This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/00926CA2D41F11F092947183C4F9AE02.roa
File:                     00926CA2D41F11F092947183C4F9AE02.roa (raw, json)
Hash identifier:          6Kb8qTYjaoIOVP7kkTd2rIa7gwLmY36EevcUKuSxehs=
Subject key identifier:   6B:E7:B8:B2:A8:6B:9F:C3:51:7B:B2:2C:B4:1C:26:23:C3:65:D1:96
Certificate issuer:       /CN=A9170F11/serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF
Certificate serial:       DE
Authority key identifier: 21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/00926CA2D41F11F092947183C4F9AE02.roa
Signing time:             Tue 09 Dec 2025 07:33:56 +0000
ROA not before:           Tue 09 Dec 2025 07:33:56 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     138640
IP address blocks:        160.191.148.0/23 maxlen: 23
                          160.191.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl
                          rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 08:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170F11, serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF
        Validity
            Not Before: Dec  9 07:33:56 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6937d0e4-948d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fa:94:5e:da:6b:4f:3f:37:3c:2a:bb:cb:a1:
                    ec:3a:1e:77:97:66:36:58:99:06:0a:84:b6:f2:2a:
                    73:76:f5:61:b9:4b:16:da:82:c0:58:3c:2d:67:41:
                    39:be:be:48:2c:af:48:ce:bf:b8:e3:ac:e5:ba:4e:
                    2b:a4:91:b7:1b:94:2c:e2:21:6d:ec:3b:9e:c6:5f:
                    b3:71:7f:cb:fa:1f:06:6d:ea:7b:42:f2:1b:f9:70:
                    ce:8a:60:6c:d1:6f:40:6d:a3:f3:ca:41:da:ea:37:
                    05:7f:ab:4c:76:59:c2:d8:0b:8d:db:e8:2b:11:0d:
                    2d:c0:c3:a0:f3:52:7a:79:d9:d5:4e:6d:e9:35:41:
                    05:d9:37:96:d0:da:6d:5a:41:1f:ba:f2:18:b4:b9:
                    78:bb:c1:33:5e:4f:0a:0e:c4:a2:b8:25:dd:53:7f:
                    83:05:47:0b:6e:93:51:5a:70:df:27:5f:ab:c9:87:
                    08:da:75:0a:a0:ff:e1:ad:c6:60:18:d8:cd:81:6d:
                    23:b0:3a:db:6a:b0:48:04:38:e9:c7:fb:32:57:63:
                    5f:7e:df:00:fc:d2:4a:53:19:a2:fe:c3:bc:47:1b:
                    88:88:86:61:75:fd:76:8f:53:e5:58:25:47:cf:48:
                    96:67:79:71:fc:ce:e0:96:c8:a4:a9:df:2f:b5:9f:
                    da:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E7:B8:B2:A8:6B:9F:C3:51:7B:B2:2C:B4:1C:26:23:C3:65:D1:96
            X509v3 Authority Key Identifier:
                keyid:21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/00926CA2D41F11F092947183C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:26:03:de:63:8c:3f:aa:77:4e:a8:42:d7:57:6e:fd:63:29:
         8e:9e:d1:a3:48:2d:88:80:66:22:62:44:61:37:87:78:4c:79:
         cb:cc:e1:c6:3a:28:84:65:b1:6c:af:b3:9e:27:c0:f3:84:e6:
         b0:cd:ad:b2:eb:54:14:31:ad:4f:20:c5:e2:7e:94:72:e6:87:
         1f:29:17:13:60:d2:7a:c5:57:5a:2f:d9:a0:56:cf:12:ac:6b:
         2a:4a:27:a7:48:3b:b7:cb:d6:7a:33:b9:5d:24:15:18:b7:23:
         d7:04:21:39:25:e5:d4:e6:55:84:30:c5:a5:e0:65:38:80:6f:
         ab:8a:35:63:e7:30:1e:4e:3e:98:95:aa:b9:f7:08:63:30:51:
         e0:a6:b9:4b:38:5d:e7:84:f4:73:94:14:96:ec:0d:ac:8b:51:
         a6:55:3c:1f:68:24:ab:a3:d1:90:50:ae:44:79:80:03:e4:2d:
         9c:9f:c7:7e:f9:2a:a1:78:21:e1:4b:73:62:e8:f9:e5:7d:03:
         a7:1c:32:a9:f4:69:8f:92:9c:bb:8a:42:ad:dc:21:82:11:b3:
         73:43:f3:7e:fb:6c:96:92:ba:55:ba:00:05:e3:04:7a:f1:80:
         dd:7b:5c:a2:7f:0a:bc:04:43:86:5d:ad:75:06:41:e5:b5:5c:
         70:98:2c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 23:59:37 2025 by rpki-client