This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/38A5FCB48FC911E8902DFE16C4F9AE02.roa
File:                     38A5FCB48FC911E8902DFE16C4F9AE02.roa (raw, json)
Hash identifier:          S7+wUQWXWYyVNfVrHQD8NP/Kenz4c8yGRRnN25FwcFg=
Subject key identifier:   F8:B5:27:1E:C7:4C:AE:85:C7:A0:29:A7:02:88:B6:7A:8E:33:7E:B1
Certificate issuer:       /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Certificate serial:       17B3
Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/38A5FCB48FC911E8902DFE16C4F9AE02.roa
Signing time:             Thu 04 Dec 2025 16:15:56 +0000
ROA not before:           Thu 04 Dec 2025 16:15:56 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     137226
IP address blocks:        204.145.4.0/24 maxlen: 24
                          208.71.224.0/24 maxlen: 24
                          208.71.225.0/24 maxlen: 24
                          208.71.226.0/24 maxlen: 24
                          208.71.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl
                          rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6067 (0x17b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
        Validity
            Not Before: Dec  4 16:15:56 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6931b3bc-c19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:74:29:b8:a8:db:0a:1f:35:b1:dc:70:f6:58:
                    cd:66:7b:e1:86:23:3a:a2:a3:2b:1f:73:95:c4:c2:
                    b1:0d:47:18:a8:9f:58:58:2e:ad:c6:0b:79:48:6b:
                    80:d9:6e:69:e2:f8:1c:6b:a2:f8:46:cc:6d:cc:0c:
                    93:f6:87:f2:e9:19:d9:07:8c:90:86:5c:94:be:52:
                    72:f5:f9:45:c8:84:20:1e:00:7e:eb:01:3d:2a:10:
                    eb:4f:52:0d:3c:4f:f9:1c:1d:2b:36:af:35:22:14:
                    20:87:18:6d:43:25:c0:7e:c5:a9:1a:54:62:2c:cc:
                    8e:b6:23:6e:d9:28:3d:41:a2:29:37:3c:cd:b0:c6:
                    59:d1:5f:21:94:7b:97:15:2f:35:6f:da:71:41:82:
                    a5:d9:6f:d5:cf:ef:24:fb:95:59:b7:5a:e2:da:4a:
                    1e:ec:68:18:6a:7c:1c:27:00:a5:a7:5a:ab:b1:9e:
                    a6:8d:8f:c7:bd:5a:cf:98:59:20:de:67:a7:cd:d7:
                    33:33:e2:04:31:e8:de:2c:00:35:28:d3:22:e1:8b:
                    58:d8:67:44:07:29:48:2c:84:7c:94:4d:37:cd:cf:
                    c8:fd:26:58:7c:99:7c:6b:61:b7:d2:45:d3:a4:ca:
                    13:31:4a:4e:68:6a:1c:e3:98:24:ce:b9:98:b9:be:
                    c3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B5:27:1E:C7:4C:AE:85:C7:A0:29:A7:02:88:B6:7A:8E:33:7E:B1
            X509v3 Authority Key Identifier:
                keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/38A5FCB48FC911E8902DFE16C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.145.4.0/24
                  208.71.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:43:c2:65:2d:93:03:d7:56:b7:07:45:0a:a6:ae:a9:6d:a8:
         2c:fc:dc:d7:a6:11:c3:5e:75:79:27:9b:4f:d5:9d:2f:70:de:
         8e:f9:d3:9f:45:f1:8b:36:3b:4f:4c:5b:02:34:a1:a3:17:48:
         ea:cd:4a:0c:b6:f7:94:61:a9:d9:39:c2:0e:b9:a3:05:f5:b5:
         04:74:fd:47:09:df:2f:01:c7:c9:7b:af:55:4a:8a:75:fd:3c:
         85:a0:ba:44:9c:49:52:49:9f:73:5e:96:4b:31:f3:5b:cb:5e:
         b6:bd:d6:bd:d2:ab:01:da:4a:17:ba:50:46:23:78:69:f6:c0:
         a7:4e:87:1d:18:5b:cd:32:8c:7e:e0:7f:0a:ea:c5:9c:e3:59:
         ba:8d:9b:23:7d:ec:30:01:1b:18:bd:a3:cd:08:fd:00:78:fe:
         99:3c:3a:45:fe:7d:b0:e8:38:2e:c6:a9:32:bd:2c:2a:2c:1a:
         a1:5a:67:af:88:1f:53:cb:99:95:14:26:eb:a8:0b:02:35:94:
         ad:ce:05:53:ee:6a:08:9a:5e:a7:a1:17:74:4e:1d:f6:58:0f:
         cf:48:26:d2:c0:65:46:21:78:d2:78:63:8d:7a:e2:9d:ba:44:
         fd:1c:d1:a7:2f:1e:8c:0b:83:23:6e:ad:6a:e8:92:6b:73:db:
         d2:15:33:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 23:47:10 2025 by rpki-client