This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/83739562D66111F0B67B852D0CB43E13.roa
File:                     83739562D66111F0B67B852D0CB43E13.roa (raw, json)
Hash identifier:          MZXbiv4dwvYFL1iWN0aaMlfz8+9JPN0M6rbYfr0By/s=
Subject key identifier:   B5:11:8A:CF:3F:1E:65:95:B5:64:2E:C7:57:63:FE:4C:7C:23:2F:24
Certificate issuer:       /CN=A919FBF3/serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E
Certificate serial:       02
Authority key identifier: 3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/83739562D66111F0B67B852D0CB43E13.roa
Signing time:             Thu 11 Dec 2025 07:17:55 +0000
ROA not before:           Thu 11 Dec 2025 07:17:55 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154418
IP address blocks:        144.79.106.0/23 maxlen: 23
                          144.79.106.0/24 maxlen: 24
                          144.79.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl
                          rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 07:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FBF3, serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E
        Validity
            Not Before: Dec 11 07:17:55 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=693a7023-f64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b9:dd:dc:ad:af:54:c7:3e:b4:4e:f7:8b:f2:
                    2d:a4:33:f2:38:e8:c0:a1:ef:d8:17:b2:2b:cf:69:
                    4a:c1:5f:52:ff:8f:98:e2:17:95:16:93:18:5e:f2:
                    19:d1:89:8f:07:aa:c4:f3:30:c1:1a:88:fd:30:d6:
                    d0:34:1a:6f:6f:43:9a:bc:c1:43:8b:d1:9e:cf:6f:
                    c4:38:c4:19:65:3f:ea:4b:18:75:6b:55:7a:2e:1b:
                    c5:65:60:18:e2:b7:1c:2c:cb:71:ce:d9:37:01:ad:
                    31:df:b7:ea:c2:55:69:b5:5d:92:0f:ec:64:27:7a:
                    f5:fb:4a:2d:52:3a:63:4d:9a:d9:1d:de:58:e6:5a:
                    56:a2:eb:41:9a:5a:86:d7:9a:7e:1b:e5:f1:b5:58:
                    cb:38:fe:c7:52:bd:23:ed:cc:91:93:1e:5c:53:f9:
                    91:53:65:b6:a5:9e:4c:f7:9b:be:2f:a7:94:f8:16:
                    2a:8b:75:77:62:3f:18:fe:f4:21:f3:5b:24:da:3c:
                    48:99:2e:21:c8:bc:b2:4f:3e:c2:2f:d5:de:37:2e:
                    23:82:65:33:59:4b:53:1d:eb:ce:a0:8b:4a:64:73:
                    ac:fd:86:1b:a8:8f:a0:84:1a:a0:e4:1a:32:12:e3:
                    22:82:2f:69:6d:97:e1:0b:cf:73:1a:85:dc:01:68:
                    c7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:11:8A:CF:3F:1E:65:95:B5:64:2E:C7:57:63:FE:4C:7C:23:2F:24
            X509v3 Authority Key Identifier:
                keyid:3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/83739562D66111F0B67B852D0CB43E13.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:23:a2:8d:3f:f9:d6:47:4f:fc:d7:d4:62:3c:af:0b:ef:86:
         18:b3:03:02:1c:3a:cb:68:26:ce:8e:05:46:67:db:db:55:d9:
         9e:93:41:1d:fc:1f:95:46:3d:8a:78:fd:34:cb:ad:7b:f0:d2:
         64:3e:94:c0:c9:bf:8b:dc:d9:a8:4a:80:99:36:1c:7f:40:97:
         c6:4b:35:45:51:22:d0:e3:b1:f7:6e:7c:cd:c8:ed:68:1e:e6:
         a7:ca:99:26:71:f0:67:3e:1e:4b:c0:cd:c6:a8:e1:f5:3e:3f:
         45:aa:68:1b:5f:c8:af:2e:a6:11:e5:9b:41:8c:fd:5d:f8:63:
         e0:9b:ee:d4:5f:12:57:e0:c8:17:54:6e:eb:b8:cc:e7:6e:ba:
         ab:49:ed:02:41:44:b4:b9:9c:11:4c:a0:1d:46:72:5b:0b:a1:
         32:b1:68:6a:2c:6d:d9:81:16:05:4e:b1:23:81:46:06:63:3e:
         26:92:39:76:6d:82:6f:95:50:f6:af:18:9b:95:57:fc:34:e3:
         4f:24:94:4d:8d:45:2c:d2:24:0a:28:a5:1f:48:7e:c4:92:52:
         a9:5b:b2:c6:dd:19:4f:bb:59:5f:d6:e7:05:4d:b8:f8:72:7c:
         11:59:11:9b:6a:54:cb:31:0f:d8:41:e7:2e:d5:f3:84:d1:a3:
         d2:4e:82:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:02:34 2025 by rpki-client