This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/4C531FC2C92C11F08C6BD186C4F9AE02.roa
File:                     4C531FC2C92C11F08C6BD186C4F9AE02.roa (raw, json)
Hash identifier:          bQqHTFTUyJV9XyLhwbBfS/GiHY/IEF1VpdlpoUPznDg=
Subject key identifier:   93:3A:67:18:FF:F4:B9:42:46:F6:FA:72:71:B5:8D:48:EA:81:95:59
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       047A
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/4C531FC2C92C11F08C6BD186C4F9AE02.roa
Signing time:             Mon 24 Nov 2025 11:54:15 +0000
ROA not before:           Mon 24 Nov 2025 11:54:15 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     9304
IP address blocks:        202.155.13.0/24 maxlen: 24
                          202.155.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 00:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1146 (0x47a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Nov 24 11:54:15 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69244766-5f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c5:79:72:84:79:b5:1b:d8:d1:0b:43:38:79:
                    d3:39:67:ad:b4:01:25:2b:2e:93:36:1d:05:ea:d4:
                    2e:fc:b1:31:7f:76:53:67:a3:53:97:37:12:07:1a:
                    90:42:f3:90:ff:71:12:5c:ce:f3:b7:b7:02:17:75:
                    a6:a7:67:8d:41:9e:84:ed:f5:68:fa:85:d6:73:a4:
                    e7:7a:06:39:80:11:3b:e7:ca:e8:07:cd:ad:a5:f0:
                    41:29:21:21:0c:0c:27:ec:4c:38:95:c9:0c:93:c7:
                    ba:2b:27:ec:d5:a9:b4:58:05:22:fc:7a:8e:d6:a3:
                    1a:2a:4f:99:ed:72:69:ff:31:3d:dd:7c:da:69:58:
                    9c:50:e3:de:49:2b:c8:c3:a6:b0:9f:10:a4:7d:2a:
                    63:f7:f8:1f:3f:8b:77:ee:4f:87:c6:b3:92:b6:d9:
                    d8:ea:5b:63:d2:c2:a8:56:6f:19:7d:c8:3c:0c:9d:
                    8b:e1:09:75:ac:88:c3:8a:e9:df:39:80:a6:af:7e:
                    11:64:c5:8e:2d:08:fd:e9:c6:c4:3c:4e:fd:c1:15:
                    db:d7:98:7f:4b:ad:32:82:01:35:ce:1f:81:7a:ae:
                    35:fb:a0:45:c9:bb:6b:09:dc:8f:de:ad:8f:90:19:
                    cf:b0:d5:cc:70:55:df:26:18:df:dc:a1:c9:18:80:
                    8f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3A:67:18:FF:F4:B9:42:46:F6:FA:72:71:B5:8D:48:EA:81:95:59
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/4C531FC2C92C11F08C6BD186C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.13.0/24
                  202.155.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:58:25:3f:ec:cb:3f:e6:a2:10:f3:43:b2:ff:0c:1a:ac:01:
         b5:8d:d9:d6:d1:86:31:07:c8:a2:19:4f:25:f5:63:a2:2a:c8:
         c8:4f:91:77:63:58:c1:02:1d:02:63:4c:1c:46:a4:74:1a:78:
         7c:5d:a6:02:04:8a:0e:b6:cb:5f:b5:3a:d3:c0:cf:1e:28:d0:
         c0:32:e6:e1:a3:b2:ee:d3:71:3c:4a:9e:03:b3:63:b0:f4:52:
         53:80:94:85:e7:de:fc:fc:16:38:7e:3b:36:fd:ce:9c:70:2b:
         f7:39:f8:9c:54:54:e4:11:b4:40:48:22:54:a2:8f:2b:b3:78:
         fe:18:ab:09:45:25:ae:df:5b:f8:fa:66:85:3f:80:98:58:2d:
         46:64:9f:ca:e1:ec:66:96:b0:87:8f:6f:c5:2c:0c:0a:ba:92:
         86:17:de:83:49:bc:84:d5:c5:da:34:4c:cf:03:34:6f:21:8e:
         a7:6c:68:d4:63:4c:1b:a5:aa:00:54:4a:21:7d:4e:4a:85:90:
         3c:f5:6a:cc:6d:62:ea:8a:5d:f8:1a:10:7c:3e:32:d9:bd:9b:
         c8:f4:aa:24:58:01:ec:8f:1b:db:64:04:82:f7:e2:df:16:2f:
         38:c7:bc:3c:63:f8:82:6c:9e:b8:8d:99:c3:6a:69:a6:8e:1d:
         69:df:1f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 04:21:35 2025 by rpki-client