This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/FE9EA8D4B67A11EEB24FA643C4F9AE02.roa
File:                     FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (raw, json)
Hash identifier:          rlUj0HWvLYRWR8L5dccxDGpfDl0LUtE4Msb9H1/d8Ik=
Subject key identifier:   18:01:43:00:11:E5:FB:54:15:78:90:2E:7E:94:E4:A0:4D:0A:19:B3
Certificate issuer:       /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
Certificate serial:       0168
Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/FE9EA8D4B67A11EEB24FA643C4F9AE02.roa
Signing time:             Sat 13 Dec 2025 03:42:58 +0000
ROA not before:           Sat 13 Dec 2025 03:42:58 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152153
IP address blocks:        113.192.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl
                          rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB297, serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
        Validity
            Not Before: Dec 13 03:42:58 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=693ce0c2-4f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c2:4a:a5:25:3d:8a:76:9e:70:1f:c6:a4:57:
                    bc:24:e5:6d:73:b3:73:91:e4:95:a7:77:a9:8f:cb:
                    4b:92:7c:ee:07:a0:00:2f:13:f3:e8:92:f7:ba:9d:
                    b4:65:41:4e:e2:01:b0:73:43:7f:a3:d3:8d:ca:57:
                    1d:10:29:db:25:fb:4d:88:b0:2d:6e:5b:d3:fa:13:
                    e3:0d:85:c5:82:f2:ad:26:8d:ba:3f:f8:65:ec:78:
                    11:c6:0b:92:81:11:80:63:db:af:fc:0b:97:5d:91:
                    28:f8:91:7c:52:e0:53:3a:71:9b:f6:7e:c2:2f:e7:
                    88:ca:ef:e2:39:92:2e:e7:7a:46:dc:fe:3d:72:67:
                    7a:c1:ca:9d:6f:64:1c:75:a4:f5:54:98:28:0b:61:
                    be:7f:db:d8:83:b6:85:75:00:a9:32:c4:72:aa:78:
                    36:c1:10:25:ff:fa:ee:04:90:b6:b7:c0:be:50:41:
                    66:52:b8:69:41:c0:c6:d8:a4:33:86:22:d5:ba:47:
                    c8:95:b4:4d:10:45:68:4d:1b:f6:ac:1b:94:21:70:
                    12:2b:d1:d3:93:ad:2d:17:b6:84:6c:fa:ad:a4:0d:
                    27:c6:f0:3e:11:dd:83:c0:8a:aa:1e:8b:be:2e:68:
                    3f:53:7a:4a:5c:db:a8:06:b8:25:93:d6:55:f4:0d:
                    b4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:01:43:00:11:E5:FB:54:15:78:90:2E:7E:94:E4:A0:4D:0A:19:B3
            X509v3 Authority Key Identifier:
                keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/FE9EA8D4B67A11EEB24FA643C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:6e:9e:2c:b1:0e:68:ac:9b:9b:5f:1a:70:8c:b4:e9:c8:40:
         0d:cd:78:1f:05:62:d7:d4:b5:b5:0c:18:6c:06:48:fb:39:af:
         8a:b4:c5:13:f1:41:c6:34:36:e5:d2:84:d0:9f:c1:5e:e9:a9:
         97:b7:48:d2:a7:6b:9c:c8:cb:77:5b:8c:54:da:07:f9:18:ee:
         28:1e:35:1e:18:26:86:c1:29:da:ee:e9:9f:35:8a:d1:48:85:
         1d:6f:6a:ae:98:87:b6:bc:1e:d3:40:fa:5d:4b:64:c1:c5:a8:
         09:60:9b:f5:b8:7a:19:29:83:78:1b:8b:de:0a:8e:86:ab:e4:
         b8:b2:b0:55:19:fa:84:9a:90:9e:71:24:57:55:e0:35:b9:6f:
         61:7a:cc:b6:e1:d3:29:6f:18:d6:99:c3:93:63:ac:06:78:9c:
         9d:89:2b:91:34:fb:6b:68:ee:78:ad:ab:29:39:2b:77:a7:97:
         b5:a1:97:75:45:fe:80:7c:b3:99:0b:b2:9e:70:5a:9a:50:3d:
         ee:04:6c:c7:53:b8:6b:81:c4:78:f0:ea:74:e1:39:c2:30:76:
         07:06:72:79:a3:27:1c:25:4e:4d:93:6e:c8:98:7f:55:50:ce:
         06:71:d9:60:e1:d1:26:6b:f9:35:b2:1d:26:c0:ae:44:be:50:
         00:97:67:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:25:33 2025 by rpki-client