This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/EB9160CCDFD811F08F00FF64536F56BC.roa
File:                     EB9160CCDFD811F08F00FF64536F56BC.roa (raw, json)
Hash identifier:          TDScwmLACLBr+NDLMF8sOUg0IZwvFoJB9xc6zF5Gmm4=
Subject key identifier:   52:A7:4E:09:00:7F:03:54:A5:A4:86:07:60:8F:A1:B6:90:DF:0E:D1
Certificate issuer:       /CN=A917C81C/serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF
Certificate serial:       03
Authority key identifier: 1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/EB9160CCDFD811F08F00FF64536F56BC.roa
Signing time:             Tue 23 Dec 2025 08:25:21 +0000
ROA not before:           Tue 23 Dec 2025 08:25:21 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     141727
IP address blocks:        144.79.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.crl
                          rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 08:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C81C, serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF
        Validity
            Not Before: Dec 23 08:25:21 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=694a51f0-ef8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:30:47:24:1c:6b:02:74:c8:84:02:c0:45:b7:
                    ce:a4:c4:3a:ab:37:e1:c0:0c:7e:63:23:0b:bf:05:
                    1f:93:ea:31:93:39:66:8b:af:1b:45:60:03:9c:c4:
                    d8:d8:43:b3:b1:63:1a:51:d4:84:f8:7f:c1:03:5b:
                    93:f6:31:d8:a2:f5:54:c8:c5:7c:84:40:2c:9c:16:
                    b9:2d:fd:49:91:60:a3:78:d5:e0:e8:d6:8d:ea:c2:
                    48:70:82:06:62:22:27:21:5a:26:1f:56:bb:98:51:
                    5b:5f:06:e3:70:69:5f:0f:d6:9c:bd:d3:f0:78:87:
                    15:56:1b:9f:a8:cc:d8:e1:a7:15:13:32:b5:10:d8:
                    10:bc:7e:c2:9d:1d:49:b0:33:46:a6:d9:6f:06:5d:
                    d0:f1:88:f6:cc:ca:bb:cc:d2:5b:47:6d:07:97:dc:
                    da:e7:bb:83:e9:d5:ad:26:68:a0:17:c8:57:5d:91:
                    19:89:3b:e3:74:6f:d0:44:65:8e:95:a4:47:cf:5a:
                    97:94:d4:27:b5:ed:f3:61:8e:e1:7a:7e:b3:00:ec:
                    76:95:51:75:04:25:d8:3e:70:c9:3c:fa:4d:a0:84:
                    49:e5:44:a6:0c:8f:48:b1:8a:8d:1c:da:73:5c:2e:
                    d7:c1:61:9c:24:59:e4:e8:62:bc:68:0e:85:af:a6:
                    cd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A7:4E:09:00:7F:03:54:A5:A4:86:07:60:8F:A1:B6:90:DF:0E:D1
            X509v3 Authority Key Identifier:
                keyid:1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/EB9160CCDFD811F08F00FF64536F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:99:1b:5a:31:de:40:25:e9:bb:8b:20:45:1d:69:63:09:3b:
         81:a3:e6:62:6e:5c:a1:df:ea:bd:76:3b:39:e1:98:26:f5:52:
         06:70:18:b6:a2:ac:d0:78:2a:21:ea:78:38:04:2c:bb:76:5e:
         ce:62:f2:50:33:fc:90:8b:37:2a:bc:ec:6e:5b:b2:c0:71:87:
         a5:85:44:9a:d3:fd:24:a6:ab:42:55:fa:6a:6d:e5:d2:90:bc:
         ac:27:14:c9:47:fe:4e:e6:5b:be:ec:83:ba:73:1c:78:2f:a9:
         32:92:31:9d:fc:87:b0:9b:8b:fb:f9:76:77:59:ac:41:d9:3a:
         7b:43:38:68:6c:a2:b9:ba:d2:d4:c6:b6:63:7e:58:5b:ae:1a:
         5b:a6:4b:6d:ab:50:5e:93:2c:04:24:69:ba:fb:0c:df:28:11:
         bd:cb:74:dd:8d:80:21:3a:8e:3c:1d:3a:17:64:5a:9d:d3:e0:
         87:54:03:de:e6:4e:3c:24:25:bb:3c:7d:31:38:86:e5:23:54:
         04:8f:49:7f:8b:bd:fb:d1:c5:f4:b7:3b:53:1e:ec:dd:6d:22:
         7e:a1:01:46:3e:ba:b1:2d:11:8f:24:90:bb:6f:5b:ad:2c:50:
         d4:b1:02:84:de:95:d5:39:d9:e1:dc:74:32:95:8d:fb:09:79:
         1a:55:f4:c1
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE3
QzgxQzExMC8GA1UEBRMoMUM2RkYzRUMwOTgyOTRCNDJEOTc5RjI1QjY5NjA1OTIz
RTFDQ0VFRjAeFw0yNTEyMjMwODI1MjFaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5NGE1MWYwLWVmOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpMEckHGsCdMiEAsBFt86kxDqrN+HADH5jIwu/BR+T6jGTOWaLrxtFYAOcxNjY
Q7OxYxpR1IT4f8EDW5P2Mdii9VTIxXyEQCycFrkt/UmRYKN41eDo1o3qwkhwggZi
IichWiYfVruYUVtfBuNwaV8P1py90/B4hxVWG5+ozNjhpxUTMrUQ2BC8fsKdHUmw
M0am2W8GXdDxiPbMyrvM0ltHbQeX3Nrnu4Pp1a0maKAXyFddkRmJO+N0b9BEZY6V
pEfPWpeU1Ce17fNhjuF6frMA7HaVUXUEJdg+cMk8+k2ghEnlRKYMj0ixio0c2nNc
LtfBYZwkWeToYrxoDoWvps0nAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUUqdOCQB/
A1SlpIYHYI+htpDfDtEwHwYDVR0jBBgwFoAUHG/z7AmClLQtl58ltpYFkj4czu8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDODFDLzg2MjBGQ0E2REZD
QTExRjBBNDU1NDg1NjRGNkY1NkJDL0hHX3o3QW1DbExRdGw1OGx0cFlGa2o0Y3p1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSEdfejdBbUNsTFF0bDU4bHRwWUZrajRjenU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzgxQy84NjIwRkNBNkRGQ0ExMUYwQTQ1NTQ4NTY0RjZGNTZCQy9FQjkxNjBDQ0RG
RDgxMUYwOEYwMEZGNjQ1MzZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAJBPwjANBgkqhkiG9w0BAQsFAAOCAQEAppkbWjHeQCXpu4sg
RR1pYwk7gaPmYm5cod/qvXY7OeGYJvVSBnAYtqKs0HgqIep4OAQsu3ZezmLyUDP8
kIs3KrzsbluywHGHpYVEmtP9JKarQlX6am3l0pC8rCcUyUf+TuZbvuyDunMceC+p
MpIxnfyHsJuL+/l2d1msQdk6e0M4aGyiubrS1Ma2Y35YW64aW6ZLbatQXpMsBCRp
uvsM3ygRvct03Y2AITqOPB06F2RandPgh1QD3uZOPCQluzx9MTiG5SNUBI9Jf4u9
+9HF9Lc7Ux7s3W0ifqEBRj66sS0RjySQu29brSxQ1LEChN6V1TnZ4dx0MpWN+wl5
GlX0wQ==
-----END CERTIFICATE-----
Generated at Wed Dec 24 22:53:38 2025 by rpki-client