This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/B842F0DEDB8A11F09F03163163D3641D.roa
File:                     B842F0DEDB8A11F09F03163163D3641D.roa (raw, json)
Hash identifier:          JGz5WHxSiGo2NezrsRmUtUqb7dJlWfvDQnUgMLs5HYw=
Subject key identifier:   BE:52:64:A8:97:60:5F:A4:20:25:E1:1D:96:04:D6:2C:6C:A1:95:53
Certificate issuer:       /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Certificate serial:       1DDC
Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/B842F0DEDB8A11F09F03163163D3641D.roa
Signing time:             Wed 17 Dec 2025 20:55:29 +0000
ROA not before:           Wed 17 Dec 2025 20:55:29 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        45.126.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 16:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7644 (0x1ddc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C16B5, serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
        Validity
            Not Before: Dec 17 20:55:29 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=694318c1-8a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:26:26:cd:32:62:b8:73:47:94:47:17:a1:
                    f6:9b:a3:24:26:7d:94:3e:bc:82:e4:e6:92:19:2b:
                    23:8b:25:34:64:b4:3d:8e:96:66:b0:a0:90:c8:b5:
                    9a:8a:af:83:15:59:fd:b1:e9:26:ad:19:57:d1:37:
                    46:8d:0b:84:26:42:2a:32:0b:22:4d:ed:85:e7:16:
                    7e:47:da:75:d2:0d:f8:81:b3:2a:fe:89:80:00:92:
                    0c:a3:46:0f:30:8c:2c:9b:ea:42:6c:5b:d3:bb:1b:
                    64:bd:80:d1:d6:69:80:0a:8f:fa:07:37:c7:83:37:
                    45:84:08:5b:42:60:95:d2:5a:70:b9:9d:2f:49:fd:
                    93:db:9b:50:0d:62:f6:b4:e7:9b:31:f9:6e:d8:7c:
                    e6:b2:6f:e4:8c:22:71:c4:aa:72:0c:ec:f8:43:5d:
                    41:df:e3:9c:32:31:48:ba:a1:f4:42:ed:fe:2b:ce:
                    0b:09:7b:cd:a6:e4:f1:ea:78:5d:0b:2e:2c:ba:d3:
                    77:3c:b0:36:9c:06:2e:d1:68:01:19:11:39:25:63:
                    ca:15:43:1f:ed:8d:e0:c3:45:bd:72:f4:d7:7f:c8:
                    a9:04:13:e9:db:3f:ea:bf:54:e6:e6:25:18:4b:fd:
                    54:30:c2:23:7a:2c:19:b8:89:62:7f:00:7a:4b:ef:
                    b4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:52:64:A8:97:60:5F:A4:20:25:E1:1D:96:04:D6:2C:6C:A1:95:53
            X509v3 Authority Key Identifier:
                keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/B842F0DEDB8A11F09F03163163D3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:be:e3:0d:a8:53:79:91:21:c1:f6:a5:f8:b3:e3:50:96:3a:
         12:94:f7:0b:c9:b3:34:15:0a:02:3f:a6:86:9d:df:57:21:b2:
         d5:a9:23:c6:12:7d:a3:a6:c4:a8:c1:66:c9:fa:4b:61:3b:f0:
         20:97:73:4d:e5:20:d2:fb:d0:ea:c5:c4:02:23:e0:10:4b:a2:
         e8:8c:08:cc:7e:85:46:7a:71:55:92:68:1e:ad:e2:79:d4:63:
         3d:a8:51:85:c2:fe:a3:65:9e:91:45:ad:8b:d3:73:7a:69:4d:
         83:aa:8b:03:09:80:86:58:05:85:d6:1e:b1:98:6a:c6:f6:d7:
         1f:86:42:98:51:b9:51:ce:34:de:c3:30:01:00:8a:fe:24:2f:
         cb:11:d4:85:82:d3:be:b7:f8:e6:6a:60:7a:13:5c:e9:be:c0:
         f6:93:12:84:0e:5c:86:49:fa:df:5b:6a:42:a9:e1:fc:89:3a:
         a4:26:10:c3:9c:78:21:dd:da:bf:b7:70:12:36:bc:0e:34:6b:
         84:0f:72:4d:33:0c:04:52:f6:8a:50:25:e9:23:0c:51:96:b3:
         27:35:5d:0b:2e:f8:96:8b:bd:c0:8f:20:08:4d:66:58:b5:51:
         2d:af:ad:a6:6e:e1:a6:ea:f3:73:29:cc:26:74:89:f8:fe:ed:
         19:8c:a3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:20:06 2025 by rpki-client