This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/7C0B5320D61411F0877B8D3FC4F9AE02.roa
File:                     7C0B5320D61411F0877B8D3FC4F9AE02.roa (raw, json)
Hash identifier:          sEqEu4ZHkgzDYvWJDII6WZOgnySzMlBVpuOMflPaWms=
Subject key identifier:   F2:66:19:23:54:37:17:64:65:CC:BF:01:70:13:0D:D7:F1:74:EC:47
Certificate issuer:       /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Certificate serial:       71
Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/7C0B5320D61411F0877B8D3FC4F9AE02.roa
Signing time:             Sat 13 Dec 2025 06:45:15 +0000
ROA not before:           Sat 13 Dec 2025 06:45:15 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     2764
IP address blocks:        160.250.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
                          rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
        Validity
            Not Before: Dec 13 06:45:15 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=693d0b7b-3e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:ef:4b:eb:a4:8b:47:cf:e2:78:ad:d2:80:
                    9a:20:45:d4:ed:dc:5d:31:3a:d8:1e:5c:0a:94:c4:
                    bc:8b:79:67:de:1d:01:bc:18:73:28:1b:37:6b:db:
                    61:7b:f5:c3:43:3f:86:e8:58:9e:79:63:f7:3f:0d:
                    81:1c:51:2e:fa:5a:1f:3e:97:ec:11:6e:a9:10:e6:
                    6f:a4:c1:1a:bb:1e:00:dd:70:9f:e9:ed:c5:f3:b9:
                    c3:ca:ed:28:aa:46:4a:38:3d:8f:ef:bc:f9:87:1d:
                    35:02:7d:f8:0d:39:61:90:9f:db:ed:75:c5:03:40:
                    bf:80:df:34:b9:ae:35:b8:25:d4:7d:df:df:61:27:
                    18:03:19:1e:65:04:90:c9:15:26:9e:a3:7b:5b:78:
                    57:10:aa:71:3f:de:16:2a:cd:3f:60:85:db:70:83:
                    f0:a1:87:3f:32:da:12:fb:5c:dd:19:28:10:04:73:
                    a8:7e:be:57:25:b1:90:c2:4c:f7:84:a9:1c:52:fe:
                    e6:e4:8e:9b:14:d6:fa:47:36:4f:f7:0b:53:63:ec:
                    25:8c:8d:b9:0e:06:7b:2a:a3:0e:f1:a5:42:6e:f9:
                    be:8a:96:97:dc:ca:7a:99:f9:d8:11:32:40:3c:58:
                    8d:5d:78:91:ba:4b:83:2f:b4:42:78:fa:b7:66:68:
                    58:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:66:19:23:54:37:17:64:65:CC:BF:01:70:13:0D:D7:F1:74:EC:47
            X509v3 Authority Key Identifier:
                keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/7C0B5320D61411F0877B8D3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:57:72:fe:b4:76:da:ce:67:98:86:8c:e1:a0:72:d1:28:a7:
         74:70:1a:11:ef:96:10:3c:94:22:65:ed:30:fe:e5:35:b7:63:
         97:86:76:8e:83:c2:60:9c:bf:b0:02:81:4a:ed:76:e5:fb:c2:
         89:e9:b3:85:6a:6c:ac:db:3a:d4:86:90:d9:71:75:69:c8:cf:
         39:1f:cc:78:1f:fe:3a:76:47:21:55:bb:bd:03:2e:35:2b:32:
         c5:8f:35:99:11:6c:d0:64:c6:42:8d:a8:f3:da:4e:92:ea:16:
         e4:cd:30:62:c4:4f:a5:d8:ca:ac:eb:56:12:43:89:12:d4:6c:
         bf:38:05:03:8e:b3:da:06:45:ea:3e:f4:1c:60:e6:01:0e:cf:
         9d:91:7c:3c:05:a7:b6:5f:4b:b6:59:6c:98:aa:9e:0d:0e:7c:
         48:61:dc:40:23:de:ed:93:c0:ef:fd:e0:84:34:fd:69:3c:7e:
         93:7f:52:30:c7:20:07:19:be:2b:5a:bf:23:2b:0c:4b:0b:51:
         35:47:e7:02:71:2a:0a:42:f0:89:98:fb:10:53:f5:e1:7b:e6:
         cf:30:f5:61:4f:d8:0d:56:ec:a1:c6:43:6f:b1:4c:79:3c:68:
         54:4a:e7:89:19:cd:64:e9:89:5f:3d:6a:d8:26:e3:ee:9b:a2:
         f6:ea:fa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:40:04 2025 by rpki-client