This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/16083E10A95E11EEBC0A7E5BC4F9AE02.roa
File:                     16083E10A95E11EEBC0A7E5BC4F9AE02.roa (raw, json)
Hash identifier:          amqr6XOc8WGJeOSVJZCKADWGQThdq0cXOHfWqz7N/go=
Subject key identifier:   89:5D:91:08:FC:94:22:AB:97:D5:BE:28:C0:DC:EF:6B:46:8E:73:32
Certificate issuer:       /CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97
Certificate serial:       0186
Authority key identifier: 5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/16083E10A95E11EEBC0A7E5BC4F9AE02.roa
Signing time:             Sat 13 Dec 2025 03:22:37 +0000
ROA not before:           Sat 13 Dec 2025 03:22:36 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152137
IP address blocks:        210.79.182.0/23 maxlen: 23
                          210.79.182.0/24 maxlen: 24
                          210.79.183.0/24 maxlen: 24
                          2001:df3:3bc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl
                          rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B3F2, serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97
        Validity
            Not Before: Dec 13 03:22:36 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=693cdbfc-4933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b9:61:fb:b7:fe:83:67:b6:16:e7:30:ff:f4:
                    08:6f:a9:5d:ed:e3:2c:a0:16:da:cc:01:1a:98:6c:
                    18:22:0c:d6:bb:5c:c3:9c:95:20:0a:b9:c3:25:96:
                    d9:45:e8:18:6c:7a:01:bc:21:9c:2e:0e:79:18:4c:
                    6b:ea:f8:b2:a2:2d:80:b5:79:3e:29:a0:1c:da:62:
                    79:7c:b5:b4:d5:e0:18:50:14:7d:04:bb:80:da:6c:
                    ff:4e:eb:81:80:28:20:89:40:a9:03:52:25:9e:5d:
                    cc:5d:a7:04:a0:49:94:e3:ce:0b:ed:a7:dd:ea:cc:
                    eb:d1:6b:f8:64:a5:64:82:1f:95:37:09:fd:88:99:
                    98:52:fb:d8:b5:35:44:03:ba:11:b0:92:ab:3d:ca:
                    9a:0a:86:de:b9:65:af:09:b7:52:99:c4:6c:13:6c:
                    88:20:b1:a3:d1:c0:bf:33:58:1a:a3:cb:b8:43:6a:
                    e2:42:bf:fe:a4:de:cb:4b:2c:9a:89:82:14:86:f2:
                    3a:59:ee:67:5a:a7:4c:c0:6f:a3:2a:02:11:81:4b:
                    f1:2a:db:c4:66:2b:41:0e:06:61:3b:1e:90:68:d6:
                    99:ac:59:33:d0:3f:33:89:b8:f8:89:18:bc:bb:49:
                    1b:a5:70:d5:db:a5:fc:ab:13:d7:34:9f:6e:aa:dc:
                    95:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5D:91:08:FC:94:22:AB:97:D5:BE:28:C0:DC:EF:6B:46:8E:73:32
            X509v3 Authority Key Identifier:
                keyid:5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/16083E10A95E11EEBC0A7E5BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.182.0/23
                IPv6:
                  2001:df3:3bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:f3:bc:5c:35:93:3f:65:77:be:2d:f6:ee:3b:80:67:a9:c3:
         59:26:68:77:aa:a4:41:7a:6c:03:8b:52:c1:04:3f:38:b1:91:
         ba:fb:ae:72:3c:f7:bd:de:e2:7a:0b:e4:4d:91:b0:37:72:24:
         0b:85:9c:5c:fb:d0:1a:e0:62:21:f7:25:3c:a1:35:96:df:64:
         88:83:97:3d:47:be:9a:20:9f:da:e3:5c:f2:44:7f:43:e4:69:
         93:0a:11:6e:07:c6:48:bb:84:b0:94:84:eb:b6:48:6d:8a:7d:
         3d:61:e5:f8:4c:06:38:9c:a5:2a:76:a1:52:1b:cd:e4:81:c6:
         c0:32:bb:d3:d3:71:52:95:c6:4d:c3:47:0a:c6:a4:47:ad:37:
         16:f6:00:0f:c8:f2:2f:84:e7:3b:6a:37:0b:f8:3f:63:14:f3:
         42:f5:4a:c0:f9:e1:48:bc:ed:53:36:33:28:9f:35:5d:69:45:
         b0:cd:09:2d:50:f9:be:ed:73:43:d9:dd:dc:f6:bd:5e:a3:23:
         64:a4:bb:bb:a8:5c:11:0f:ec:af:4c:7b:99:b5:37:b0:56:70:
         a3:43:86:f4:6d:3e:9a:c4:23:3a:52:8e:0e:dd:75:26:9c:95:
         bd:d6:2b:57:0e:0a:e0:c6:7a:fa:5a:3c:57:4b:b5:a4:f1:16:
         20:1a:c7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 16:00:39 2025 by rpki-client