This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/A90B2F28B1F611EF86337B54C4F9AE02.roa
File:                     A90B2F28B1F611EF86337B54C4F9AE02.roa (raw, json)
Hash identifier:          fb7zJXwIpLbjMr1+hxkthka2hrtg0AKHHTn+qehCyi4=
Subject key identifier:   74:AC:82:09:D8:D1:7F:6F:35:52:37:AF:C5:C6:EC:3B:6A:ED:6E:59
Certificate issuer:       /CN=A913D756/serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762
Certificate serial:       C6
Authority key identifier: 6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/A90B2F28B1F611EF86337B54C4F9AE02.roa
Signing time:             Sat 13 Dec 2025 05:44:57 +0000
ROA not before:           Sat 13 Dec 2025 05:44:57 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     134801
IP address blocks:        160.250.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.crl
                          rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D756, serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762
        Validity
            Not Before: Dec 13 05:44:57 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=693cfd59-86d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:56:aa:bf:84:60:48:c9:ff:67:1a:8c:4f:40:
                    09:6c:95:26:2f:40:fb:d3:2a:76:19:0b:af:77:70:
                    8a:b0:6f:63:66:47:c9:b8:b1:14:9c:f6:21:0c:1d:
                    d4:d4:21:fe:00:04:4c:8e:3d:9d:e5:58:80:2c:44:
                    7c:ec:6a:cd:69:53:81:85:ae:9f:d6:aa:dd:cd:de:
                    d6:5e:34:c8:d8:45:63:de:60:79:ff:03:86:b7:83:
                    f5:1d:90:d2:34:78:5d:10:90:ce:39:61:5d:c4:38:
                    92:12:44:2a:b1:ac:02:b2:05:1a:55:28:d5:de:a8:
                    e9:59:57:4c:da:6f:cd:18:ca:54:44:f1:af:1e:6c:
                    41:d4:ac:33:36:ed:4d:c2:dd:64:b3:cd:9b:03:fe:
                    17:2b:fa:11:07:01:01:55:0d:01:e2:43:f2:5c:a9:
                    cd:c9:d6:b5:f1:63:e6:83:5c:e6:ea:f1:c3:d7:2f:
                    f2:d3:e9:bd:81:2b:06:85:5f:ca:ac:04:60:50:6c:
                    4b:38:6d:1b:5c:a3:2a:6a:b0:b7:d2:eb:b3:2f:5f:
                    3d:02:b1:70:c7:3c:2d:6d:27:21:40:e6:9c:82:0e:
                    b2:92:ae:43:81:4f:21:53:f9:aa:e3:fe:6d:3b:cc:
                    42:cb:dc:ae:3d:17:26:a0:99:90:75:46:16:3c:99:
                    6e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AC:82:09:D8:D1:7F:6F:35:52:37:AF:C5:C6:EC:3B:6A:ED:6E:59
            X509v3 Authority Key Identifier:
                keyid:6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/A90B2F28B1F611EF86337B54C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:3d:ea:44:46:a1:7f:87:0e:d7:21:24:ae:da:24:65:04:35:
         36:35:89:a8:07:49:f9:d5:3f:25:18:1d:91:62:ea:78:27:f8:
         8c:3d:19:15:54:a1:86:d4:ff:17:29:44:57:57:3f:fc:9f:c3:
         5a:66:b4:ca:cd:c5:52:09:5d:11:31:3f:ed:33:c0:b5:fd:95:
         98:e2:d6:24:69:c5:f1:13:e3:ef:cd:73:fe:08:0b:86:c4:7c:
         ea:60:0e:5e:b5:16:5b:cd:7b:74:dc:24:43:b0:1e:08:6a:ac:
         20:ca:ea:18:9b:d2:2c:e7:46:4e:58:de:91:70:d1:91:1e:f5:
         40:f9:36:f9:a4:f4:19:4a:a6:5f:69:a3:f2:f0:46:72:ec:0e:
         15:7b:10:1d:b0:6f:a2:f2:33:41:8a:37:82:f4:0f:9c:8b:63:
         52:f0:ad:4b:47:c9:e8:d6:9e:a2:86:02:72:d6:6b:95:2c:1d:
         3e:4e:c8:bc:f8:1a:5f:a8:a0:a5:ad:d2:34:ba:2a:8f:a2:12:
         8e:40:fb:da:0a:aa:e9:8f:2f:36:b7:6c:88:77:1a:16:dc:10:
         61:e9:d0:49:1f:af:f4:9a:2a:a6:3b:0e:b3:62:25:9b:6e:11:
         b3:89:07:36:67:a1:c1:7f:a2:43:4c:b0:0c:04:36:12:49:69:
         99:fe:b2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 23:01:05 2025 by rpki-client