This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/6641AB54DEE111F0BF0237E8526F56BC.roa
File:                     6641AB54DEE111F0BF0237E8526F56BC.roa (raw, json)
Hash identifier:          P/X1zq9HqU7l029JT4fh+xn2Sh08dG8IfyyA8BIfubs=
Subject key identifier:   E4:BE:C9:48:56:54:5E:54:35:DA:2E:9C:42:5B:1A:BC:8A:F0:BD:43
Certificate issuer:       /CN=A9162B98/serialNumber=D75F4D54764AEF4E530487DEB5EAD92322F2E00B
Certificate serial:       04
Authority key identifier: D7:5F:4D:54:76:4A:EF:4E:53:04:87:DE:B5:EA:D9:23:22:F2:E0:0B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/119NVHZK705TBIfeterZIyLy4As.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/6641AB54DEE111F0BF0237E8526F56BC.roa
Signing time:             Mon 22 Dec 2025 02:53:31 +0000
ROA not before:           Mon 22 Dec 2025 02:53:31 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154441
IP address blocks:        144.79.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.crl
                          rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/119NVHZK705TBIfeterZIyLy4As.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:59:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162B98, serialNumber=D75F4D54764AEF4E530487DEB5EAD92322F2E00B
        Validity
            Not Before: Dec 22 02:53:31 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6948b2ab-7332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:08:bf:52:6a:bb:35:9e:37:07:32:46:0f:61:
                    8b:ab:24:ac:30:62:89:d2:e9:a5:f4:c6:d2:18:94:
                    38:c6:66:60:99:16:2c:89:30:9a:b2:c9:ed:f2:67:
                    21:a6:db:ee:47:76:5c:94:b1:7a:31:18:e6:4a:59:
                    96:66:35:27:5a:6d:a9:e1:4d:e3:0a:5a:a7:bc:4a:
                    2e:45:58:d1:f3:fb:10:ab:fc:cc:cc:fb:6b:85:31:
                    40:e4:ff:bb:60:4b:0f:74:09:40:cd:ab:b7:1a:55:
                    08:5e:0d:36:e4:2c:6c:0f:27:54:6a:30:af:84:e3:
                    10:9b:ac:dd:6a:c3:83:fe:77:01:e3:2d:c1:b9:35:
                    a6:85:ab:3d:aa:5d:0a:d3:a2:3b:09:09:15:b2:7e:
                    9e:8c:ae:1b:e9:e7:c3:d4:88:0e:ad:c1:88:ea:f1:
                    9e:2f:85:2b:c3:b8:bc:a0:81:84:c2:02:66:dc:b4:
                    1b:b6:28:d5:05:24:8e:52:00:43:2a:77:1c:03:c5:
                    8f:ae:8e:30:9b:3e:5a:41:a9:ae:f5:ec:3a:2e:5a:
                    ce:24:d0:2a:ca:8d:b6:d7:78:38:45:09:d0:0a:ac:
                    6f:df:4b:5b:d9:3b:af:06:26:4d:5c:28:cf:2a:6e:
                    fd:61:c6:85:3d:0b:41:32:c5:0f:5f:fd:3d:26:24:
                    fc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BE:C9:48:56:54:5E:54:35:DA:2E:9C:42:5B:1A:BC:8A:F0:BD:43
            X509v3 Authority Key Identifier:
                keyid:D7:5F:4D:54:76:4A:EF:4E:53:04:87:DE:B5:EA:D9:23:22:F2:E0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/119NVHZK705TBIfeterZIyLy4As.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/6641AB54DEE111F0BF0237E8526F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:a5:02:18:6f:37:db:c8:40:65:7a:81:39:9e:f9:e5:74:15:
         47:aa:0c:95:5e:f3:70:27:f0:01:ac:a1:ed:41:f6:63:6a:86:
         fe:da:05:74:84:b6:fa:aa:0e:e9:b6:b6:8f:43:49:c4:70:01:
         a3:7b:91:a3:cf:32:c0:b6:33:c7:65:18:7f:03:b5:10:87:dd:
         46:7e:4c:b8:2e:0a:80:f0:1c:0d:23:53:bf:b5:d7:c7:1b:3c:
         6b:75:84:c0:b1:40:c6:64:77:33:22:8f:6e:9a:73:f0:3c:ab:
         b9:8e:59:66:b0:50:4c:6e:b7:a8:5e:ed:73:fd:9c:01:f1:f2:
         81:9d:52:4d:92:82:cf:c3:30:30:70:38:0f:29:33:d7:f4:66:
         22:d9:6d:a4:40:22:57:67:73:ac:b1:c6:6d:28:d2:22:6c:41:
         f6:04:bd:59:50:e4:7d:24:8f:25:9f:12:8b:ef:82:fe:56:27:
         2d:3c:0a:ea:32:6f:b8:1e:66:6b:13:a4:8e:8f:a6:b0:c5:61:
         ed:a9:5a:47:a4:e6:9f:96:95:65:b7:59:44:01:85:4c:9b:b2:
         69:82:21:c0:1c:15:2a:0f:32:31:29:d9:40:2c:a6:34:9b:3b:
         e0:f2:78:ca:f5:91:a7:f7:36:b5:67:03:e3:a0:a3:c6:b8:ab:
         39:28:a9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:30:29 2026 by rpki-client