This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7390E6C4B69011EEA6557474C4F9AE02.roa
File:                     7390E6C4B69011EEA6557474C4F9AE02.roa (raw, json)
Hash identifier:          RpJsOjpuCxYF6bekPV53tCm5UNC5uLvQYSmca4wHins=
Subject key identifier:   63:CD:BB:83:56:5F:FB:6E:CC:7D:4E:34:70:38:3A:8B:BE:30:86:3C
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       0741
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7390E6C4B69011EEA6557474C4F9AE02.roa
Signing time:             Tue 16 Dec 2025 09:10:34 +0000
ROA not before:           Tue 16 Dec 2025 09:10:34 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     63737
IP address blocks:        144.79.12.0/23 maxlen: 24
                          157.10.48.0/23 maxlen: 23
                          157.10.50.0/23 maxlen: 23
                          157.66.156.0/23 maxlen: 23
                          157.66.158.0/23 maxlen: 23
                          160.25.76.0/23 maxlen: 23
                          160.25.168.0/23 maxlen: 24
                          160.25.234.0/23 maxlen: 23
                          160.30.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1857 (0x741)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Dec 16 09:10:34 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6941220a-411e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2c:5f:84:67:7b:97:5f:ba:03:4c:a6:bc:ec:
                    ca:94:a0:fc:e1:67:c3:9c:f3:6b:e4:0a:db:79:32:
                    c1:6b:fa:0a:7c:0a:d8:cb:91:3d:ff:d4:b4:0d:01:
                    57:86:63:21:e1:cf:56:96:80:02:53:83:a3:17:8f:
                    cb:dc:23:45:45:c1:c1:18:c8:11:03:8e:06:c8:49:
                    d8:40:7c:de:d0:6b:d8:38:e2:7d:a2:bd:1d:d3:b9:
                    49:58:d5:20:67:27:1e:12:70:af:cc:57:9e:2c:a9:
                    22:29:d2:e4:a6:07:b0:df:d8:df:96:23:a2:c7:66:
                    2f:35:0b:5a:01:32:24:32:de:cc:b7:4a:70:88:11:
                    0f:bb:60:94:e0:c6:a0:66:b1:03:ad:de:ce:c8:bc:
                    e4:2f:53:c9:83:f5:96:26:40:6b:3f:ef:1c:3b:32:
                    92:50:73:6c:08:5e:1b:30:f6:63:b9:19:dc:59:88:
                    0c:58:e5:c0:5b:94:5b:fe:7c:b9:65:61:d1:1e:10:
                    49:32:ef:6d:f4:82:6b:09:c9:e3:62:23:ee:b7:f6:
                    a5:a8:df:f0:93:1e:65:f1:c3:e4:ea:03:7f:c6:ce:
                    fe:f3:67:7d:50:a9:05:60:69:55:bb:ba:a6:db:6b:
                    87:17:38:4f:50:eb:be:dc:99:ea:a7:07:7c:91:fb:
                    e0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CD:BB:83:56:5F:FB:6E:CC:7D:4E:34:70:38:3A:8B:BE:30:86:3C
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7390E6C4B69011EEA6557474C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.12.0/23
                  157.10.48.0/22
                  157.66.156.0/22
                  160.25.76.0/23
                  160.25.168.0/23
                  160.25.234.0/23
                  160.30.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:5d:e9:31:b3:11:f7:61:4b:99:f1:07:a2:21:32:f5:ca:40:
         e2:91:b2:1f:f3:0d:a1:9d:ce:8a:e7:4a:7a:7f:38:06:81:44:
         84:66:e8:28:4d:d9:e5:2e:ce:47:92:fc:a9:7d:af:34:4c:be:
         cc:78:96:20:bc:45:3c:3e:8a:3b:da:99:e6:ba:2a:42:f3:c7:
         2d:84:19:17:d7:24:ec:dc:f7:71:ca:33:5a:0a:f5:4d:eb:97:
         3b:53:3e:d4:cd:80:11:f5:d9:7b:69:dc:ec:7e:53:5a:fd:fc:
         da:4f:48:3b:e3:e5:94:19:18:f8:3f:b1:a3:9c:d5:44:08:8b:
         57:c9:07:15:b6:b5:be:50:d0:cf:29:cd:39:1a:36:80:dc:18:
         af:b5:a4:89:4e:a0:64:b0:23:3a:ff:22:5c:79:fe:78:53:cc:
         d4:79:02:fc:5d:9a:3c:44:0c:9b:7a:66:bf:db:d3:68:2b:d9:
         e8:57:6a:91:08:1b:af:9f:5f:7e:f8:03:7d:d5:ea:76:d2:20:
         56:27:b7:ed:e9:24:b7:ad:2f:2b:58:f1:fe:24:aa:1c:d5:1b:
         6d:69:ff:18:99:93:fe:32:cd:2f:2c:f0:70:61:da:9d:7d:49:
         fb:61:59:24:f1:f3:f6:38:22:14:ab:bc:8f:38:3c:b3:11:2c:
         78:07:4b:51
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjUxMjE2MDkxMDM0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQxMjIwYS00MTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlyxfhGd7l1+6A0ymvOzKlKD84WfDnPNr5ArbeTLBa/oKfArYy5E9/9S0DQFX
hmMh4c9WloACU4OjF4/L3CNFRcHBGMgRA44GyEnYQHze0GvYOOJ9or0d07lJWNUg
ZyceEnCvzFeeLKkiKdLkpgew39jfliOix2YvNQtaATIkMt7Mt0pwiBEPu2CU4Mag
ZrEDrd7OyLzkL1PJg/WWJkBrP+8cOzKSUHNsCF4bMPZjuRncWYgMWOXAW5Rb/ny5
ZWHRHhBJMu9t9IJrCcnjYiPut/alqN/wkx5l8cPk6gN/xs7+82d9UKkFYGlVu7qm
22uHFzhPUOu+3Jnqpwd8kfvgiwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFGPNu4NW
X/tuzH1ONHA4Oou+MIY8MB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNzM5MEU2QzRC
NjkwMTFFRUE2NTU3NDc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E
NDAyMDAEAgABMCoDBAGQTwwDBAKdCjADBAKdQpwDBAGgGUwDBAGgGagDBAGgGeoD
BAGgHswwDQYJKoZIhvcNAQELBQADggEBAI5d6TGzEfdhS5nxB6IhMvXKQOKRsh/z
DaGdzornSnp/OAaBRIRm6ChN2eUuzkeS/Kl9rzRMvsx4liC8RTw+ijvamea6KkLz
xy2EGRfXJOzc93HKM1oK9U3rlztTPtTNgBH12Xtp3Ox+U1r9/NpPSDvj5ZQZGPg/
saOc1UQIi1fJBxW2tb5Q0M8pzTkaNoDcGK+1pIlOoGSwIzr/Ilx5/nhTzNR5Avxd
mjxEDJt6Zr/b02gr2ehXapEIG6+fX374A33V6nbSIFYnt+3pJLetLytY8f4kqhzV
G21p/xiZk/4yzS8s8HBh2p19SfthWSTx8/Y4IhSrvI84PLMRLHgHS1E=
-----END CERTIFICATE-----
Generated at Sun Dec 21 07:25:03 2025 by rpki-client