This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/A0C50F92BDD411F08AA8443AC4F9AE02.roa
File:                     A0C50F92BDD411F08AA8443AC4F9AE02.roa (raw, json)
Hash identifier:          KEMH/vKSPcAkV3P1pUdnSj1om5WSjvDW91I/czL5aFo=
Subject key identifier:   6D:F1:14:FA:EB:48:3D:C8:AC:B1:4B:B8:47:56:43:B3:CA:0D:29:64
Certificate issuer:       /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
Certificate serial:       3F
Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/A0C50F92BDD411F08AA8443AC4F9AE02.roa
Signing time:             Mon 10 Nov 2025 01:28:58 +0000
ROA not before:           Mon 10 Nov 2025 01:28:58 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     400342
IP address blocks:        163.227.202.0/24 maxlen: 24
                          163.227.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl
                          rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 05:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
        Validity
            Not Before: Nov 10 01:28:58 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69113fd9-b62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:da:7f:00:52:be:14:cb:59:04:b8:fb:6c:5f:
                    68:29:f2:50:a5:6a:e8:7b:fd:77:4d:a9:99:63:34:
                    bc:d2:18:0d:8d:67:c2:d7:6f:de:3e:f1:4f:34:ac:
                    5a:1b:c9:15:8e:4e:c4:3c:68:df:4b:7e:28:95:f5:
                    a1:83:b7:56:9b:1c:8c:15:b4:c7:fa:6c:7b:ab:72:
                    93:e5:26:c6:8b:3b:7e:1c:ee:61:da:05:d8:a5:39:
                    cc:6e:36:8f:29:37:e9:2e:7d:68:36:40:5e:93:60:
                    74:ff:16:2f:f3:6f:ae:69:30:8a:1d:98:27:cf:f6:
                    d2:fd:2e:5c:35:9d:08:d1:16:13:17:5c:31:fd:e6:
                    4f:bc:f4:ab:e5:d3:36:17:08:a7:54:12:e0:3a:3d:
                    a2:97:7b:9a:68:9f:c2:c2:b8:3f:18:49:39:ae:64:
                    bd:9a:e2:cc:70:32:19:0c:34:0c:d2:ad:9e:c9:bc:
                    6e:bb:ec:7a:e5:8d:55:d5:5b:e6:25:5c:fe:99:00:
                    b0:3a:a8:14:04:4e:76:8c:c6:c3:c4:48:d4:e5:49:
                    c4:87:f8:3f:e3:a6:12:c9:f3:91:bc:0c:07:9b:ae:
                    f5:28:e7:e2:62:41:ea:07:34:ba:b8:83:15:dc:da:
                    32:69:c1:57:6e:bb:f4:43:b0:c3:7d:4c:ef:d3:8f:
                    4e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F1:14:FA:EB:48:3D:C8:AC:B1:4B:B8:47:56:43:B3:CA:0D:29:64
            X509v3 Authority Key Identifier:
                keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/A0C50F92BDD411F08AA8443AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:39:79:eb:57:1e:78:40:4e:85:03:75:04:eb:5f:ea:af:7e:
         35:df:94:f1:ad:43:ae:de:61:b2:3d:5f:3a:ec:74:a1:9a:b1:
         65:f3:6d:57:7f:36:1f:29:a1:21:39:be:f9:ab:2f:31:b2:3c:
         17:17:08:dd:df:2d:0b:d0:8f:c6:bf:36:ef:e7:9e:1f:7a:77:
         67:1a:3b:8f:1f:25:11:42:f7:be:cd:b3:31:de:1f:a2:30:23:
         d8:58:7f:7f:85:80:59:d2:6b:4f:e4:8e:da:2e:96:ee:e2:de:
         e6:a3:62:f2:8b:da:13:1b:ff:45:0b:fd:9b:f2:39:f2:5b:0e:
         13:a9:44:2c:a4:7e:c7:25:d3:a0:9a:24:f8:33:79:7b:63:50:
         48:44:6e:3d:11:ad:5f:86:52:d2:7a:a4:3b:ff:e6:78:aa:55:
         16:d1:bd:05:2d:36:6e:8a:94:7b:9a:a9:cf:d5:f2:83:dd:d6:
         65:bd:2d:a0:b7:3c:70:c2:ee:b7:eb:4f:a3:be:71:53:82:b4:
         82:ce:69:1a:71:bf:f7:cd:1b:08:57:2e:18:bb:e0:ea:d8:f8:
         37:53:62:d0:fb:a9:c7:a1:4b:5b:cd:be:35:c1:7a:19:d0:d4:
         f7:e6:a9:83:18:f7:45:8b:83:d9:09:b7:ec:90:02:0e:aa:aa:
         fa:3f:d0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 29 10:20:06 2025 by rpki-client