This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/D835294EC68F11F0AE9F096DC4F9AE02.roa
File:                     D835294EC68F11F0AE9F096DC4F9AE02.roa (raw, json)
Hash identifier:          geqWTDV3zO8R+8hc3hK4Yha0O+IwomnkXW9VrxlDCwo=
Subject key identifier:   9F:16:8C:2C:B0:98:9D:79:6C:74:70:26:6B:8F:86:BE:BF:1B:23:DE
Certificate issuer:       /CN=A913BE1E/serialNumber=17393F20D13130F9544FE8EC1BB0F7E8805E824E
Certificate serial:       03
Authority key identifier: 17:39:3F:20:D1:31:30:F9:54:4F:E8:EC:1B:B0:F7:E8:80:5E:82:4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fzk_INExMPlUT-jsG7D36IBegk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/D835294EC68F11F0AE9F096DC4F9AE02.roa
Signing time:             Fri 21 Nov 2025 04:09:16 +0000
ROA not before:           Fri 21 Nov 2025 04:09:16 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139330
IP address blocks:        144.79.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/Fzk_INExMPlUT-jsG7D36IBegk4.crl
                          rsync://rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/Fzk_INExMPlUT-jsG7D36IBegk4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fzk_INExMPlUT-jsG7D36IBegk4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 06:12:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BE1E, serialNumber=17393F20D13130F9544FE8EC1BB0F7E8805E824E
        Validity
            Not Before: Nov 21 04:09:16 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=691fe5ec-c255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:e6:78:10:f9:a5:11:9a:a1:f9:f5:79:7f:
                    ed:e4:9e:20:1b:b6:fa:3a:a8:61:eb:99:fd:a9:8a:
                    e1:f2:40:f0:b6:ff:6b:e9:ac:6f:4d:e1:d4:cb:10:
                    55:c1:21:05:e3:7a:7b:05:fa:c4:43:97:24:a0:30:
                    be:47:e0:ee:04:07:fa:c5:4b:70:a2:e2:19:77:93:
                    61:62:a2:f3:f2:b3:91:38:64:9f:12:e0:85:87:4d:
                    36:b8:96:08:69:b7:87:7c:77:ce:09:9d:a7:9e:98:
                    83:04:70:db:14:88:23:ea:70:6a:a1:39:98:79:e5:
                    2d:0f:ad:35:ed:23:eb:6f:85:9d:82:0a:b3:cf:4d:
                    80:88:e8:18:e5:02:bb:33:0a:81:d4:c8:56:af:2b:
                    66:ec:e2:42:5a:28:ec:05:3f:d5:85:d0:8f:74:26:
                    51:35:40:df:8b:6c:6b:d8:f2:c0:77:1f:3e:3d:e9:
                    c3:b6:73:ee:56:23:a9:f0:29:2c:56:7d:6b:39:f1:
                    33:fd:48:76:8c:8b:59:f9:98:5a:93:6b:70:87:28:
                    47:cb:47:ce:bd:d7:5f:8d:5a:f7:ef:29:d7:4c:a9:
                    2e:bc:20:b4:3c:64:09:88:cd:6f:20:15:a6:ce:30:
                    68:b0:ad:51:44:cc:ba:6f:41:1f:32:0d:ce:71:f6:
                    15:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:16:8C:2C:B0:98:9D:79:6C:74:70:26:6B:8F:86:BE:BF:1B:23:DE
            X509v3 Authority Key Identifier:
                keyid:17:39:3F:20:D1:31:30:F9:54:4F:E8:EC:1B:B0:F7:E8:80:5E:82:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/Fzk_INExMPlUT-jsG7D36IBegk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fzk_INExMPlUT-jsG7D36IBegk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/D835294EC68F11F0AE9F096DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:06:5c:34:9f:00:7b:11:c7:d0:58:46:08:ab:eb:bc:d4:22:
         8c:e5:ee:9a:f9:ba:6d:26:68:da:53:22:3f:cc:d4:56:42:bd:
         09:41:e1:22:1a:bf:ed:ed:f5:5e:bd:cb:0d:1e:15:39:13:b2:
         73:47:16:85:ce:17:c5:df:6c:bf:2c:dc:d7:06:aa:e0:02:56:
         c9:da:6b:8d:03:1f:03:a1:de:78:7f:80:fc:77:c9:07:7d:66:
         16:99:75:97:e7:46:00:da:7c:af:1e:e4:07:ff:7d:53:24:90:
         5f:e6:28:43:71:e0:fa:d3:a0:50:b4:52:7d:82:5c:5b:56:44:
         49:30:c8:93:38:99:eb:ca:50:d8:84:69:f1:f3:ba:54:e5:19:
         74:6d:35:5d:d3:ef:c9:04:7d:d6:27:b6:e7:14:25:02:cd:22:
         07:32:b6:4a:88:1e:8a:27:39:25:77:db:0e:0d:92:c7:bf:28:
         11:69:aa:6f:51:c6:f8:8d:dc:48:22:25:b5:fb:a2:0c:7b:8f:
         4c:d6:ff:3f:5d:9b:1d:1c:38:65:d3:84:5c:9a:41:a8:84:a3:
         c2:5c:65:f3:47:b4:d8:ca:54:53:c3:70:05:ac:98:53:03:f5:
         b0:49:74:6b:33:cc:15:56:c9:ee:37:d7:6c:0d:01:dd:43:c8:
         81:9b:bc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:05:06 2025 by rpki-client