This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/794C43721A5F11F080409056C4F9AE02.roa
File:                     794C43721A5F11F080409056C4F9AE02.roa (raw, json)
Hash identifier:          kbLH1JljQmw4AlfiWIiOugdUuk6toBMNo8ccK4VwJSI=
Subject key identifier:   0B:8B:49:F0:C7:3A:CE:CF:3E:F0:8F:A5:AF:EE:B7:A9:27:2E:73:2B
Certificate issuer:       /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Certificate serial:       0A69
Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/794C43721A5F11F080409056C4F9AE02.roa
Signing time:             Sat 08 Nov 2025 19:09:58 +0000
ROA not before:           Sat 08 Nov 2025 19:09:58 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     51847
IP address blocks:        137.220.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl
                          rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 19:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2665 (0xa69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
        Validity
            Not Before: Nov  8 19:09:58 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=690f9585-dcf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:71:9e:ac:42:45:ee:f6:0b:09:1d:17:14:67:
                    20:97:99:a5:4f:63:05:07:fb:68:2e:4b:94:fc:e9:
                    57:4b:d2:24:15:1e:26:4f:aa:34:91:85:de:65:fd:
                    47:71:d7:3a:f2:44:52:9a:e1:a3:b4:bb:46:16:4f:
                    12:94:5e:16:cc:64:aa:80:5e:6b:71:dc:67:35:23:
                    d9:39:56:24:b3:7c:c0:fb:5f:be:2e:1d:bb:00:21:
                    97:ad:02:2e:58:19:2c:4c:43:ee:54:22:94:14:74:
                    4d:95:94:86:38:c5:6f:de:08:24:d8:18:82:68:28:
                    6e:39:65:eb:54:76:7d:29:fc:b8:e6:26:1c:52:9c:
                    e5:db:f3:1a:44:ff:75:cb:e8:94:cf:d9:b2:ab:02:
                    9d:a3:0e:78:46:50:b4:ab:0a:2a:ec:0a:4b:8f:50:
                    6a:12:0b:18:0f:ce:a8:53:4d:2c:7c:8f:ce:41:0d:
                    91:9b:9b:e5:fc:31:12:f5:63:b3:04:34:31:2a:8c:
                    ac:c0:bb:55:5f:76:ba:76:80:ac:b1:bf:83:79:bb:
                    41:6c:9f:26:16:32:1d:28:04:56:f9:1d:19:6d:10:
                    cd:79:c3:a7:68:47:18:68:4d:e3:dc:be:54:8a:43:
                    b5:58:c7:34:41:7f:11:02:e8:09:e8:8c:80:de:d6:
                    aa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8B:49:F0:C7:3A:CE:CF:3E:F0:8F:A5:AF:EE:B7:A9:27:2E:73:2B
            X509v3 Authority Key Identifier:
                keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/794C43721A5F11F080409056C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.220.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:7a:12:6a:d0:76:72:2d:30:f1:70:ed:0d:b1:c8:64:00:29:
         ef:de:60:67:cc:59:a3:93:b2:d3:5d:f5:56:b7:be:63:ab:2d:
         ae:4e:b8:3b:f4:8e:b6:74:1c:30:7c:6f:72:f9:77:95:af:2b:
         85:ec:59:0e:91:b4:6e:ab:7c:f1:8c:86:fc:2d:2b:4b:34:87:
         f7:68:19:cf:b6:9e:78:f7:ec:fe:d7:d8:f4:3e:e1:ea:cb:bb:
         ee:a1:09:3f:42:9a:7e:72:83:ad:45:3e:2e:5b:0c:99:4e:54:
         26:83:1f:70:4f:dd:3a:a3:cf:df:2c:73:a3:d2:04:e6:1a:fc:
         9c:ec:ec:62:0b:95:4c:bb:db:66:d6:b8:75:7f:1d:2e:7c:aa:
         68:bd:27:6c:45:80:9f:6a:ec:2b:33:5a:3d:c7:64:2f:cd:eb:
         c7:10:08:7c:a3:9e:3f:14:e6:a9:62:67:a6:35:a1:d7:5b:fd:
         70:a6:c6:6f:c8:f8:c1:3a:d6:d3:c2:05:c6:ca:8a:35:2c:ed:
         b2:b8:0a:a1:b7:98:72:8f:85:31:c8:a9:43:c5:a7:a5:a5:c7:
         c7:35:8f:49:a2:4b:6b:5a:00:8f:c0:75:9e:a5:71:a2:7d:3e:
         33:07:b9:ea:90:a2:ad:9f:c7:63:07:4f:71:c0:d3:0c:3b:78:
         c1:3c:43:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:56:05 2025 by rpki-client