This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/DD004670C39711F0A241F86DC4F9AE02.roa
File:                     DD004670C39711F0A241F86DC4F9AE02.roa (raw, json)
Hash identifier:          I1SBr9macQO5KX8j2VSd052BaAoC6H36TX7tUwfX6hM=
Subject key identifier:   7E:04:A7:EC:DC:1B:54:BE:67:E2:31:9E:4F:2F:CE:C9:9E:F8:ED:0A
Certificate issuer:       /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD
Certificate serial:       0C97
Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/DD004670C39711F0A241F86DC4F9AE02.roa
Signing time:             Tue 02 Dec 2025 17:17:59 +0000
ROA not before:           Tue 02 Dec 2025 17:17:59 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139051
IP address blocks:        185.205.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl
                          rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3223 (0xc97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD
        Validity
            Not Before: Dec  2 17:17:59 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692f1f47-7596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:84:e9:d9:d9:f0:ee:1a:e6:99:81:81:21:23:
                    2e:ff:9a:2f:73:1d:b7:f7:09:94:19:ae:1e:2f:72:
                    89:57:1c:0b:7e:d7:c5:e5:8c:f2:59:02:b9:1f:25:
                    48:0f:4a:56:1b:2b:8a:dd:5c:96:b7:54:18:dc:5e:
                    34:aa:4c:80:17:0d:79:45:fd:81:04:24:60:37:1a:
                    aa:ac:19:9e:2f:45:35:5c:9e:d7:a1:43:b9:55:70:
                    ea:f3:cc:00:33:71:e8:da:55:bd:96:81:95:d4:0f:
                    f5:0b:d6:dd:b2:43:f2:d0:a9:d9:44:e3:c3:bd:94:
                    51:8b:9a:4d:31:dd:16:fd:65:de:f2:7e:3e:ee:d2:
                    5b:18:a5:a1:97:ea:b0:9b:1a:6b:cf:d6:ad:58:af:
                    f1:4c:96:5c:b0:7f:11:dc:39:fb:14:76:5b:11:9c:
                    fb:a0:07:5d:f7:56:ea:ef:8d:78:ed:ab:fc:09:f9:
                    61:ea:14:1c:1c:0b:9a:6d:3c:28:26:33:49:9b:51:
                    f5:56:50:0b:74:dd:86:55:7d:83:c6:0c:34:ca:7e:
                    1c:eb:fb:c8:22:b3:82:8c:89:0e:1b:e0:98:89:c4:
                    f3:18:07:42:c6:de:22:b9:36:98:b1:72:46:cc:b0:
                    49:8f:38:46:d1:08:2e:34:2e:ca:e4:99:ca:d5:67:
                    63:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:04:A7:EC:DC:1B:54:BE:67:E2:31:9E:4F:2F:CE:C9:9E:F8:ED:0A
            X509v3 Authority Key Identifier:
                keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/DD004670C39711F0A241F86DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.205.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:5a:fa:ed:14:d3:1e:19:b3:e4:2e:6a:ed:a6:f6:29:ff:88:
         5f:65:9f:6a:71:8f:54:cd:7f:60:77:20:79:17:60:40:ba:9f:
         e1:1b:dc:55:ba:2c:49:b8:4b:13:aa:f5:30:c2:57:34:3c:32:
         0f:77:3f:39:96:5f:1c:99:de:64:9a:96:cb:4b:07:e5:5b:ae:
         4c:b1:be:18:10:81:03:de:dc:25:08:b4:db:47:06:90:84:83:
         a3:6d:4a:1b:41:b0:36:0e:56:27:7e:d3:e2:43:63:8f:bc:df:
         3b:08:3c:db:3b:97:b9:c3:65:15:aa:2e:d9:b4:0a:bc:3d:5c:
         4a:d2:0b:ab:6e:e7:a8:8d:71:80:78:b8:c2:cd:06:3e:43:be:
         b1:19:aa:46:cd:df:ba:65:25:b0:11:d8:e1:e0:a8:96:56:fb:
         19:d2:a2:f4:ea:cc:73:e1:59:72:09:9f:6f:c5:79:c3:21:ce:
         0b:01:1f:54:17:e8:10:49:f8:ba:e6:cd:11:3a:b8:d1:39:8d:
         1d:1b:54:b3:fa:0c:c1:a2:c0:c5:70:eb:15:bf:be:c3:17:ed:
         3c:bc:3d:6d:a3:48:9e:d7:49:6a:14:ed:e7:54:63:f6:19:70:
         01:48:5d:d3:18:4c:cb:62:b8:e8:69:15:74:12:91:99:1f:dd:
         30:0d:7d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:14:44 2025 by rpki-client