This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6998246AD1D311F0976F4D75C4F9AE02.roa
File:                     6998246AD1D311F0976F4D75C4F9AE02.roa (raw, json)
Hash identifier:          aOVAY2/rwqnmF30HWFS31rG2WoplJfRSgFj9yqfVloQ=
Subject key identifier:   40:4A:2D:08:F5:3D:62:D0:F8:C6:4C:9C:8E:5D:CF:79:84:D9:AA:AB
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2077
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6998246AD1D311F0976F4D75C4F9AE02.roa
Signing time:             Fri 05 Dec 2025 12:10:39 +0000
ROA not before:           Fri 05 Dec 2025 12:10:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154403
IP address blocks:        144.79.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 12:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8311 (0x2077)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Dec  5 12:10:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6932cbbf-9641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:aa:ce:81:20:a0:0c:fa:1b:1b:a0:02:35:18:
                    81:71:9e:15:fd:74:ff:3a:7e:aa:4a:4c:5e:d6:52:
                    b7:16:09:22:81:fa:78:63:03:ed:59:1a:e7:a5:af:
                    b2:22:2e:10:6d:cc:32:d7:4f:b3:bc:f3:75:63:9b:
                    9b:2e:dc:e7:99:48:49:e6:4d:b4:83:e4:58:cc:91:
                    19:3b:00:c3:86:b6:30:9c:cd:08:96:7f:3d:fb:32:
                    04:41:34:46:e7:86:08:ba:5e:59:d0:a5:45:09:2d:
                    d1:73:99:44:df:07:da:18:9e:03:c1:99:93:54:7c:
                    75:4e:3b:42:a2:65:d7:f5:1a:ba:f9:21:a5:48:3c:
                    d7:50:45:b4:66:49:c2:52:0e:48:96:06:d9:30:65:
                    d8:bc:a3:ab:9c:28:75:32:77:89:60:b9:ba:38:5e:
                    94:73:7e:38:d5:b9:5c:09:a5:9e:d3:be:1e:18:c4:
                    7c:5a:15:06:85:66:db:8d:6f:42:1a:58:b5:31:7c:
                    32:a6:79:22:3c:7f:35:91:8d:56:81:ad:f1:11:93:
                    b3:7e:ac:20:b2:14:1b:46:c3:c8:42:eb:51:86:93:
                    7f:c6:93:c6:58:d7:71:00:b4:5e:5a:10:65:75:d1:
                    09:85:f3:20:34:05:50:86:39:20:9d:54:ae:5c:15:
                    6d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4A:2D:08:F5:3D:62:D0:F8:C6:4C:9C:8E:5D:CF:79:84:D9:AA:AB
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6998246AD1D311F0976F4D75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:c3:45:39:3b:14:0e:7d:32:7b:8f:52:2c:8d:16:60:69:a5:
         ec:81:b8:db:27:aa:1e:f1:f1:8f:8f:b9:e2:e5:34:52:5a:b9:
         1a:59:9e:a5:41:2c:44:95:9e:af:68:69:c6:b5:e7:a6:75:75:
         5d:97:71:27:ea:5f:f7:d2:35:d1:84:87:42:e1:3c:c2:a9:80:
         57:1d:9a:df:44:1b:35:f6:d6:35:e5:4d:ee:37:ba:56:62:ee:
         5b:66:bf:fe:48:5e:51:e3:3c:2a:73:be:3a:bc:90:db:81:05:
         82:7b:50:46:8b:af:92:50:63:33:eb:27:0f:64:77:b6:3f:b5:
         de:aa:f1:49:f8:04:c8:ca:41:bf:16:61:c7:67:9c:80:9b:7e:
         34:e8:29:38:cf:76:c8:a3:7e:87:70:b4:37:f5:bc:45:7b:7b:
         e9:bd:6e:e8:a8:ce:9e:47:42:79:c1:19:9c:66:7d:30:9a:06:
         3d:5f:2f:f9:f8:bc:84:32:ff:49:90:05:60:f5:27:94:f5:84:
         aa:ab:54:a7:38:c4:15:cd:50:cd:5a:76:09:ac:8d:bf:c6:64:
         4a:95:3f:35:fb:9d:c8:7a:c2:f0:10:85:ca:f4:c4:66:dc:e3:
         d0:45:b4:db:89:cb:05:ba:6b:f3:10:d2:2e:72:bf:1b:25:57:
         67:bb:ce:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 19:05:33 2025 by rpki-client