This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/527245ACD42311F0A8A37057C4F9AE02.roa
File:                     527245ACD42311F0A8A37057C4F9AE02.roa (raw, json)
Hash identifier:          JAe8IRDZjRhBc/cJ3AbxdISllVbM5/bUgdQx1DGqHrM=
Subject key identifier:   13:11:A8:CC:55:CA:FE:FC:F3:F3:BD:E8:AC:2A:B6:73:64:F3:47:41
Certificate issuer:       /CN=A91994D1/serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB
Certificate serial:       06
Authority key identifier: B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/527245ACD42311F0A8A37057C4F9AE02.roa
Signing time:             Mon 08 Dec 2025 10:47:42 +0000
ROA not before:           Mon 08 Dec 2025 10:47:42 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        144.79.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl
                          rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91994D1, serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB
        Validity
            Not Before: Dec  8 10:47:42 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6936acce-07ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:90:59:32:6f:74:48:d4:f2:be:8e:2c:6e:78:
                    2f:37:01:44:ef:0b:7c:19:63:19:35:5f:7d:c0:d9:
                    66:46:73:60:fa:4c:9a:e6:0d:9d:44:a5:41:ee:7f:
                    47:62:01:69:42:ee:5a:9b:5d:ac:f8:4d:3c:60:80:
                    ba:42:15:b1:67:c7:71:b0:0a:88:42:f3:43:5c:9e:
                    83:0e:75:d2:3d:04:4d:8e:46:6c:d5:3b:5f:76:30:
                    3a:f8:9c:2f:f5:a8:bf:5e:27:c5:a9:8b:54:a4:5a:
                    06:51:e0:b1:3e:db:7f:ed:2a:65:26:b8:48:9d:11:
                    71:d9:bf:32:a6:49:96:b8:40:45:86:ce:52:06:bd:
                    6d:63:42:e6:c4:4e:21:af:9b:41:af:b1:a0:bf:5f:
                    fc:74:fa:ca:e4:9e:80:c4:c8:e3:5e:37:7a:6b:bd:
                    c9:53:56:07:08:dd:de:83:a8:25:09:11:c7:98:02:
                    5c:f2:e3:7e:f6:ad:09:e4:59:42:da:31:c6:17:2b:
                    ee:85:2d:03:41:fd:09:2d:a9:98:9e:49:d9:3e:9d:
                    62:66:6b:ed:c0:5a:b2:f2:46:3c:28:ee:dc:39:0a:
                    84:af:3f:b6:65:26:06:3a:b1:14:b5:bf:f8:57:2e:
                    8d:55:c2:9b:ea:69:53:68:8f:80:2f:8e:82:8d:b8:
                    73:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:11:A8:CC:55:CA:FE:FC:F3:F3:BD:E8:AC:2A:B6:73:64:F3:47:41
            X509v3 Authority Key Identifier:
                keyid:B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/527245ACD42311F0A8A37057C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:8a:b4:e5:f3:aa:ad:4f:85:2a:cb:a3:0d:7a:30:80:cd:1e:
         ac:68:30:89:8b:99:f4:e0:d8:dc:ff:5b:39:9c:cb:8c:65:a8:
         ff:49:48:cd:90:aa:36:fb:cc:0d:55:1b:e1:95:34:89:ed:c1:
         07:6d:2e:d5:c1:66:f5:f0:ba:fe:27:18:1b:2e:78:27:d6:48:
         2b:41:c3:66:c5:a5:53:b7:77:66:0c:3b:3e:64:54:da:cb:00:
         14:ab:03:eb:39:a2:1b:90:c1:63:46:ce:86:e6:c3:20:6e:ba:
         06:fe:b7:ec:d7:3e:5c:93:d6:fa:a0:4e:6e:57:7f:1c:08:4e:
         90:ab:56:ff:3b:d5:10:5d:62:1e:23:d8:9c:1b:68:75:78:84:
         7e:9d:93:cd:fa:71:73:ba:01:9b:53:73:ab:a4:02:32:2b:2a:
         33:b1:ae:4f:30:f8:dd:fc:95:10:1a:c6:43:2b:61:a4:a5:44:
         39:33:31:b2:b0:7a:43:c6:e0:ed:0f:7b:ef:99:12:b9:b4:f8:
         0d:15:c6:df:25:b6:2f:ce:fa:55:91:98:54:ed:ba:e6:30:96:
         2d:ca:21:fd:73:63:05:e9:35:5f:7c:a0:fa:46:fc:cd:c0:72:
         f3:8e:eb:b7:39:54:4b:85:d9:31:57:1d:83:b9:d4:db:b8:fb:
         d6:67:78:bc
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
OTREMTExMC8GA1UEBRMoQjY5NEE4QzUyOEYwQjlBNEQ0NTNCQzQ0MjBFNTBCNTE5
RENGRDBBQjAeFw0yNTEyMDgxMDQ3NDJaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5MzZhY2NlLTA3Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDlkFkyb3RI1PK+jixueC83AUTvC3wZYxk1X33A2WZGc2D6TJrmDZ1EpUHuf0di
AWlC7lqbXaz4TTxggLpCFbFnx3GwCohC80NcnoMOddI9BE2ORmzVO192MDr4nC/1
qL9eJ8Wpi1SkWgZR4LE+23/tKmUmuEidEXHZvzKmSZa4QEWGzlIGvW1jQubETiGv
m0GvsaC/X/x0+srknoDEyONeN3prvclTVgcI3d6DqCUJEceYAlzy4372rQnkWULa
McYXK+6FLQNB/QktqZieSdk+nWJma+3AWrLyRjwo7tw5CoSvP7ZlJgY6sRS1v/hX
Lo1VwpvqaVNoj4AvjoKNuHOBAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUExGozFXK
/vzz873orCq2c2TzR0EwHwYDVR0jBBgwFoAUtpSoxSjwuaTUU7xEIOULUZ3P0Ksw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5NEQxLzk1MEQ3NzAyQ0U2
RTExRjBCMDAxRUQ0RkM0RjlBRTAyL3RwU294U2p3dWFUVVU3eEVJT1VMVVozUDBL
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvdHBTb3hTand1YVRVVTd4RUlPVUxVWjNQMEtzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTREMS85NTBENzcwMkNFNkUxMUYwQjAwMUVENEZDNEY5QUUwMi81MjcyNDVBQ0Q0
MjMxMUYwQThBMzcwNTdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAJBPLTANBgkqhkiG9w0BAQsFAAOCAQEAIIq05fOqrU+FKsuj
DXowgM0erGgwiYuZ9ODY3P9bOZzLjGWo/0lIzZCqNvvMDVUb4ZU0ie3BB20u1cFm
9fC6/icYGy54J9ZIK0HDZsWlU7d3Zgw7PmRU2ssAFKsD6zmiG5DBY0bOhubDIG66
Bv637Nc+XJPW+qBObld/HAhOkKtW/zvVEF1iHiPYnBtodXiEfp2Tzfpxc7oBm1Nz
q6QCMisqM7GuTzD43fyVEBrGQythpKVEOTMxsrB6Q8bg7Q9775kSubT4DRXG3yW2
L876VZGYVO265jCWLcoh/XNjBek1X3yg+kb8zcBy847rtzlUS4XZMVcdg7nU27j7
1md4vA==
-----END CERTIFICATE-----
Generated at Fri Dec 19 08:30:45 2025 by rpki-client