This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/AF9A0636B86B11EFA561215AC4F9AE02.roa
File:                     AF9A0636B86B11EFA561215AC4F9AE02.roa (raw, json)
Hash identifier:          A1ObxkHjydwk6fyBehYuw1o+tlNdKL+8OMsW+xN5Ytc=
Subject key identifier:   35:A0:5C:5D:89:1F:C8:EB:DD:68:0D:0C:91:9E:17:93:B4:5F:D9:65
Certificate issuer:       /CN=A918CC02/serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C
Certificate serial:       C3
Authority key identifier: 7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/AF9A0636B86B11EFA561215AC4F9AE02.roa
Signing time:             Fri 19 Dec 2025 05:25:27 +0000
ROA not before:           Fri 19 Dec 2025 05:25:27 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     10075
IP address blocks:        160.191.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl
                          rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CC02, serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C
        Validity
            Not Before: Dec 19 05:25:27 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6944e1c6-7b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:97:3a:cb:c4:c1:eb:07:47:d7:28:9b:be:0d:
                    cf:db:e9:83:ba:36:89:f3:d1:4b:b9:cb:38:4c:ae:
                    70:3c:91:2a:8c:6b:fb:2a:69:09:60:7e:55:d0:96:
                    e1:02:5f:de:03:b3:82:ed:81:78:5a:e8:31:ad:ab:
                    f5:89:60:fb:6f:52:b5:f3:e1:8e:05:bb:c4:78:a9:
                    cc:91:4f:00:05:da:18:cf:78:03:5b:e0:a9:ab:97:
                    fe:fe:62:e3:5d:3b:95:e8:2e:16:42:3b:18:65:68:
                    53:98:75:bd:a8:6b:fb:99:fd:87:7e:50:92:09:cd:
                    2e:00:c9:0d:cd:20:23:a7:71:85:ee:b2:fd:9e:d4:
                    87:12:8c:d7:9e:93:5b:a7:54:e5:eb:15:d5:a0:7e:
                    83:ca:cd:ad:79:69:90:c8:15:91:f0:1c:9a:17:e2:
                    fc:0b:17:ed:2f:5f:be:b8:12:49:ce:8f:ef:d1:fb:
                    86:1d:16:e1:ab:85:cf:20:49:58:54:98:62:b3:05:
                    f0:b4:ea:31:08:34:2b:36:3e:d6:54:2a:99:a2:08:
                    ab:01:21:45:d4:14:a8:c6:88:92:3a:06:59:f4:05:
                    94:59:7d:81:ed:93:c5:9e:bb:b7:ec:12:31:a0:8f:
                    c6:26:13:ed:1b:d6:1d:bb:3b:d0:05:e7:5e:23:22:
                    52:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A0:5C:5D:89:1F:C8:EB:DD:68:0D:0C:91:9E:17:93:B4:5F:D9:65
            X509v3 Authority Key Identifier:
                keyid:7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/AF9A0636B86B11EFA561215AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:4e:d4:8d:49:8a:29:87:7f:cb:bf:67:f1:09:11:22:c7:f7:
         8c:d3:2f:61:73:e8:c4:f8:d1:a2:00:0a:c1:6a:a2:c8:6e:7a:
         90:62:19:11:b4:a0:9a:6f:c3:1c:c1:7f:00:e5:b1:0f:3a:7f:
         02:4c:db:03:b0:09:8e:81:51:1b:bd:63:55:ee:d9:a4:88:31:
         06:4d:b0:95:b1:ac:03:d9:eb:94:b8:3a:10:32:e2:68:fe:f8:
         9f:de:81:b3:da:da:f3:3c:96:84:0d:f1:16:71:60:49:d8:e2:
         a8:88:3d:8c:0b:93:74:16:b0:02:c8:af:58:2a:a2:49:0d:be:
         8a:55:3a:59:de:ed:eb:cc:f0:31:36:27:cb:7f:61:60:bd:ec:
         0c:a3:b2:d5:9f:60:f1:ea:bc:4a:02:32:7f:bc:eb:d2:05:18:
         46:a8:f0:38:a8:4f:76:e4:93:00:50:bd:9a:15:e8:f6:dd:ec:
         f2:11:99:19:d9:4c:85:76:f3:0a:7d:91:35:85:10:5d:d9:50:
         16:ad:7f:1d:9a:fc:d4:35:ec:d5:ac:e9:f5:b6:67:f6:0a:92:
         94:c3:5e:29:57:be:81:c9:63:cb:9e:cd:96:7a:df:6f:6f:f4:
         9d:be:27:33:e9:ca:7a:af:4c:30:22:76:f6:49:a7:eb:32:41:
         12:13:96:72
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OENDMDIxMTAvBgNVBAUTKDdGMDY3QTIyQTRBOUUwOTZGRDg2QTZCQTM1NUE1OTI0
OTA2N0Q4MEMwHhcNMjUxMjE5MDUyNTI3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQ0ZTFjNi03YjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmpc6y8TB6wdH1yibvg3P2+mDujaJ89FLucs4TK5wPJEqjGv7KmkJYH5V0Jbh
Al/eA7OC7YF4Wugxrav1iWD7b1K18+GOBbvEeKnMkU8ABdoYz3gDW+Cpq5f+/mLj
XTuV6C4WQjsYZWhTmHW9qGv7mf2HflCSCc0uAMkNzSAjp3GF7rL9ntSHEozXnpNb
p1Tl6xXVoH6Dys2teWmQyBWR8ByaF+L8CxftL1++uBJJzo/v0fuGHRbhq4XPIElY
VJhiswXwtOoxCDQrNj7WVCqZogirASFF1BSoxoiSOgZZ9AWUWX2B7ZPFnru37BIx
oI/GJhPtG9YduzvQBedeIyJSwwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDWgXF2J
H8jr3WgNDJGeF5O0X9llMB8GA1UdIwQYMBaAFH8GeiKkqeCW/YamujVaWSSQZ9gM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0MwMi82ODBDNjI0NkI4
NkIxMUVGOUE2QTUwNThDNEY5QUUwMi9md1o2SXFTcDRKYjlocWE2TlZwWkpKQm4y
QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2Z3WjZJcVNwNEpiOWhxYTZOVnBaSkpCbjJBdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OENDMDIvNjgwQzYyNDZCODZCMTFFRjlBNkE1MDU4QzRGOUFFMDIvQUY5QTA2MzZC
ODZCMTFFRkE1NjEyMTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACgv5cwDQYJKoZIhvcNAQELBQADggEBAIBO1I1JiimHf8u/
Z/EJESLH94zTL2Fz6MT40aIACsFqoshuepBiGRG0oJpvwxzBfwDlsQ86fwJM2wOw
CY6BURu9Y1Xu2aSIMQZNsJWxrAPZ65S4OhAy4mj++J/egbPa2vM8loQN8RZxYEnY
4qiIPYwLk3QWsALIr1gqokkNvopVOlne7evM8DE2J8t/YWC97AyjstWfYPHqvEoC
Mn+869IFGEao8DioT3bkkwBQvZoV6Pbd7PIRmRnZTIV28wp9kTWFEF3ZUBatfx2a
/NQ17NWs6fW2Z/YKkpTDXilXvoHJY8uezZZ6329v9J2+JzPpynqvTDAidvZJp+sy
QRITlnI=
-----END CERTIFICATE-----
Generated at Sat Dec 20 22:08:08 2025 by rpki-client