This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/7229FDDCDC3D11F08C062F6F696F56BC.roa
File:                     7229FDDCDC3D11F08C062F6F696F56BC.roa (raw, json)
Hash identifier:          AQ3RRlUnQ+bI7Mxuna8nU/0LJRi7LZKQd0nTc9fvglM=
Subject key identifier:   DC:9C:46:CF:DE:61:8B:3A:E0:1B:3E:B4:B3:16:2B:07:3D:D1:AA:0C
Certificate issuer:       /CN=A91C022C/serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
Certificate serial:       AE
Authority key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/7229FDDCDC3D11F08C062F6F696F56BC.roa
Signing time:             Thu 18 Dec 2025 18:14:51 +0000
ROA not before:           Thu 18 Dec 2025 18:14:51 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     153528
IP address blocks:        161.248.200.0/24 maxlen: 24
                          161.248.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl
                          rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C022C, serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
        Validity
            Not Before: Dec 18 18:14:51 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6944449b-726e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:85:58:39:85:c9:b5:95:d6:23:ec:9e:b8:b4:
                    0c:1a:e7:d4:9d:42:42:55:42:9e:ed:4e:7f:10:08:
                    55:1f:5a:59:43:37:32:fd:6e:0f:a9:ce:ee:7f:bb:
                    f4:a9:fc:c9:f3:15:62:f2:63:50:f3:b4:35:28:59:
                    2d:5a:9f:da:85:50:fa:e0:e5:f4:12:f7:3e:f8:59:
                    72:3f:19:b6:c0:66:58:18:35:cd:2e:a8:b8:13:d5:
                    df:60:47:0a:13:a6:7f:59:3b:bd:f0:39:5a:86:01:
                    04:f8:30:36:13:ff:25:71:5c:c7:f6:57:02:6e:3c:
                    9b:c9:22:ab:0d:85:02:6d:bb:c9:2e:e7:70:16:0a:
                    5d:50:04:09:3e:20:d5:44:f4:67:54:f7:d8:8e:70:
                    0a:15:b0:3f:3f:cc:82:e0:34:51:c1:0d:dc:15:00:
                    95:e3:89:78:a9:8d:4e:92:43:af:e7:17:dd:63:61:
                    a7:29:80:32:f6:ad:ad:fa:b7:bb:b4:f7:5d:06:0b:
                    a7:ff:b1:b2:d5:13:58:59:7d:15:3a:7e:b8:4d:fa:
                    be:f1:1e:f3:15:8e:a3:6a:17:10:df:a5:ef:94:55:
                    da:5e:74:3d:15:29:a4:92:fa:a1:5f:61:1b:73:09:
                    a0:39:c4:ad:bc:5d:59:9e:25:98:0e:8a:09:08:4f:
                    bf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9C:46:CF:DE:61:8B:3A:E0:1B:3E:B4:B3:16:2B:07:3D:D1:AA:0C
            X509v3 Authority Key Identifier:
                keyid:3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/7229FDDCDC3D11F08C062F6F696F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:61:c1:78:af:3a:7a:04:64:05:2d:08:e7:44:76:dc:12:52:
         46:e2:25:a7:7b:c2:a1:fe:a8:77:15:fa:47:78:1f:03:3e:09:
         72:3f:24:66:45:24:98:1a:fd:bb:0e:cb:62:50:10:a2:3c:bc:
         00:c6:46:95:f1:68:4f:7d:58:c8:20:ee:64:d6:4c:1d:44:39:
         07:d3:e3:58:96:fa:2d:8a:1c:43:93:4f:f4:90:fb:31:85:10:
         08:85:75:ee:e5:71:9f:c3:11:76:be:d5:39:a6:1c:50:58:6b:
         1c:45:f8:f5:15:fe:ef:74:ba:2a:bb:f2:ef:e7:46:bc:ee:3f:
         89:39:6c:a7:62:d1:fe:f0:ed:f3:f0:37:e6:e8:5a:c2:f2:69:
         cc:13:e0:e2:4d:5b:82:78:e8:9c:9e:ba:ca:75:61:cd:73:36:
         82:0e:0b:68:2e:4a:c3:e4:f8:f7:d8:6c:3a:e8:2a:7e:eb:43:
         23:87:50:87:37:36:b5:5c:f2:5a:b4:27:e8:f6:fb:c9:4d:2b:
         2b:0d:36:ce:3e:da:9e:30:fb:db:57:1e:8d:d3:fb:5b:f1:e6:
         fb:bc:85:82:50:41:80:e0:79:24:0a:b7:dd:82:4e:66:7b:f7:
         74:2d:12:76:4e:7a:69:c3:ed:70:37:85:39:3b:35:63:03:f4:
         86:88:41:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:37:27 2025 by rpki-client