This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/375E8232C13411F0A297231CC4F9AE02.roa
File:                     375E8232C13411F0A297231CC4F9AE02.roa (raw, json)
Hash identifier:          faIT1KQ9aho1SVLdZnkQF7oKUH4537D0LIq6gOBowBs=
Subject key identifier:   4B:5F:22:C3:FE:18:53:AD:CD:27:BA:34:8E:C8:04:F6:66:D5:71:4D
Certificate issuer:       /CN=A9161857/serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0
Certificate serial:       5A
Authority key identifier: DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/375E8232C13411F0A297231CC4F9AE02.roa
Signing time:             Fri 14 Nov 2025 08:30:46 +0000
ROA not before:           Fri 14 Nov 2025 08:30:46 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     153913
IP address blocks:        203.169.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl
                          rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 05:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161857, serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0
        Validity
            Not Before: Nov 14 08:30:46 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6916e8b6-c48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f7:80:b3:85:6d:0b:05:7a:52:d4:31:53:38:
                    8b:66:95:1d:1f:8b:94:a2:6d:b4:00:d9:a7:ab:44:
                    63:48:c0:5f:72:99:bb:9b:4b:19:71:50:c5:f1:77:
                    27:f5:3e:d4:34:c8:e0:5f:88:d6:cf:ec:65:6c:ac:
                    d9:ce:91:d6:73:df:b3:22:fe:af:57:a0:52:39:98:
                    28:ff:9b:1d:64:6a:02:14:3a:12:73:5a:6f:32:f0:
                    4e:ec:77:f4:47:34:92:a0:cb:bc:6d:c7:bf:14:91:
                    5b:2e:d0:73:fa:14:e3:d9:32:ef:46:21:c5:a9:cd:
                    bf:56:17:a4:7b:1b:6c:3a:cc:74:4b:cf:07:05:43:
                    53:c2:f5:b4:9a:ee:56:1b:b6:53:d2:2e:de:f0:b8:
                    05:94:18:b7:54:5b:f6:e5:d8:b7:bc:f0:ac:a6:c2:
                    12:08:54:4b:c8:9c:ea:10:3f:1c:5c:af:31:90:d3:
                    b3:62:8c:56:37:c2:f0:71:dd:70:9e:7e:95:59:01:
                    fe:f4:85:a3:e2:6e:8c:b3:31:1b:0c:d8:d1:c5:b2:
                    f0:f7:b5:d0:ca:63:5a:8b:cf:3a:0e:af:3d:84:94:
                    93:27:6f:b3:d1:e2:61:ca:3d:af:99:a9:a0:3c:df:
                    8b:4c:7e:6d:fc:de:0d:f4:34:a1:29:c4:7d:c7:1b:
                    79:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5F:22:C3:FE:18:53:AD:CD:27:BA:34:8E:C8:04:F6:66:D5:71:4D
            X509v3 Authority Key Identifier:
                keyid:DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/375E8232C13411F0A297231CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.169.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:2b:4b:b9:ab:03:36:78:76:99:3c:2a:f2:a4:bc:82:0e:45:
         4f:45:ac:82:a6:62:7c:49:93:df:82:fb:37:0d:fa:9e:f9:e8:
         76:c6:7f:a7:0b:d2:ae:c7:41:ae:e1:f6:57:40:53:30:72:40:
         11:5d:5f:0c:0d:cd:ea:72:6f:76:59:10:ed:54:d1:52:98:bb:
         06:77:15:60:cd:2a:9f:ba:ec:9f:32:08:fa:d6:f8:a6:52:ff:
         47:39:9e:70:e4:ab:b0:6c:87:76:ae:e3:85:43:b2:55:08:7b:
         4f:98:56:a6:4b:82:f2:02:37:22:fe:28:29:f2:70:82:34:0d:
         9c:0d:a6:90:2f:8a:7a:11:34:11:0c:1c:c1:a2:b0:e9:f7:7a:
         bc:d0:5f:1b:9b:fc:d5:c2:e6:16:c0:ec:15:9e:bd:c7:6c:b9:
         66:1a:2f:5c:c3:34:31:1c:d2:36:1e:ca:d0:5f:1e:50:8e:ec:
         31:cb:63:dc:27:41:8c:a7:19:41:6d:ff:45:fa:5c:ae:85:44:
         ae:77:2f:74:22:57:ce:37:9e:b7:ee:f7:2b:78:70:cf:60:43:
         44:c1:9a:dc:36:e6:04:94:9c:f7:bf:1e:3c:f7:69:04:aa:a1:
         20:e8:c5:9d:55:6c:0e:4d:55:9b:11:0a:06:3e:68:5e:f4:e7:
         5f:1a:77:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 17:36:47 2025 by rpki-client