This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/32A734F4DB3411F095EFF1788DD3641D.roa
File:                     32A734F4DB3411F095EFF1788DD3641D.roa (raw, json)
Hash identifier:          R8KX+/SyNsukJ5wZis8PnNKPy522TKB6VdISz0Pj3f8=
Subject key identifier:   AF:7E:64:27:F6:21:71:A5:06:DB:E7:F8:9B:08:F9:D4:9C:3D:E9:6B
Certificate issuer:       /CN=A91A2946/serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Certificate serial:       04
Authority key identifier: C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/32A734F4DB3411F095EFF1788DD3641D.roa
Signing time:             Wed 17 Dec 2025 10:36:53 +0000
ROA not before:           Wed 17 Dec 2025 10:36:53 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154435
IP address blocks:        144.79.158.0/24 maxlen: 24
                          144.79.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
                          rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 07:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2946, serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
        Validity
            Not Before: Dec 17 10:36:53 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=694287c4-37b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0a:1d:85:59:ef:f2:0e:cb:4e:41:68:32:53:
                    b8:2b:1d:af:fe:1f:19:54:87:39:0e:51:04:d0:27:
                    15:47:8f:92:c7:17:aa:83:13:35:6f:a8:2c:c8:fa:
                    35:ad:c1:7d:25:d3:f2:21:7e:29:bf:77:ce:bd:40:
                    09:7f:d5:3b:26:d6:84:2c:4b:e0:33:e7:00:7d:6b:
                    ef:72:3f:8e:6b:2b:54:ea:40:e2:d5:1a:d9:20:5c:
                    e4:b0:5a:d7:bd:52:5f:c7:b8:36:8c:0e:f8:b4:22:
                    92:0f:7f:0d:2e:e6:b7:17:20:a8:88:5b:71:01:ca:
                    55:1d:89:cc:72:21:30:62:06:c2:1f:a2:34:9c:57:
                    da:74:94:13:ce:ad:d3:70:37:df:02:20:2b:7e:af:
                    76:bb:e6:93:d3:2d:62:36:2e:d5:69:ab:75:75:da:
                    96:4d:c3:fc:ce:68:a3:aa:fd:bf:ef:69:32:64:1f:
                    e8:ac:28:04:df:ec:4d:79:46:cf:4c:53:21:85:41:
                    eb:20:f7:7c:e6:43:2c:b9:31:e1:69:da:5c:ad:ca:
                    51:87:51:e2:5c:e6:67:22:2b:13:3f:bb:65:81:74:
                    b8:49:df:18:b2:28:3c:ce:2d:0a:23:40:74:33:ba:
                    76:dc:e8:08:e6:87:e6:dd:47:50:a6:a3:25:3d:f6:
                    e8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7E:64:27:F6:21:71:A5:06:DB:E7:F8:9B:08:F9:D4:9C:3D:E9:6B
            X509v3 Authority Key Identifier:
                keyid:C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/32A734F4DB3411F095EFF1788DD3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:e3:f6:ee:e3:1e:b8:cb:29:12:a0:ca:a1:e6:26:1d:77:83:
         8b:7f:6c:0d:37:c1:af:c5:4e:03:23:7b:ce:0e:5c:b0:8f:9a:
         5b:3b:c7:3e:b9:4a:51:ad:cc:77:b3:33:7d:13:b0:b2:eb:85:
         90:3b:5b:95:c7:48:bc:fb:d2:6e:2e:27:cc:a4:c0:48:0f:47:
         f5:5e:b6:ef:a4:39:a2:ca:df:cc:5e:eb:32:11:f3:33:a1:ff:
         30:a3:90:df:f3:68:80:25:c1:bc:6c:05:fb:83:de:35:88:cd:
         2c:7c:9c:a3:0f:8b:89:ff:be:e6:f6:17:01:a5:b7:18:d4:63:
         c7:53:98:55:21:38:0e:9d:ba:da:0c:9a:e6:fc:fe:2a:24:5c:
         93:dd:9f:89:5e:fd:ea:0c:ff:62:9f:61:fe:49:7b:7b:93:b1:
         96:86:fb:cc:31:b1:52:da:07:e8:84:5b:cc:0b:96:a4:eb:97:
         e4:47:12:4a:e9:ac:e6:c0:4f:1c:16:f7:50:ba:8c:16:0c:19:
         03:20:b5:e5:e0:18:f4:dd:85:07:64:e6:93:57:62:ab:3a:e2:
         69:70:98:d1:06:ed:d2:e3:89:9b:14:6b:d2:c9:03:d7:76:ee:
         9f:67:e2:7d:22:3d:a3:9f:74:ba:5d:88:45:01:0b:4c:55:61:
         09:76:0f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:37:36 2025 by rpki-client