This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/A0454654BDD411F0A7E8443AC4F9AE02.roa
File:                     A0454654BDD411F0A7E8443AC4F9AE02.roa (raw, json)
Hash identifier:          Jiabvy3OMisNM5GgqkjfS6kn/xGNTzgJB34Y1DjTY/g=
Subject key identifier:   87:91:EF:7E:3C:C4:AE:C4:3F:0D:8C:9C:7B:02:D9:C6:EE:6D:77:D8
Certificate issuer:       /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
Certificate serial:       3E
Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/A0454654BDD411F0A7E8443AC4F9AE02.roa
Signing time:             Mon 10 Nov 2025 01:28:57 +0000
ROA not before:           Mon 10 Nov 2025 01:28:57 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     23532
IP address blocks:        163.227.202.0/24 maxlen: 24
                          163.227.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl
                          rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 05:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
        Validity
            Not Before: Nov 10 01:28:57 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69113fd9-49e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bd:f0:95:ef:b0:6a:4c:4a:ee:76:09:2f:59:
                    e8:83:1d:b7:be:62:fb:64:16:97:98:b0:3e:bb:56:
                    97:85:58:f5:51:60:49:45:62:78:d0:e0:16:01:6e:
                    08:07:7e:0c:1b:f8:60:93:76:97:21:d9:8f:59:4c:
                    bc:30:6c:fb:58:02:eb:17:af:12:f0:16:72:09:9f:
                    ef:b9:5b:f4:3d:00:55:60:d7:f5:39:f8:8f:e8:75:
                    b5:af:f1:e7:de:4a:18:2a:7e:df:ee:12:b1:4d:d9:
                    aa:33:8a:e0:44:9b:16:ff:33:fc:96:ad:d0:8c:7a:
                    0c:cb:d5:57:16:b2:a9:55:6b:d1:af:e6:09:84:19:
                    cd:fb:bb:0b:ab:85:ef:08:09:03:03:f1:b5:30:86:
                    83:bb:86:9c:6a:27:b4:01:43:77:f4:53:5c:40:c5:
                    b0:19:d7:97:94:54:a6:86:61:63:3e:83:77:45:ce:
                    10:9d:78:4f:1d:aa:a3:e7:c1:62:1f:ee:a3:06:7a:
                    cd:c6:0f:2b:77:f3:36:b7:7a:c1:1e:3d:6b:c1:a8:
                    78:61:ad:57:4f:8b:ea:fe:ac:6c:35:f1:ae:40:d2:
                    8c:07:d2:d4:76:78:bf:c0:2f:99:68:c0:e6:56:25:
                    fc:d6:25:b4:a9:0d:81:58:e6:d6:05:06:af:17:8b:
                    78:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:91:EF:7E:3C:C4:AE:C4:3F:0D:8C:9C:7B:02:D9:C6:EE:6D:77:D8
            X509v3 Authority Key Identifier:
                keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/A0454654BDD411F0A7E8443AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:31:f4:f7:be:92:51:a0:c7:73:87:8f:4b:57:7e:28:9b:be:
         79:89:d9:f6:08:12:7b:34:8e:42:5f:b5:9f:f7:8c:50:40:c2:
         75:72:1a:28:73:09:ca:fa:f5:28:5f:f8:8d:57:7c:3b:b5:2d:
         66:6b:74:43:ab:da:3d:27:71:fd:3f:9f:b3:45:5e:72:a8:0b:
         1f:b5:0c:ab:41:5b:ab:c5:8c:01:c4:01:a2:38:d4:a8:6b:c4:
         73:11:0d:71:ce:b0:4d:2d:37:0c:94:6f:b9:ca:eb:43:bf:51:
         8f:e5:95:a8:f9:2a:06:3c:32:a2:a2:d2:8e:5d:ff:71:36:57:
         2d:99:09:c7:a2:de:a1:f5:88:2d:43:35:1e:9b:30:fb:5a:81:
         7f:01:16:b8:c3:f4:65:cc:08:a3:8e:2c:cb:e8:47:33:20:40:
         b8:e3:bf:5d:4f:d6:0c:48:ce:da:09:78:e0:32:5f:55:68:89:
         06:06:33:11:20:6a:14:99:a3:69:37:49:9d:2f:89:d6:83:14:
         5c:e2:a0:14:ac:32:8f:9d:98:61:e4:b1:2e:d1:90:1a:93:d1:
         fc:86:a2:e8:13:e8:34:be:63:24:6b:8a:92:6e:ff:c6:7e:47:
         45:af:08:b1:cf:02:b4:e2:9e:9d:9b:d7:ce:3c:de:f8:73:ad:
         a5:8a:ae:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 29 08:49:18 2025 by rpki-client