This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/AA71F05C60EF11EF8D645D72C4F9AE02.roa
File:                     AA71F05C60EF11EF8D645D72C4F9AE02.roa (raw, json)
Hash identifier:          ZekLkbwk4y5kRd+4yPe1K3c5jSN2HJp6NjlpAMKckXc=
Subject key identifier:   02:43:A3:51:78:48:05:1E:41:F3:C2:A6:A3:9C:02:16:D7:63:3E:C1
Certificate issuer:       /CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Certificate serial:       036E
Authority key identifier: E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/AA71F05C60EF11EF8D645D72C4F9AE02.roa
Signing time:             Wed 19 Nov 2025 00:17:21 +0000
ROA not before:           Wed 19 Nov 2025 00:17:21 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        202.166.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
                          rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878 (0x36e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917452D, serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
        Validity
            Not Before: Nov 19 00:17:21 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=691d0c91-3543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:8f:f9:d2:ff:61:46:f0:6c:39:66:cd:85:
                    f8:21:9e:46:7e:92:c5:61:98:64:6c:5a:eb:54:25:
                    f7:ed:e1:3e:3f:3c:fb:ae:81:00:36:f5:c0:a7:19:
                    c9:18:7d:cc:09:d8:4e:9e:be:1c:a2:73:b4:3e:98:
                    f8:d9:4f:4c:fe:76:b1:51:fc:1a:34:53:1f:14:1c:
                    40:1c:f8:88:49:8d:7e:d1:0a:82:c6:aa:94:6a:f1:
                    6e:a6:00:d6:64:f6:09:a9:f6:bb:7b:04:6d:68:2b:
                    72:72:09:5e:41:50:79:ed:a0:07:6b:f9:5e:e7:b0:
                    ce:f2:3d:80:6f:2b:b0:5c:21:5e:0b:6d:4f:37:28:
                    9f:7d:1b:0c:03:b5:45:a1:94:0f:8b:b7:7f:b1:91:
                    7d:b0:d9:34:11:2a:fe:23:13:73:7d:f0:1e:a5:62:
                    ec:25:d9:8c:29:23:22:91:c5:57:85:a7:e9:1a:1c:
                    06:6e:d5:d7:c7:ff:11:a4:17:2c:ae:bf:82:df:07:
                    aa:bf:6f:90:b7:45:81:ee:09:a6:7a:ad:f8:23:ae:
                    d6:79:f2:7d:e3:46:5e:c7:a7:f8:1f:52:7e:98:59:
                    f4:0b:fd:c9:a9:10:f5:36:87:73:73:28:33:8c:7c:
                    66:94:a3:77:33:4a:ef:8d:83:62:bf:00:ea:95:9b:
                    6f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:43:A3:51:78:48:05:1E:41:F3:C2:A6:A3:9C:02:16:D7:63:3E:C1
            X509v3 Authority Key Identifier:
                keyid:E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/AA71F05C60EF11EF8D645D72C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.166.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2d:9a:54:5e:7f:84:a7:73:5c:99:e0:24:07:ae:e3:0f:cb:6c:
         f8:e8:03:7b:d3:92:f3:e7:4a:80:e3:e1:03:53:3d:0c:2b:af:
         f4:d3:e6:83:2f:37:5e:a9:0d:c4:08:25:71:6e:ee:8c:db:40:
         a4:51:1f:22:8b:95:58:4f:08:b5:79:48:8d:d6:02:07:97:f6:
         3d:9c:2c:13:4c:0f:a2:c5:e9:40:d3:c5:d7:66:b2:90:29:7f:
         54:e6:4a:87:dc:6d:26:64:ac:db:29:ea:f3:ce:14:85:ac:5a:
         0d:51:5c:83:cb:db:b3:6e:ae:6d:f1:11:41:66:49:01:4f:7f:
         49:2b:a2:3f:ed:33:af:6f:08:78:b1:4d:ad:46:e6:e9:33:12:
         a5:d0:1d:46:5b:b4:d8:16:4a:8c:a2:1c:89:70:07:7c:b3:f2:
         6e:07:ef:9f:bc:64:b6:73:e5:59:2b:72:11:76:bf:d4:94:08:
         34:fa:83:61:9f:87:f6:08:31:49:83:5f:4d:43:1d:98:55:8c:
         79:ed:45:cf:0c:9c:64:b9:1d:3b:d9:74:cf:21:3a:30:3f:3e:
         85:6a:be:39:ba:ea:81:84:70:56:36:f7:ad:2e:a2:4b:6d:1f:
         c0:95:cb:f8:60:94:59:e2:5f:b0:d9:c7:f6:14:50:45:65:55:
         a9:a6:38:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 22:08:48 2025 by rpki-client