This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/707ABBBE73F811F0B8A9582CC4F9AE02.roa
File:                     707ABBBE73F811F0B8A9582CC4F9AE02.roa (raw, json)
Hash identifier:          aeXdNNQNabgrgBCmkQacK1+L1cNE5fkHv7C0sQiLMEA=
Subject key identifier:   B9:77:AA:55:FA:EA:C9:94:67:B3:F0:67:C3:34:35:A6:F5:7D:57:84
Certificate issuer:       /CN=A9177C3F/serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
Certificate serial:       40
Authority key identifier: E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/707ABBBE73F811F0B8A9582CC4F9AE02.roa
Signing time:             Wed 19 Nov 2025 05:53:47 +0000
ROA not before:           Wed 19 Nov 2025 05:53:47 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     9419
IP address blocks:        155.69.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl
                          rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 05:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177C3F, serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
        Validity
            Not Before: Nov 19 05:53:47 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=691d5b6b-7d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:8f:1c:ae:8c:23:b3:a3:82:b6:1a:b1:08:
                    35:a5:79:25:0b:46:fb:9f:72:58:12:e6:da:ac:e1:
                    c0:e0:0d:44:7a:a7:7a:74:7e:c9:3a:ed:de:c9:1b:
                    61:23:a1:a4:54:32:0f:a3:bb:f0:56:1a:eb:b5:68:
                    3f:c7:ab:65:37:8c:e2:27:4a:34:9e:14:0d:33:86:
                    b1:f9:dd:c8:33:25:a7:6c:3e:5d:6f:30:48:f5:98:
                    c8:ef:f0:aa:20:ad:54:5d:0e:15:8b:c9:bb:f2:1f:
                    b7:49:64:5b:c0:32:b3:d1:70:e5:e4:39:9a:88:11:
                    5e:ef:80:76:13:d7:e2:04:c5:28:75:7a:ee:03:a2:
                    fc:69:fd:c0:91:37:99:79:ee:3c:53:f4:a5:f6:20:
                    7a:9e:14:6d:5d:60:47:4b:05:b8:ff:20:0c:89:3e:
                    43:b7:2a:46:55:0a:11:62:85:1a:6c:23:da:57:ea:
                    e6:c5:98:cd:c3:2e:fe:cf:39:ce:8c:19:4f:04:8f:
                    db:f0:a6:bf:b2:1b:bc:db:08:21:b1:5d:b9:37:db:
                    5a:9b:7b:9a:15:27:99:8a:51:d8:e2:37:ef:ac:9a:
                    46:e8:ee:d8:51:1e:cb:ff:57:ba:c3:e8:1b:6e:e0:
                    34:4b:14:6d:75:95:fb:5d:dc:cc:63:62:fb:23:bf:
                    22:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:77:AA:55:FA:EA:C9:94:67:B3:F0:67:C3:34:35:A6:F5:7D:57:84
            X509v3 Authority Key Identifier:
                keyid:E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/707ABBBE73F811F0B8A9582CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.69.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:8c:aa:d9:83:ee:70:d4:80:c2:42:29:15:fe:98:5c:97:1f:
         e4:df:96:91:59:cc:3c:50:3f:5d:56:a9:6b:13:1b:f7:90:40:
         e3:9a:a8:1a:dd:6c:d2:5d:c2:a8:d6:4f:d3:7f:df:c1:31:cc:
         a2:9e:f7:23:50:f8:68:e6:46:9a:a0:75:85:5f:d7:8f:d5:5c:
         f5:9b:46:b3:4c:30:ce:80:60:24:fe:b9:88:07:88:7f:00:05:
         fa:b0:f6:f1:41:0c:d3:d8:81:c3:f1:48:65:4c:7d:b9:13:4e:
         0d:6f:83:c5:0a:c5:ba:89:f2:9e:73:b1:c3:bc:0b:5c:b1:46:
         b4:4c:79:b9:da:40:02:66:3d:d0:d8:c9:fd:a4:b5:c9:9d:40:
         1c:f2:82:38:dc:ed:24:3b:ad:40:d5:5a:8d:66:64:0a:83:65:
         7a:f3:42:99:c0:96:b4:a9:33:60:ea:23:e1:4e:18:62:36:9c:
         71:11:5b:7e:0f:01:20:c5:e8:59:93:ae:c8:d4:06:0b:c1:44:
         38:32:c5:03:b4:51:70:35:d2:13:4b:92:0d:9c:d8:0d:e1:fb:
         ee:42:5a:dc:c7:f1:f8:90:fd:bf:69:32:3c:f9:dd:9b:40:7b:
         7b:52:3e:29:a1:38:dc:42:a4:43:b3:8c:c7:3d:1e:b3:81:1a:
         95:71:cb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:31:50 2025 by rpki-client