This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/751E0734D06911F0A789BB44C4F9AE02.roa
File:                     751E0734D06911F0A789BB44C4F9AE02.roa (raw, json)
Hash identifier:          UhXJLAHokVCI0k+DjjmBHGcMcgUilly93pv811k5onQ=
Subject key identifier:   34:70:63:78:12:55:6A:5B:54:12:98:26:83:DA:6B:05:22:F9:CC:42
Certificate issuer:       /CN=A91100B2/serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Certificate serial:       50
Authority key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/751E0734D06911F0A789BB44C4F9AE02.roa
Signing time:             Wed 03 Dec 2025 16:59:40 +0000
ROA not before:           Wed 03 Dec 2025 16:59:40 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138542
IP address blocks:        79.109.240.0/21 maxlen: 21
                          79.109.240.0/22 maxlen: 22
                          79.109.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
        Validity
            Not Before: Dec  3 16:59:40 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69306c7c-2d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:ac:b8:3f:69:95:f9:25:ef:63:bb:d2:1c:
                    56:e7:04:14:0f:80:00:e0:9f:60:94:3c:8d:8b:01:
                    f8:04:8c:37:41:48:95:89:83:ea:5e:15:12:29:2f:
                    d6:62:6a:1d:1d:83:d4:ef:fa:4b:f7:74:79:9b:c4:
                    c8:1d:19:9a:35:85:4b:35:05:d5:3a:fd:ba:6f:d8:
                    d7:1a:6b:c3:4b:42:dc:7e:91:fe:37:ca:1a:89:bf:
                    6f:81:d8:76:58:0d:b3:9b:ab:31:8f:ca:66:e6:0b:
                    4d:5b:a9:53:89:39:8f:b9:63:7a:18:b7:5d:5e:3f:
                    23:98:1c:0b:f1:d9:67:e1:03:72:64:2b:69:d3:25:
                    df:f5:f1:8b:97:49:07:57:58:c9:0a:36:4d:36:aa:
                    8d:04:31:13:9d:18:3d:a2:22:e4:08:a6:d1:e6:69:
                    3a:e6:23:33:3d:1f:47:e0:bd:13:92:15:c9:a0:86:
                    c1:b4:37:77:85:46:bd:ba:60:d9:9d:d0:30:2c:29:
                    56:14:70:0a:7e:9f:c5:9c:a8:89:f0:99:fd:1c:79:
                    11:21:80:a7:9c:0b:b2:27:39:b9:ca:97:83:cc:ab:
                    db:92:f8:cd:84:3a:10:7f:1e:c7:6f:03:32:aa:fe:
                    fb:5a:2e:9a:05:3d:df:bf:c7:14:7b:bd:5e:e8:20:
                    59:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:70:63:78:12:55:6A:5B:54:12:98:26:83:DA:6B:05:22:F9:CC:42
            X509v3 Authority Key Identifier:
                keyid:BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/751E0734D06911F0A789BB44C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.109.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ab:56:40:e0:15:c2:ea:23:6a:bd:e2:2a:2a:e3:b0:90:a7:df:
         c2:c8:a0:bb:31:e9:ef:51:7d:47:8b:16:89:9b:2b:3a:49:7a:
         f9:91:44:b7:f5:21:8b:a5:56:3f:52:d5:cf:5d:ff:15:26:1a:
         05:33:da:bf:8d:bd:b4:b4:81:58:91:2f:4d:1c:db:28:fe:16:
         8b:14:be:45:d5:ee:1f:7e:94:34:0d:9d:2b:1f:2f:6b:6b:14:
         54:1b:f5:cf:e9:39:bf:c7:1e:4c:ee:d2:25:cb:b8:a1:00:63:
         3f:46:81:c5:d7:73:b8:73:58:e4:b7:73:b4:c3:86:d5:dd:d2:
         18:71:87:f8:cb:71:1d:f3:71:aa:1c:c6:ab:bf:2b:81:dc:06:
         5f:8e:9d:f0:76:db:85:06:93:f7:d2:8d:6f:f4:b2:ab:7b:31:
         be:be:29:92:b2:9c:b5:b5:d8:0b:c0:ac:5e:85:4f:fb:b7:ce:
         5c:b9:40:14:45:6d:f6:6e:11:cb:6d:27:f8:9a:5b:e9:9c:37:
         89:9b:84:44:66:7d:c6:b5:01:61:f5:1f:e6:54:dc:e8:41:74:
         8d:d0:a3:e1:69:e3:4c:86:af:b5:52:27:30:4e:5c:ed:d2:98:
         69:90:83:25:ec:60:f0:03:dc:5a:82:07:f8:ba:52:91:1e:30:
         e0:0e:ea:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:46:37 2025 by rpki-client