:33:15:95:07:78:
                    10:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FF:A3:E4:B7:47:AE:52:B8:5D:07:D5:D1:AA:D4:B4:7E:8F:40:CC
            X509v3 Authority Key Identifier:
                keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/926A40AC205E11F0A7552513C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.254.242.0/24
                  213.139.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:2e:9d:2c:00:98:e0:2f:29:ad:a9:fa:ea:d8:b3:f4:a7:7c:
         9a:c9:04:2c:f7:b0:22:26:cb:b1:43:91:37:33:48:ec:56:e1:
         07:ec:55:6f:3f:03:4d:bc:54:ea:ab:1a:30:31:19:73:9c:76:
         d0:ba:a0:f9:59:ad:70:b7:04:90:89:82:b7:89:bc:45:44:25:
         78:6c:ff:20:4a:74:35:d0:76:22:6f:2f:fe:01:ef:8d:f6:82:
         97:25:a7:f5:78:0b:8f:c9:15:0a:8e:e1:2f:f5:6c:6e:40:7c:
         8c:29:7c:3d:26:2d:dd:9b:4d:bd:4a:62:9a:a0:a3:2f:47:79:
         a5:ca:f8:52:e1:28:36:40:0a:95:87:32:7f:3d:e7:a9:b0:93:
         31:a9:d1:ed:74:ef:47:e9:cd:dd:d1:79:ae:c7:10:87:19:76:
         1a:9c:4b:c6:08:2a:99:75:33:e4:61:fc:95:a5:40:78:b9:6a:
         6c:14:48:20:79:3b:55:49:d8:58:2b:0a:f4:cc:dc:9a:0d:a9:
         92:95:fb:44:0d:91:59:d4:4d:1c:c3:5d:d6:50:c5:54:5b:b2:
         52:09:40:2c:b6:0d:e9:4b:30:1e:f7:5c:65:84:05:22:8d:dd:
         9a:81:06:4e:0e:06:51:c9:62:be:f1:2a:98:8d:43:f4:bb:68:
         80:43:d2:09
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2
MEVCMEZCMTcwHhcNMjUxMjE2MTY0MDU2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQxOGI5OC0yYjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkd/h5GDeNartfeCwJ+HNdJZM0Osw1+ReRVINS6ZgJIbpzy7WWF4NmJnEkLRg
W3cJWcb9sj0QRLk1t1usv5iE0+qsRvnYQiegLcKCcqXdZpBX3B9VFY9Zl9HxQZMp
KgQP1e8tcVoLE1dv4oDVkzHk5sk+hoeyIpeMcMKxU0EjolmhGRvVu0uDlDPcP9g5
DLFZYLZrraRns12dFR9SLU0Xi8ofCj41EeG/ZXyncwiX8Q4XajtxAha+7B9dDF1p
SmcmKYCWPOUc9CseV6nf0QrO8PvBNC7D8QldxLz6gjLhuBhFfeanGnIVFqJiRVXV
gsLIpEluoousXbbAMxWVB3gQ3QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPH/o+S3
R65SuF0H1dGq1LR+j0DMMB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC
MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTkxRDMvNjI5RThCMjAzQjIzMTFFRUE0M0IwMjE5QzRGOUFFMDIvOTI2QTQwQUMy
MDVFMTFGMEE3NTUyNTEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAC5/vIDBADVi+gwDQYJKoZIhvcNAQELBQADggEBAJ8unSwA
mOAvKa2p+urYs/SnfJrJBCz3sCImy7FDkTczSOxW4QfsVW8/A028VOqrGjAxGXOc
dtC6oPlZrXC3BJCJgreJvEVEJXhs/yBKdDXQdiJvL/4B7432gpclp/V4C4/JFQqO
4S/1bG5AfIwpfD0mLd2bTb1KYpqgoy9HeaXK+FLhKDZACpWHMn8956mwkzGp0e10
70fpzd3Rea7HEIcZdhqcS8YIKpl1M+Rh/JWlQHi5amwUSCB5O1VJ2FgrCvTM3JoN
qZKV+0QNkVnUTRzDXdZQxVRbslIJQCy2DelLMB73XGWEBSKN3ZqBBk4OBlHJYr7x
KpiNQ/S7aIBD0gk=
-----END CERTIFICATE-----
Generated at Sat Dec 20 22:52:29 2025 by rpki-client