This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/06093D68DC1311F09341A9F45E6F56BC.roa
File:                     06093D68DC1311F09341A9F45E6F56BC.roa (raw, json)
Hash identifier:          ecuT0IGX2EMVTv9PMGbYKsjJSoNnc8HRgFbpWMYTJo0=
Subject key identifier:   BC:75:CA:DC:D9:A3:8C:E3:E3:FA:24:27:76:21:3C:D9:97:A0:C8:DE
Certificate issuer:       /CN=A913E8F3/serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
Certificate serial:       1066
Authority key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/06093D68DC1311F09341A9F45E6F56BC.roa
Signing time:             Thu 18 Dec 2025 13:11:11 +0000
ROA not before:           Thu 18 Dec 2025 13:11:11 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     58521
IP address blocks:        143.92.112.0/21 maxlen: 21
                          143.92.112.0/22 maxlen: 22
                          143.92.112.0/23 maxlen: 23
                          143.92.112.0/24 maxlen: 24
                          143.92.113.0/24 maxlen: 24
                          143.92.114.0/24 maxlen: 24
                          143.92.115.0/24 maxlen: 24
                          143.92.116.0/24 maxlen: 24
                          143.92.117.0/24 maxlen: 24
                          143.92.118.0/24 maxlen: 24
                          143.92.119.0/24 maxlen: 24
                          143.92.120.0/22 maxlen: 22
                          143.92.120.0/24 maxlen: 24
                          143.92.121.0/24 maxlen: 24
                          143.92.122.0/24 maxlen: 24
                          143.92.123.0/24 maxlen: 24
                          143.92.124.0/22 maxlen: 24
                          148.222.64.0/22 maxlen: 22
                          148.222.64.0/24 maxlen: 24
                          148.222.65.0/24 maxlen: 24
                          148.222.66.0/23 maxlen: 23
                          148.222.66.0/24 maxlen: 24
                          148.222.67.0/24 maxlen: 24
                          148.222.68.0/22 maxlen: 22
                          148.222.68.0/24 maxlen: 24
                          148.222.69.0/24 maxlen: 24
                          148.222.70.0/24 maxlen: 24
                          148.222.71.0/24 maxlen: 24
                          148.222.72.0/22 maxlen: 22
                          148.222.72.0/24 maxlen: 24
                          148.222.73.0/24 maxlen: 24
                          148.222.74.0/24 maxlen: 24
                          148.222.75.0/24 maxlen: 24
                          148.222.76.0/22 maxlen: 22
                          148.222.76.0/24 maxlen: 24
                          148.222.77.0/24 maxlen: 24
                          148.222.78.0/24 maxlen: 24
                          148.222.79.0/24 maxlen: 24
                          148.222.84.0/22 maxlen: 22
                          148.222.84.0/24 maxlen: 24
                          148.222.85.0/24 maxlen: 24
                          148.222.86.0/24 maxlen: 24
                          148.222.87.0/24 maxlen: 24
                          148.222.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl
                          rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4198 (0x1066)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
        Validity
            Not Before: Dec 18 13:11:11 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6943fd6f-62a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:8a:c4:a0:a6:43:a3:7b:91:dd:2f:98:e3:
                    3b:e3:5f:0a:fc:4c:d0:18:1c:38:e0:01:e9:53:0c:
                    17:56:af:0d:01:fb:bf:69:42:1e:37:e9:2b:1e:11:
                    24:29:26:c7:7f:f5:4d:91:2c:f7:db:a7:ae:f0:e0:
                    22:06:1b:3b:03:2a:bf:c5:f9:8a:8a:2a:1b:01:1c:
                    e8:a2:39:06:e9:29:8f:9c:4b:94:e4:54:a9:d8:b8:
                    1b:43:d8:06:ec:ed:42:ff:9a:d3:18:5f:98:f4:54:
                    20:5a:6a:bb:9f:76:5c:b8:bb:a0:78:59:86:9f:df:
                    26:92:a2:42:d9:a7:05:dd:db:c5:9c:7d:a4:1c:5c:
                    74:66:c3:79:15:ce:9f:10:03:d6:b4:07:87:f2:be:
                    24:a6:30:00:56:f9:4f:d4:b7:fb:75:88:b6:af:57:
                    4a:6f:91:a4:71:bf:c7:3a:1f:cc:14:c5:29:6a:fb:
                    a0:a3:9b:90:60:ad:bb:77:bd:1a:51:33:64:e4:be:
                    bd:a2:25:fb:41:25:57:a1:06:a5:53:af:48:3e:42:
                    d9:76:c9:d3:ef:64:77:b2:2b:f3:f0:24:38:ba:09:
                    63:2c:04:7a:96:9a:97:48:0f:bd:e6:35:3d:a1:98:
                    0d:88:ed:8f:e7:f8:69:06:d6:8a:1a:e5:ed:0f:42:
                    af:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:75:CA:DC:D9:A3:8C:E3:E3:FA:24:27:76:21:3C:D9:97:A0:C8:DE
            X509v3 Authority Key Identifier:
                keyid:F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/06093D68DC1311F09341A9F45E6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.92.112.0/20
                  148.222.64.0/20
                  148.222.84.0/22
                  148.222.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:4e:0c:31:ef:d0:01:c2:4f:16:63:c8:7f:e7:c9:a0:db:4f:
         10:7e:17:d4:04:b6:f9:06:db:82:cc:9e:ec:c7:a0:d3:80:e2:
         db:0c:09:08:13:7d:02:7c:a3:ce:39:00:dc:9b:71:57:67:18:
         31:c2:86:34:2c:c5:38:2a:c1:74:24:bf:55:71:27:b2:c8:08:
         ee:d9:4a:ff:81:bf:fc:70:29:4b:c3:9f:ae:a7:b0:de:46:a8:
         27:1d:b0:f4:78:7d:29:38:65:43:98:6a:a0:2c:6a:4e:51:a5:
         f4:30:9b:e1:98:22:56:d8:6b:40:08:1f:b3:3f:cf:b0:d4:eb:
         6e:ef:fa:25:72:a3:7d:fb:a2:46:93:27:e7:de:3d:5c:1a:bb:
         90:18:62:42:6b:05:1e:b7:f2:d9:14:79:15:d8:de:37:c5:f1:
         85:ae:0a:3c:29:89:68:f0:69:0d:11:c5:ea:11:e9:df:23:ef:
         56:a4:82:26:68:7f:5f:ef:c6:be:2b:c3:e1:89:9b:8a:34:1d:
         64:78:f4:9b:ea:0f:11:a1:19:04:3c:18:2d:99:6f:50:8c:ab:
         bd:d9:9f:ea:c4:2e:66:a7:24:29:d1:3f:12:e2:4e:43:89:11:
         f2:a5:5c:3d:6a:5c:fc:8c:eb:60:dc:73:c1:72:46:6d:ba:8b:
         2c:3a:39:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:14:17 2025 by rpki-client