This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/2C4F5466E47A11F08671F3E23F6F56BC.roa
File:                     2C4F5466E47A11F08671F3E23F6F56BC.roa (raw, json)
Hash identifier:          TuO9+5pXcuLpHMKBYcmaCFTYvye6Er5hRqXH0bP/+Jo=
Subject key identifier:   4D:24:9A:43:58:F8:15:A6:F8:0F:3D:91:23:34:7E:DD:E5:90:C5:CA
Certificate issuer:       /CN=A9193C07/serialNumber=ED3C1BDEA37EFDC4EACB554EB88B10C15402E83A
Certificate serial:       0D
Authority key identifier: ED:3C:1B:DE:A3:7E:FD:C4:EA:CB:55:4E:B8:8B:10:C1:54:02:E8:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/2C4F5466E47A11F08671F3E23F6F56BC.roa
Signing time:             Mon 29 Dec 2025 05:49:43 +0000
ROA not before:           Mon 29 Dec 2025 05:49:43 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154462
IP address blocks:        144.79.220.0/23 maxlen: 23
                          144.79.220.0/24 maxlen: 24
                          144.79.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.crl
                          rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 07:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193C07, serialNumber=ED3C1BDEA37EFDC4EACB554EB88B10C15402E83A
        Validity
            Not Before: Dec 29 05:49:43 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69521677-77a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:10:d5:0f:0b:b4:6b:8a:61:06:40:ac:06:bc:
                    36:bd:34:c3:20:f4:bc:73:64:4f:d6:3c:b1:a2:f8:
                    38:77:9d:69:99:a7:5f:6b:f8:aa:d8:38:13:a9:6b:
                    e5:4d:60:55:7c:ac:7e:8d:c0:43:be:d3:e8:3e:dc:
                    70:46:63:eb:32:53:f1:7e:31:0c:39:f2:fb:ff:a0:
                    65:c8:d8:30:f9:78:25:10:00:fd:77:26:ac:c8:ed:
                    65:56:82:ba:cd:83:58:3c:cc:3b:d1:59:09:96:42:
                    1a:a9:56:c0:c2:6f:01:a4:0e:ed:db:35:3a:1a:17:
                    ca:b1:82:39:d2:dd:05:fd:3f:cc:0a:dd:e1:76:40:
                    5c:cb:06:66:55:84:1c:fd:50:28:3c:11:6e:79:db:
                    c9:20:4a:e3:a0:b3:e6:12:eb:57:ff:a3:03:64:fe:
                    5e:91:60:73:bf:67:be:fc:6f:ed:46:4d:62:18:ca:
                    19:1f:f9:93:c0:d7:8c:06:fc:fd:7d:dc:7e:ff:69:
                    11:c1:5b:e1:20:0a:1f:69:f7:40:bf:ad:89:ed:b5:
                    eb:fe:9f:8f:c3:f2:ce:27:c1:a8:5d:3f:9c:1a:58:
                    ca:54:f3:dd:ed:6d:02:60:e7:97:87:2d:85:d1:23:
                    1c:db:42:87:57:09:f3:14:b2:12:52:21:4a:bb:f1:
                    8f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:24:9A:43:58:F8:15:A6:F8:0F:3D:91:23:34:7E:DD:E5:90:C5:CA
            X509v3 Authority Key Identifier:
                keyid:ED:3C:1B:DE:A3:7E:FD:C4:EA:CB:55:4E:B8:8B:10:C1:54:02:E8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/2C4F5466E47A11F08671F3E23F6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:60:bf:1f:6a:64:32:1e:af:1c:e5:e7:f7:72:4c:84:8c:38:
         81:03:50:3d:a8:c0:c7:d9:3a:bc:1b:7c:25:ac:b4:f0:68:42:
         62:62:ae:4b:ab:ae:dc:87:50:f5:3b:3c:68:25:7b:dc:1d:d8:
         c2:f0:a4:3f:e3:5c:49:df:04:e0:e6:3c:66:18:ba:55:de:92:
         5b:cf:7f:d3:b5:ff:20:8a:e7:b8:ad:14:07:d9:0a:13:fe:27:
         1a:5d:43:5b:50:8c:7b:26:63:1d:e1:11:9b:f9:37:b6:11:1c:
         04:c8:22:4c:61:48:57:31:25:45:56:6a:a6:22:9f:c4:26:46:
         dc:7d:89:99:c3:07:2d:10:96:25:cd:76:b3:a3:30:a6:ff:4d:
         a0:83:67:01:b1:b5:4c:c4:2a:f7:f6:25:8b:40:ed:f6:ba:e0:
         f3:dc:8b:64:49:5f:0b:72:6f:d9:2e:7a:c0:e8:3f:b8:f4:36:
         c6:c2:9d:c7:2a:d2:98:a9:81:1c:eb:76:12:43:24:48:3a:c7:
         ff:e7:21:38:7a:ba:c3:36:6c:a0:24:0a:81:4a:c9:da:15:3a:
         61:c1:c6:bf:07:98:d9:99:dc:bc:d7:0b:da:7f:b4:ce:85:6d:
         5a:c8:5b:c4:12:eb:e6:bb:5d:82:78:58:bf:de:89:d2:97:5b:
         94:3d:a5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 17:55:33 2026 by rpki-client