This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/F67388B8C8EE11F0B296D571C4F9AE02.roa
File:                     F67388B8C8EE11F0B296D571C4F9AE02.roa (raw, json)
Hash identifier:          c5ZB2ZHBUWip+FpUZrCGdjuP34/HCD1gUejKT/4LLsI=
Subject key identifier:   C4:DB:06:35:20:30:66:25:62:D9:1D:D9:4D:2B:B0:4A:A3:43:D6:98
Certificate issuer:       /CN=A91A15FB/serialNumber=92E633978F3C5C2D0860ACDB0E1DD512100E89EF
Certificate serial:       010F
Authority key identifier: 92:E6:33:97:8F:3C:5C:2D:08:60:AC:DB:0E:1D:D5:12:10:0E:89:EF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/F67388B8C8EE11F0B296D571C4F9AE02.roa
Signing time:             Mon 24 Nov 2025 04:35:11 +0000
ROA not before:           Mon 24 Nov 2025 04:35:11 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     138997
IP address blocks:        160.22.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.crl
                          rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 02:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A15FB, serialNumber=92E633978F3C5C2D0860ACDB0E1DD512100E89EF
        Validity
            Not Before: Nov 24 04:35:11 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6923e07f-9a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9f:6f:de:39:5d:0a:8b:92:6f:20:69:eb:f8:
                    73:cc:ad:b6:d1:dc:4b:26:75:f2:3e:e4:b7:9b:3b:
                    96:67:cc:f0:f9:4c:0f:8b:9b:f7:3e:f9:db:ac:10:
                    1f:74:e5:0f:f0:85:9b:ae:ef:fe:5a:b9:36:ed:f2:
                    51:8b:57:7c:d8:4d:67:d9:4b:a8:0a:6c:f6:c7:0c:
                    f4:da:e0:41:f3:e3:ee:e2:2a:c9:e9:02:ba:65:d4:
                    fd:72:2a:46:83:9f:cb:87:01:23:ad:e6:d7:80:c3:
                    d9:51:dc:84:56:bc:b2:46:42:13:65:b9:c0:cb:24:
                    58:d2:4d:b4:12:7c:ee:a1:2d:0c:4c:d1:4b:ba:73:
                    4f:4c:95:a7:d1:4d:29:b5:94:f1:21:d2:49:06:33:
                    8f:a5:bb:b3:d7:2d:8b:6f:da:67:f9:3b:2e:ce:5b:
                    b3:be:30:c2:61:2c:f7:a3:15:85:ee:b4:78:7c:5d:
                    e8:12:6c:f1:dc:43:19:55:cf:a9:4f:a0:e2:8f:1a:
                    9f:2c:7d:b6:2a:dc:82:f6:f4:f0:c0:3a:ee:47:87:
                    c9:70:68:14:cb:96:15:fb:e0:b6:23:5d:f0:cf:37:
                    9d:24:1f:3e:c5:1a:c2:47:58:c2:82:e8:cb:6b:75:
                    8e:05:a0:24:7b:88:26:5f:86:21:9c:cd:a3:34:47:
                    9c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DB:06:35:20:30:66:25:62:D9:1D:D9:4D:2B:B0:4A:A3:43:D6:98
            X509v3 Authority Key Identifier:
                keyid:92:E6:33:97:8F:3C:5C:2D:08:60:AC:DB:0E:1D:D5:12:10:0E:89:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/F67388B8C8EE11F0B296D571C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:00:1f:c9:5d:1b:8d:f2:55:cf:b7:d8:3d:91:1a:71:28:49:
         96:49:ce:a8:66:eb:5d:06:16:57:8e:45:62:93:1f:7d:c0:5f:
         d8:41:7c:44:00:4b:e5:d4:f6:b3:28:9e:fd:cb:2e:b1:e2:24:
         c4:1c:1b:72:75:1a:ff:6f:73:05:f7:ba:c5:bd:39:8e:dc:f8:
         65:bd:86:c2:99:36:02:99:76:32:a9:fc:ba:a5:5e:08:93:75:
         32:d6:b2:a6:99:fc:30:71:bd:c7:6e:68:8c:79:ba:0b:81:a9:
         67:3e:39:89:97:61:94:74:65:a6:13:58:f3:89:d4:cf:58:df:
         44:eb:1d:73:34:25:29:61:5a:22:b1:f9:64:3d:07:c5:c1:69:
         b1:98:c8:fc:ea:df:09:86:c3:b5:6f:e3:1e:d5:89:7b:f5:33:
         e1:54:b0:67:52:d3:97:1a:86:de:75:8b:95:08:23:8f:57:dd:
         d5:08:19:6b:aa:22:76:6a:45:90:c8:00:31:17:83:08:4b:06:
         6d:8d:71:f1:c5:e6:9c:00:34:8f:66:39:d7:35:1b:22:96:5f:
         cb:72:33:94:82:40:8c:c0:27:de:63:7f:e1:49:dd:ef:1f:80:
         87:4c:30:02:81:d3:f6:75:06:1c:91:cf:d2:51:95:70:b4:05:
         98:ef:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 11:58:50 2025 by rpki-client