This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/AE868E3ED9C311F0B65612906CD3641D.roa
File:                     AE868E3ED9C311F0B65612906CD3641D.roa (raw, json)
Hash identifier:          0OvpHT5K7nTFvUT7IEEUj6lauwVXtHDpYvaG5WqitIA=
Subject key identifier:   3D:7A:4A:CE:0E:B5:64:BD:C9:7B:4C:F6:C9:5C:FB:2D:CB:61:F7:DB
Certificate issuer:       /CN=A91A9E58/serialNumber=B30F9630254EA7E4291DF6FC64A6989818375FC2
Certificate serial:       0A
Authority key identifier: B3:0F:96:30:25:4E:A7:E4:29:1D:F6:FC:64:A6:98:98:18:37:5F:C2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/AE868E3ED9C311F0B65612906CD3641D.roa
Signing time:             Mon 15 Dec 2025 14:38:12 +0000
ROA not before:           Mon 15 Dec 2025 14:38:12 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154417
IP address blocks:        144.79.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 07:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E58, serialNumber=B30F9630254EA7E4291DF6FC64A6989818375FC2
        Validity
            Not Before: Dec 15 14:38:12 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69401d54-fb65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a1:68:5a:2c:ca:ff:e9:f6:7c:a5:37:95:29:
                    e9:29:88:86:64:d0:f7:a9:b6:0a:09:77:0f:c6:06:
                    86:3f:c7:9c:7c:b2:d1:fd:67:24:37:4a:23:cd:c1:
                    3c:d4:30:73:1c:ee:94:c4:ac:c9:73:61:2b:0e:35:
                    01:5b:d2:48:ee:e9:bc:b8:68:53:08:a0:84:88:74:
                    1e:ef:37:d8:23:49:79:9c:c0:bb:9f:0d:55:63:30:
                    ec:f8:7b:d4:d0:fd:fc:2f:86:aa:ff:54:0b:5f:98:
                    df:36:9f:72:9f:8b:26:97:af:ca:99:92:6e:1c:25:
                    c4:41:2a:11:00:84:d5:cb:a4:f7:e7:ee:b9:b5:f5:
                    51:fd:23:68:d6:8f:3a:5c:5d:ea:2a:63:9b:1f:35:
                    0d:d6:fc:9f:6e:f4:51:62:b1:ed:94:e1:2b:c8:53:
                    fe:00:7f:81:b4:ff:b7:ad:0a:44:53:d3:d4:08:df:
                    43:06:f0:f5:c7:0e:72:83:12:49:80:1f:32:2e:eb:
                    31:8c:ea:97:24:12:44:51:12:ee:0d:6e:d1:40:37:
                    66:d0:2c:6b:a2:af:e5:73:60:4c:cf:59:12:4f:6f:
                    1c:c7:31:04:66:d5:3e:1b:87:62:4f:8d:a7:61:97:
                    c8:58:a5:14:c7:09:c6:43:cc:7b:64:e1:dc:4d:1f:
                    d3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7A:4A:CE:0E:B5:64:BD:C9:7B:4C:F6:C9:5C:FB:2D:CB:61:F7:DB
            X509v3 Authority Key Identifier:
                keyid:B3:0F:96:30:25:4E:A7:E4:29:1D:F6:FC:64:A6:98:98:18:37:5F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/AE868E3ED9C311F0B65612906CD3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:ee:99:83:52:6c:cf:ad:95:10:95:3e:99:4a:a9:a8:d9:ff:
         93:76:fb:34:6b:e8:c2:de:86:e4:5a:28:f0:15:a0:27:ea:d1:
         a8:d5:3b:88:26:99:e4:07:3e:d3:88:96:4a:fb:2e:60:81:72:
         54:45:54:34:b3:6c:40:89:06:95:32:b0:3f:e9:9c:0f:ec:bd:
         b7:54:51:1f:72:af:10:35:6e:a9:c3:12:6e:4b:42:6e:ed:a3:
         0a:b5:c4:5b:cc:a4:15:87:fa:13:9b:5f:1b:cc:05:90:08:92:
         c7:64:b5:89:ad:1a:71:46:f9:e6:67:c6:71:b4:3a:2a:a9:ce:
         e1:5c:32:ba:cc:2e:d8:eb:c5:f3:d8:e7:df:52:a2:9e:d6:29:
         f8:ff:4f:8e:b6:5c:72:1a:f9:46:95:f9:e7:6e:4b:a6:bb:4f:
         4d:1d:73:a0:cc:16:63:c4:19:63:c1:6b:55:9a:fe:4a:91:38:
         66:58:71:e6:74:4d:81:4b:6c:08:57:08:1f:ed:70:62:63:d0:
         f8:25:af:8f:44:9c:8c:f8:61:83:59:df:2b:f5:25:54:a4:7d:
         a7:cb:c7:4a:ca:64:08:36:08:8a:80:d3:44:4b:5f:e4:b3:76:
         f7:98:43:2e:31:c2:98:06:b1:9d:47:2b:d6:9d:31:b9:5a:f5:
         fd:c0:2c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:00:08 2025 by rpki-client