This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/1519FB12F8B611EF91DD795BC4F9AE02.roa
File:                     1519FB12F8B611EF91DD795BC4F9AE02.roa (raw, json)
Hash identifier:          eDZoNBLuQcw3Wn1rO/220lw34J3dfQJ4no+D+vY9xGU=
Subject key identifier:   80:B0:7B:6D:75:3D:ED:5B:5F:54:44:C6:F4:B6:24:C5:CD:7B:5D:29
Certificate issuer:       /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial:       03DC
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/1519FB12F8B611EF91DD795BC4F9AE02.roa
Signing time:             Tue 02 Dec 2025 23:59:10 +0000
ROA not before:           Tue 02 Dec 2025 23:59:10 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     153645
IP address blocks:        116.193.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 23:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 988 (0x3dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
        Validity
            Not Before: Dec  2 23:59:10 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692f7d4d-6ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:23:94:2a:c7:2f:42:1f:1e:88:42:58:2a:fa:
                    37:e1:42:d5:c6:0f:83:59:c0:45:9a:f5:a3:55:57:
                    12:2a:dc:e1:c9:cc:6e:bc:ab:4b:97:b8:80:a0:53:
                    f6:9c:90:4a:b6:9e:47:ff:93:34:10:e5:9f:f4:b8:
                    21:90:ce:02:ef:61:f2:7b:b2:70:ba:e7:c4:fd:f4:
                    57:28:b6:fa:96:91:49:f2:5e:30:66:f3:80:28:6d:
                    88:d1:b5:ac:eb:32:7d:65:92:6e:18:62:4e:4d:d9:
                    6d:43:c7:1e:a1:de:49:27:7c:be:c2:4c:d3:c4:fc:
                    21:96:98:7c:6d:83:5f:12:01:dd:72:ce:59:7e:6a:
                    4e:a7:b9:ca:f3:79:ab:52:b7:71:5b:af:a0:6d:71:
                    b1:f0:c6:e8:3b:bb:9c:94:e8:b7:3b:77:73:73:5f:
                    c6:58:68:21:78:27:4f:78:1e:de:3c:4a:c2:c8:c2:
                    4d:15:c7:fb:28:60:13:0b:bd:90:c3:68:9d:c0:3c:
                    06:e6:82:7d:ff:d1:02:f8:ae:6e:8f:07:5b:56:3a:
                    82:e2:f6:d5:07:9b:d2:49:4d:b4:80:6e:b1:4a:4e:
                    9f:43:5f:91:b4:fd:5e:a1:9c:af:53:68:43:c1:2c:
                    49:a1:41:48:01:bf:c5:ed:45:89:55:1b:85:88:3a:
                    46:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B0:7B:6D:75:3D:ED:5B:5F:54:44:C6:F4:B6:24:C5:CD:7B:5D:29
            X509v3 Authority Key Identifier:
                keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/1519FB12F8B611EF91DD795BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.193.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:c1:fe:ad:3a:99:9f:39:81:44:8e:aa:f9:a0:8a:5d:8e:02:
         de:c2:81:c6:df:58:45:94:ed:5d:be:0a:d3:f4:a0:f1:07:fc:
         06:cd:fa:81:6b:46:d9:48:f7:e6:c3:64:93:b8:73:fb:e8:5f:
         26:ee:67:4e:28:ee:14:7d:e5:64:4b:6a:5f:cb:94:8f:58:e6:
         87:43:50:51:93:c0:7a:28:dc:a6:a5:52:39:ed:01:99:28:0d:
         ae:52:43:8f:97:ca:fd:e5:2c:02:2e:48:eb:4a:c8:6b:2e:b5:
         4a:4c:a1:a0:2c:fe:79:cf:a0:4a:a4:b8:e6:3e:93:30:b1:a8:
         61:af:df:ae:db:b2:05:e9:e1:c7:d3:f7:c4:15:6f:d0:80:dd:
         58:f8:42:37:a2:31:41:ee:37:6e:fc:36:a7:d3:7a:76:91:4b:
         45:33:5d:e6:9b:57:c5:22:74:b5:48:66:14:a9:25:6e:7c:ac:
         91:df:26:09:a6:e2:07:f5:59:89:50:64:ca:ba:2e:61:f7:65:
         2a:a0:5f:4c:6a:39:d6:2f:16:08:17:83:2c:bf:49:2c:d3:e9:
         8e:70:50:e3:18:21:39:5d:a8:16:e6:4d:02:b5:d9:74:78:49:
         6a:6e:2a:35:03:1f:fe:4f:c5:92:3f:eb:65:29:5d:cd:7e:69:
         1b:c8:92:48
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG
NUMyMDE1NzAwHhcNMjUxMjAyMjM1OTEwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTJmN2Q0ZC02ZWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvyOUKscvQh8eiEJYKvo34ULVxg+DWcBFmvWjVVcSKtzhycxuvKtLl7iAoFP2
nJBKtp5H/5M0EOWf9LghkM4C72Hye7JwuufE/fRXKLb6lpFJ8l4wZvOAKG2I0bWs
6zJ9ZZJuGGJOTdltQ8ceod5JJ3y+wkzTxPwhlph8bYNfEgHdcs5ZfmpOp7nK83mr
UrdxW6+gbXGx8MboO7uclOi3O3dzc1/GWGgheCdPeB7ePErCyMJNFcf7KGATC72Q
w2idwDwG5oJ9/9EC+K5ujwdbVjqC4vbVB5vSSU20gG6xSk6fQ1+RtP1eoZyvU2hD
wSxJoUFIAb/F7UWJVRuFiDpGlQIDAQABo4IClTCCApEwHQYDVR0OBBYEFICwe211
Pe1bX1RExvS2JMXNe10pMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC
OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvMTUxOUZCMTJG
OEI2MTFFRjkxREQ3OTVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB0wZUwDQYJKoZIhvcNAQELBQADggEBAGbB/q06mZ85gUSO
qvmgil2OAt7CgcbfWEWU7V2+CtP0oPEH/AbN+oFrRtlI9+bDZJO4c/voXybuZ04o
7hR95WRLal/LlI9Y5odDUFGTwHoo3KalUjntAZkoDa5SQ4+Xyv3lLAIuSOtKyGsu
tUpMoaAs/nnPoEqkuOY+kzCxqGGv367bsgXp4cfT98QVb9CA3Vj4QjeiMUHuN278
NqfTenaRS0UzXeabV8UidLVIZhSpJW58rJHfJgmm4gf1WYlQZMq6LmH3ZSqgX0xq
OdYvFggXgyy/SSzT6Y5wUOMYITldqBbmTQK12XR4SWpuKjUDH/5PxZI/62UpXc1+
aRvIkkg=
-----END CERTIFICATE-----
Generated at Wed Dec 10 16:10:23 2025 by rpki-client