This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/5A9C0D58311C11F0B91A2E64C4F9AE02.roa
File:                     5A9C0D58311C11F0B91A2E64C4F9AE02.roa (raw, json)
Hash identifier:          n8XUmr5KjS13+kjcxi8G3iN9bzXMPfNq3EcEqckzzBI=
Subject key identifier:   51:6A:76:5A:1F:60:87:B9:C0:F9:36:51:77:89:49:4E:8D:35:30:D5
Certificate issuer:       /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Certificate serial:       72
Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/5A9C0D58311C11F0B91A2E64C4F9AE02.roa
Signing time:             Sat 13 Dec 2025 06:45:16 +0000
ROA not before:           Sat 13 Dec 2025 06:45:16 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     4826
IP address blocks:        165.99.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
                          rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 05:51:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
        Validity
            Not Before: Dec 13 06:45:16 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=693d0b7c-3eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a9:67:16:d5:22:a0:de:63:8e:8e:51:ad:25:
                    e0:64:31:3b:f2:58:a6:59:2b:93:1f:fd:a7:d7:38:
                    aa:d1:b7:86:50:cb:36:e5:eb:9f:27:4b:1a:c2:03:
                    f1:a2:31:d1:23:57:d4:00:d0:fb:ba:b5:0e:b2:00:
                    0f:7d:4c:08:63:9d:92:c5:db:4f:e2:4c:29:38:ba:
                    ef:8d:1b:af:45:6b:f4:80:e5:95:ea:5e:35:d6:7a:
                    dd:af:14:f4:ea:b2:e0:a1:e3:0b:e7:02:3b:fc:2d:
                    32:29:26:39:7c:f4:dd:b1:12:ab:03:eb:26:35:38:
                    fb:d7:7b:78:7c:51:5d:95:01:b3:55:10:fb:f1:b8:
                    9f:fb:0f:92:00:33:92:0c:72:d1:52:71:e6:20:7c:
                    b5:80:25:a1:30:f9:7d:1d:5a:a4:9f:f8:e1:90:e4:
                    4c:ea:81:a0:f1:35:69:8f:a5:4e:84:f9:56:b4:22:
                    88:8f:ff:46:48:1f:49:51:b2:42:16:bc:e2:e0:4c:
                    96:26:01:96:25:6e:ad:0c:a9:b8:94:45:db:fc:ed:
                    c8:b7:4b:16:b5:ff:5f:cf:e5:82:83:3e:a0:cd:1a:
                    2b:e5:a5:63:e7:eb:2f:2d:ef:a5:59:31:6f:37:b6:
                    25:14:5b:93:e1:32:4a:26:a1:ca:2f:10:49:91:73:
                    6e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6A:76:5A:1F:60:87:B9:C0:F9:36:51:77:89:49:4E:8D:35:30:D5
            X509v3 Authority Key Identifier:
                keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/5A9C0D58311C11F0B91A2E64C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:c8:7c:62:40:95:22:09:1b:3a:7c:25:66:89:ba:99:3f:bf:
         91:10:85:79:0d:03:8b:49:5d:3f:0b:bd:7c:0b:a6:5e:a9:58:
         e2:c8:46:9d:ad:47:9e:6e:7a:7c:82:9c:4e:03:63:4d:b7:a9:
         b4:12:6e:de:9f:e1:13:2e:77:55:08:29:23:5a:49:4a:08:4f:
         cb:4e:12:cd:98:5c:81:3d:47:56:df:f6:35:44:76:e0:33:a0:
         88:b8:17:2f:db:d7:13:13:0b:f3:38:92:c2:fd:c8:cd:4f:bc:
         20:06:a2:04:75:33:bf:80:66:de:84:3d:60:e0:61:3d:2e:56:
         df:78:ef:65:48:f1:b2:4b:59:4a:99:d7:63:36:9b:09:a4:1f:
         22:b1:43:a1:7d:b1:95:15:c8:75:37:82:4e:61:a4:22:38:0d:
         32:aa:53:e2:c9:96:24:64:3e:40:78:4a:69:ae:79:d5:2e:64:
         5f:09:00:a5:49:ec:e4:e5:d9:ba:13:e3:f3:5b:c5:c9:04:4a:
         39:d3:96:83:31:1c:39:de:5b:85:86:c5:c2:fc:7e:3c:46:9e:
         fd:62:fe:f0:c7:7c:c4:f0:51:23:83:1b:18:ac:6a:cc:33:3e:
         12:5b:0b:0e:7d:c9:d7:21:63:83:83:c6:d6:82:23:8e:9d:5d:
         62:bf:be:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 07:11:26 2025 by rpki-client