This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/B7BA9860DB8A11F09F03163163D3641D.roa
File:                     B7BA9860DB8A11F09F03163163D3641D.roa (raw, json)
Hash identifier:          OeJdX4yqhfdrjeOKqFFmz6BAjzV3evwPhMQFdA5tEfE=
Subject key identifier:   2E:0E:D0:3B:17:98:61:48:C5:C0:64:2C:FB:EC:AF:A6:AD:7B:12:74
Certificate issuer:       /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Certificate serial:       1DDB
Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/B7BA9860DB8A11F09F03163163D3641D.roa
Signing time:             Wed 17 Dec 2025 20:55:28 +0000
ROA not before:           Wed 17 Dec 2025 20:55:28 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        45.126.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 16:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7643 (0x1ddb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C16B5, serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
        Validity
            Not Before: Dec 17 20:55:28 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=694318c0-67b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:6e:45:75:c8:ba:e6:1a:63:99:2a:23:77:
                    bb:b6:70:24:22:7f:0d:4d:31:10:23:9a:dd:9e:13:
                    66:ea:25:d6:63:0b:0b:40:79:7c:7c:d0:ce:b3:bf:
                    44:0e:2b:00:ab:95:42:e4:d9:7f:08:bf:f9:da:40:
                    17:09:51:c5:67:e2:28:da:0e:a3:b0:23:83:cf:d7:
                    cf:36:3f:1d:54:bc:6b:d7:5e:2d:fa:45:14:20:57:
                    6d:a9:cc:1b:9b:96:5c:39:f2:42:00:80:88:f8:3b:
                    47:0d:2c:33:04:94:ea:a7:23:c4:d5:c3:90:55:91:
                    6a:be:28:b5:f7:5e:5f:82:16:4b:9d:08:35:28:9a:
                    5f:17:8d:1e:ad:5b:df:04:7d:b3:54:2f:53:b6:7a:
                    10:cd:e9:7e:ec:35:75:3d:09:7b:f1:7f:dc:90:02:
                    97:c4:3a:15:54:fe:ce:cb:fb:bc:d1:de:97:3f:7a:
                    74:7f:e7:36:e3:dc:7d:b0:33:66:74:6a:75:fd:0c:
                    19:35:dd:e5:50:53:dd:28:54:1d:bc:7a:1b:42:71:
                    47:dc:4a:8e:78:76:12:fc:9c:24:94:fb:85:ee:84:
                    bc:c5:03:c2:d7:e2:96:13:70:b3:b1:74:a1:7f:b1:
                    16:7d:a2:7a:fd:27:5d:88:7f:35:dc:fb:b9:94:ae:
                    bc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0E:D0:3B:17:98:61:48:C5:C0:64:2C:FB:EC:AF:A6:AD:7B:12:74
            X509v3 Authority Key Identifier:
                keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/B7BA9860DB8A11F09F03163163D3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:be:06:fe:48:a8:d9:bb:95:50:89:2d:c4:63:75:45:3d:b6:
         ff:4a:6e:91:be:a1:76:85:9a:f8:9d:5f:09:46:ce:d3:95:f9:
         2d:55:3a:a5:be:09:41:96:f9:a5:86:4d:a2:1e:61:ed:81:46:
         15:3a:b9:8b:c4:e9:22:1d:81:d9:8c:dc:26:cc:75:a7:1f:5b:
         6f:ca:b4:e6:7a:d4:9e:d7:b0:6c:1e:c0:e5:9c:13:be:14:95:
         d6:55:78:15:7a:dd:63:aa:92:38:68:b6:91:9f:fb:05:b8:d6:
         b7:27:c8:6d:64:55:ca:be:54:7b:f3:01:38:0c:b6:b4:ef:b4:
         92:37:36:bc:86:d2:62:e6:c5:fb:b9:b9:69:d5:11:23:c7:f7:
         e1:cf:f3:c7:a6:9f:55:ad:2c:08:dc:f4:c2:f4:d0:9c:9f:b0:
         01:0f:71:ff:b2:6a:1e:7d:3b:1f:a9:bc:cf:91:9f:65:ee:3e:
         ce:50:3e:29:1d:40:23:53:3f:4b:93:60:f1:3e:96:e5:23:6c:
         37:26:75:3d:22:3b:1c:7e:9d:27:f4:32:de:1f:3a:8a:ba:e0:
         8f:72:08:91:d0:b0:47:f3:b4:73:14:ea:b5:70:e0:68:da:4e:
         78:bd:9b:81:08:56:54:d7:98:86:f0:25:41:d3:41:67:ee:cf:
         b5:eb:ad:ce
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICHdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE2QjUxMTAvBgNVBAUTKDQ3QTcxMTRFMjg3RUIxREM4MzVEMDdFOTgwNDVFRjQ2
RjUzRTdDNTcwHhcNMjUxMjE3MjA1NTI4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQzMThjMC02N2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArKRuRXXIuuYaY5kqI3e7tnAkIn8NTTEQI5rdnhNm6iXWYwsLQHl8fNDOs79E
DisAq5VC5Nl/CL/52kAXCVHFZ+Io2g6jsCODz9fPNj8dVLxr114t+kUUIFdtqcwb
m5ZcOfJCAICI+DtHDSwzBJTqpyPE1cOQVZFqvii1915fghZLnQg1KJpfF40erVvf
BH2zVC9TtnoQzel+7DV1PQl78X/ckAKXxDoVVP7Oy/u80d6XP3p0f+c249x9sDNm
dGp1/QwZNd3lUFPdKFQdvHobQnFH3EqOeHYS/JwklPuF7oS8xQPC1+KWE3CzsXSh
f7EWfaJ6/SddiH813Pu5lK68vQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC4O0DsX
mGFIxcBkLPvsr6atexJ0MB8GA1UdIwQYMBaAFEenEU4ofrHcg10H6YBF70b1PnxX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTZCNS9DQTZBNTVFQ0FB
NUExMUU2QkRDNkI3N0ZDNEY5QUUwMi9SNmNSVGloLXNkeURYUWZwZ0VYdlJ2VS1m
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I2Y1JUaWgtc2R5RFhRZnBnRVh2UnZVLWZGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzE2QjUvQ0E2QTU1RUNBQTVBMTFFNkJEQzZCNzdGQzRGOUFFMDIvQjdCQTk4NjBE
QjhBMTFGMDlGMDMxNjMxNjNEMzY0MUQucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItfqQwDQYJKoZIhvcNAQELBQADggEBACu+Bv5IqNm7lVCJ
LcRjdUU9tv9KbpG+oXaFmvidXwlGztOV+S1VOqW+CUGW+aWGTaIeYe2BRhU6uYvE
6SIdgdmM3CbMdacfW2/KtOZ61J7XsGwewOWcE74UldZVeBV63WOqkjhotpGf+wW4
1rcnyG1kVcq+VHvzATgMtrTvtJI3NryG0mLmxfu5uWnVESPH9+HP88emn1WtLAjc
9ML00JyfsAEPcf+yah59Ox+pvM+Rn2XuPs5QPikdQCNTP0uTYPE+luUjbDcmdT0i
Oxx+nSf0Mt4fOoq64I9yCJHQsEfztHMU6rVw4GjaTni9m4EIVlTXmIbwJUHTQWfu
z7Xrrc4=
-----END CERTIFICATE-----
Generated at Sat Dec 20 04:20:26 2025 by rpki-client