This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/9B22AC1269F611EFA7665A51C4F9AE02.roa
File:                     9B22AC1269F611EFA7665A51C4F9AE02.roa (raw, json)
Hash identifier:          KhTZGp8krCmWIeV1MjnilFIIicvKTA9kclTUkxcftdk=
Subject key identifier:   F5:F7:E6:9B:FB:41:D4:7F:CE:B7:77:5D:92:F4:16:0B:D4:28:CD:12
Certificate issuer:       /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
Certificate serial:       DD
Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/9B22AC1269F611EFA7665A51C4F9AE02.roa
Signing time:             Sat 25 Oct 2025 09:49:35 +0000
ROA not before:           Sat 25 Oct 2025 09:49:35 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     147302
IP address blocks:        160.30.236.0/24 maxlen: 24
                          160.30.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl
                          rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 03:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
        Validity
            Not Before: Oct 25 09:49:35 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68fc9d2e-935c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:ee:47:96:84:d4:78:1e:c6:dd:6b:e4:ea:
                    08:ef:da:bd:72:bb:df:3e:79:81:99:c3:e1:97:12:
                    e8:e7:86:50:1e:a0:94:f8:12:67:70:01:77:80:a8:
                    2f:1c:34:c1:94:cd:9b:c7:67:77:54:05:a9:a8:5e:
                    8e:c9:89:a3:aa:0c:df:e7:81:c2:52:ae:03:c8:06:
                    34:3b:13:87:53:bc:50:61:9f:d4:1c:1b:fc:c7:a3:
                    f1:ef:00:aa:57:fe:1e:83:fe:bc:53:ee:cf:72:98:
                    d5:10:40:8c:fd:5b:21:96:ed:94:64:fd:ca:d5:b7:
                    b1:7a:ba:8b:12:d6:53:b8:b5:c4:be:ca:9f:4d:7d:
                    69:a5:34:13:1d:96:dd:16:bd:5e:8f:ac:cb:05:37:
                    4d:32:f2:28:06:dd:dc:5b:c9:4b:09:e8:38:5e:0f:
                    4e:7a:c1:6c:28:dd:fe:ad:ef:94:20:a7:45:d8:b7:
                    48:ca:29:a8:12:22:73:04:f4:56:e6:9c:ea:fc:05:
                    e0:36:f0:b4:65:f6:2e:f0:71:01:50:e1:a5:37:5f:
                    05:fc:4e:05:cc:c4:5a:7e:b8:ae:e1:4e:6c:fc:2f:
                    28:64:06:7a:bd:2e:89:e7:0c:85:18:f9:b4:e4:c1:
                    da:31:a0:36:d4:aa:4e:0a:c9:63:66:e7:df:01:89:
                    8b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F7:E6:9B:FB:41:D4:7F:CE:B7:77:5D:92:F4:16:0B:D4:28:CD:12
            X509v3 Authority Key Identifier:
                keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/9B22AC1269F611EFA7665A51C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:f4:be:43:02:43:56:d3:5d:39:4b:13:de:8e:49:36:43:85:
         35:2a:e1:f1:af:3b:69:8f:e2:93:40:c9:15:e6:b3:f6:96:08:
         6d:a7:77:3a:75:cf:37:fb:e6:c0:b0:ff:ee:ff:95:a1:a8:9a:
         59:a1:53:28:43:99:2c:4d:3c:74:f1:9d:68:58:41:50:91:a2:
         6a:f6:7e:36:b3:52:7a:0c:ca:f5:ff:35:65:6b:6e:a4:db:8a:
         7f:00:38:7b:76:98:20:f2:74:0c:fc:84:85:21:44:59:88:cb:
         0c:ab:c4:e8:d5:b2:41:65:1c:af:b8:4b:1e:4b:7e:18:72:53:
         88:66:41:e4:55:51:4c:4b:16:89:4b:da:df:a9:bb:35:d5:ae:
         ac:0c:36:49:9b:18:94:ba:0a:d5:f3:0e:1a:b2:e4:6d:a9:09:
         bb:80:2a:ef:9e:fe:e0:6c:4f:a9:d7:f5:a9:57:87:2f:17:87:
         69:15:05:9a:28:7f:3e:a1:ec:fe:64:43:3c:3c:66:15:2a:51:
         17:e0:cf:82:5b:63:23:a2:5b:80:43:a0:40:fb:96:05:97:10:
         67:f6:7b:5c:0c:4c:00:43:25:41:74:98:86:64:46:de:0b:cb:
         bb:1d:1b:93:15:5b:36:f7:da:5e:d8:5f:52:c8:1d:6f:16:c5:
         02:87:c2:9e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUE0QUYxMTAvBgNVBAUTKENFRTQ4NzY0QUEyQzE2Rjc1QTA2NzI0NEVCQTU4NjY5
NzRFMUNFRDYwHhcNMjUxMDI1MDk0OTM1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGZjOWQyZS05MzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuanuR5aE1Hgext1r5OoI79q9crvfPnmBmcPhlxLo54ZQHqCU+BJncAF3gKgv
HDTBlM2bx2d3VAWpqF6OyYmjqgzf54HCUq4DyAY0OxOHU7xQYZ/UHBv8x6Px7wCq
V/4eg/68U+7PcpjVEECM/Vshlu2UZP3K1bexerqLEtZTuLXEvsqfTX1ppTQTHZbd
Fr1ej6zLBTdNMvIoBt3cW8lLCeg4Xg9OesFsKN3+re+UIKdF2LdIyimoEiJzBPRW
5pzq/AXgNvC0ZfYu8HEBUOGlN18F/E4FzMRafriu4U5s/C8oZAZ6vS6J5wyFGPm0
5MHaMaA21KpOCsljZuffAYmLgwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPX35pv7
QdR/zrd3XZL0FgvUKM0SMB8GA1UdIwQYMBaAFM7kh2SqLBb3WgZyROulhml04c7W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTRBRi80NjY0NjZDQTY5
RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2ZGFCbkpFNjZXR2FYVGh6
dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3p1U0haS29zRnZkYUJuSkU2NldHYVhUaHp0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUE0QUYvNDY2NDY2Q0E2OUY2MTFFRkIyQjhBRjUwQzRGOUFFMDIvOUIyMkFDMTI2
OUY2MTFFRkE3NjY1QTUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGgHuwwDQYJKoZIhvcNAQELBQADggEBAEf0vkMCQ1bTXTlL
E96OSTZDhTUq4fGvO2mP4pNAyRXms/aWCG2ndzp1zzf75sCw/+7/laGomlmhUyhD
mSxNPHTxnWhYQVCRomr2fjazUnoMyvX/NWVrbqTbin8AOHt2mCDydAz8hIUhRFmI
ywyrxOjVskFlHK+4Sx5LfhhyU4hmQeRVUUxLFolL2t+puzXVrqwMNkmbGJS6CtXz
Dhqy5G2pCbuAKu+e/uBsT6nX9alXhy8Xh2kVBZoofz6h7P5kQzw8ZhUqURfgz4Jb
YyOiW4BDoED7lgWXEGf2e1wMTABDJUF0mIZkRt4Ly7sdG5MVWzb32l7YX1LIHW8W
xQKHwp4=
-----END CERTIFICATE-----
Generated at Mon Dec 8 15:26:33 2025 by rpki-client