This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/0DA28718CE5E11F084703925C4F9AE02.roa
File:                     0DA28718CE5E11F084703925C4F9AE02.roa (raw, json)
Hash identifier:          8U8EBiVLGcGZamqQu9ebR7wEndmlf6Ty8cVKrFdTa4M=
Subject key identifier:   AD:66:F6:20:5B:0A:F1:F6:17:07:20:15:73:0F:25:AF:A1:B4:95:C1
Certificate issuer:       /CN=A9190059/serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E
Certificate serial:       05
Authority key identifier: E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/0DA28718CE5E11F084703925C4F9AE02.roa
Signing time:             Mon 01 Dec 2025 02:33:00 +0000
ROA not before:           Mon 01 Dec 2025 02:33:00 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     131274
IP address blocks:        165.101.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl
                          rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 06:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190059, serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E
        Validity
            Not Before: Dec  1 02:33:00 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=692cfe5c-7849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2f:23:d3:18:e7:7c:62:0b:f6:e3:c4:2c:89:
                    23:20:72:4f:79:43:e4:f0:13:88:c1:a3:3b:36:03:
                    9b:7e:73:3a:51:e6:06:36:56:d6:40:37:c4:92:4f:
                    03:f4:1d:6a:99:33:b6:16:f0:aa:4c:d1:39:bf:af:
                    7d:10:e8:bd:08:75:fc:03:11:a7:c8:8d:a3:0f:cc:
                    6a:32:72:23:42:be:d9:12:23:45:87:b9:90:82:1e:
                    4c:2b:dd:9d:77:7b:4d:73:f9:53:74:62:7f:66:21:
                    e2:8d:2b:e8:a2:b2:eb:63:24:4a:a6:50:2a:16:71:
                    8f:5a:f8:e8:f3:7a:e0:a0:cc:36:d9:a4:73:7c:63:
                    fd:37:49:9b:8b:07:f1:a7:65:08:81:c1:d2:95:e9:
                    70:40:37:e2:95:97:f3:cc:d1:c7:6c:af:a4:23:68:
                    05:45:ce:c7:66:d3:d0:6b:46:64:ff:21:34:19:43:
                    25:b6:1e:31:82:52:cf:79:7b:92:2b:bc:0c:72:f0:
                    65:1e:e5:de:37:bf:12:64:78:fc:b4:d3:69:66:a1:
                    88:f3:75:85:b0:f5:54:39:c7:8b:ae:a9:3a:bd:eb:
                    75:8b:5c:3f:d3:75:61:28:4f:12:77:10:a3:d9:ed:
                    bb:d2:59:5a:f5:db:8a:10:04:d3:70:34:a0:52:ba:
                    52:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:66:F6:20:5B:0A:F1:F6:17:07:20:15:73:0F:25:AF:A1:B4:95:C1
            X509v3 Authority Key Identifier:
                keyid:E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/0DA28718CE5E11F084703925C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:1a:d9:47:00:2e:53:d2:12:b9:49:75:69:2b:69:26:92:a8:
         6e:e5:84:c9:1a:2d:09:73:3a:78:a7:b8:40:8f:97:35:6f:bc:
         45:0e:d2:a7:e3:8b:00:15:5a:c5:fa:f0:b6:1e:88:ca:21:d0:
         e3:ae:4a:25:fa:65:13:ff:e3:a7:6b:61:1f:3b:2b:ff:1f:9f:
         0d:41:1f:74:50:48:4c:b0:e4:58:a5:3f:b0:db:18:a7:6a:7d:
         8d:5f:a9:26:fa:38:79:7f:76:95:d1:37:e0:97:37:7d:ac:16:
         6d:0f:96:df:92:ee:91:52:1d:9f:4a:cc:ec:d3:b1:7c:17:9c:
         fc:25:cd:7f:a8:5a:18:f6:88:bd:4d:f4:51:f4:d2:ec:9d:4c:
         ef:26:bb:d7:6f:12:a2:0f:25:c1:bc:58:67:1a:65:03:bc:b8:
         94:29:6f:fd:49:01:bf:95:07:a0:b7:0a:00:41:77:bf:a2:9a:
         88:e3:7d:e3:82:e9:3e:a6:0d:02:05:70:fe:61:8c:bc:73:ce:
         0a:41:4a:f3:c3:4d:1a:56:cf:6a:e7:0b:3e:66:a0:e0:77:30:
         b3:fb:47:d9:2b:7a:33:0b:46:e7:9e:0a:c8:06:61:84:09:a2:
         a4:9b:6c:55:fd:52:a0:44:e0:bd:f7:9e:98:54:89:c7:2f:05:
         d6:a4:62:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:52:18 2025 by rpki-client