This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/A6C2BD2CDC3D11F0BD1F8D86696F56BC.roa
File:                     A6C2BD2CDC3D11F0BD1F8D86696F56BC.roa (raw, json)
Hash identifier:          gno5W6OsNk9yV9Glt4IA06juipEOOOLdDDhIr5l7fds=
Subject key identifier:   67:C7:68:AF:BD:FD:30:ED:EB:63:EB:3E:7B:B8:97:90:4C:37:C6:C2
Certificate issuer:       /CN=A91C022C/serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
Certificate serial:       B1
Authority key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/A6C2BD2CDC3D11F0BD1F8D86696F56BC.roa
Signing time:             Thu 18 Dec 2025 18:16:20 +0000
ROA not before:           Thu 18 Dec 2025 18:16:20 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     154434
IP address blocks:        161.248.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl
                          rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C022C, serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
        Validity
            Not Before: Dec 18 18:16:20 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=694444f4-df5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:16:36:ea:c8:06:45:fb:02:f6:ab:51:d8:72:
                    c9:d5:47:fd:9d:68:41:68:1e:79:ef:5c:2f:6a:e1:
                    2f:31:e5:f2:90:36:b9:52:db:45:aa:d9:4f:29:84:
                    f4:49:e2:d2:db:18:96:ff:ac:e6:2a:95:c0:1f:44:
                    04:45:06:b0:a2:52:a1:dc:2c:71:5f:ea:55:15:67:
                    79:66:33:cb:40:dc:61:cb:c5:08:cb:4f:71:ff:02:
                    fb:61:d3:95:f3:f1:73:7e:f8:34:db:23:bb:93:6e:
                    91:bd:c3:33:46:df:c3:ba:68:f2:1b:b6:d5:7f:1d:
                    3e:bc:19:f4:f5:78:d2:55:47:36:b6:b3:f6:0a:04:
                    03:1a:e1:c6:67:96:0a:bb:0a:c0:99:39:73:a1:84:
                    22:ce:83:89:04:27:df:72:c8:b9:f7:dc:50:27:d0:
                    77:f1:4f:10:81:45:72:4c:5d:6f:c3:90:cc:ba:15:
                    f8:78:8e:e5:9c:3b:7d:e7:55:1f:a1:4b:ca:ce:20:
                    fc:e8:c7:9d:63:f3:3b:c4:b0:23:0c:83:97:c8:75:
                    58:8c:fb:07:83:95:f0:60:50:5d:20:a2:33:b7:d2:
                    e1:94:b2:23:a7:26:c9:94:23:3d:ab:cd:47:b9:5c:
                    83:c9:4f:68:8a:4c:8b:d0:41:ee:37:c4:aa:35:1e:
                    e6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C7:68:AF:BD:FD:30:ED:EB:63:EB:3E:7B:B8:97:90:4C:37:C6:C2
            X509v3 Authority Key Identifier:
                keyid:3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/A6C2BD2CDC3D11F0BD1F8D86696F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:cb:da:70:97:26:ce:52:3e:36:3b:0b:8e:c7:79:0c:66:c0:
         8b:86:e9:b7:6a:45:67:35:0a:dc:8a:9a:e2:4c:58:97:1b:4a:
         ac:38:e3:04:33:12:43:45:f0:a1:56:48:db:68:b7:a5:76:f5:
         7c:5c:6f:c2:96:0b:a1:ab:11:d1:ec:c8:37:ea:c6:e7:ea:ee:
         1b:56:d5:ce:21:a1:19:84:0e:07:ac:42:96:fb:df:78:ba:50:
         7b:6d:ec:43:4e:e3:e3:f4:6b:a8:7f:76:95:d5:03:96:44:16:
         a4:d6:73:1d:5f:ab:7d:d8:95:8d:c8:6a:f3:25:ab:7c:6a:0a:
         9b:84:36:a1:06:d2:c0:f9:bd:e5:88:27:13:36:52:60:12:6c:
         08:f6:2f:97:d5:89:d3:03:cc:4c:2f:a5:ab:1c:51:4d:de:42:
         61:27:28:b0:6c:46:f6:05:b2:f6:7f:1c:68:5b:28:dd:f7:4b:
         61:45:fe:f5:66:c0:40:ad:58:93:55:4a:eb:2e:0c:83:1c:06:
         4b:93:85:ab:f6:db:6e:8f:6a:3e:9e:64:41:26:58:31:7a:a1:
         ac:9f:58:9e:6a:f3:1a:10:17:56:a8:f4:f6:2e:c5:ba:67:7e:
         b2:e5:03:87:73:d7:f9:81:56:38:c3:d2:56:58:6a:9a:ae:ac:
         95:6f:10:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:37:26 2025 by rpki-client