This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/5905CBAEDFE111F083058845556F56BC.roa
File:                     5905CBAEDFE111F083058845556F56BC.roa (raw, json)
Hash identifier:          tjngiaTbmc86SPSoZ9fGRfmjwpDl19BR0h4yr8a1SrQ=
Subject key identifier:   D8:A4:2F:46:14:0F:51:CE:11:2A:C6:58:C9:3B:AB:04:A5:A8:B4:69
Certificate issuer:       /CN=A91B8070/serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6
Certificate serial:       93
Authority key identifier: 4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/5905CBAEDFE111F083058845556F56BC.roa
Signing time:             Tue 23 Dec 2025 09:25:40 +0000
ROA not before:           Tue 23 Dec 2025 09:25:40 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     216411
IP address blocks:        163.223.38.0/23 maxlen: 23
                          163.223.38.0/24 maxlen: 24
                          163.223.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl
                          rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 09:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8070, serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6
        Validity
            Not Before: Dec 23 09:25:40 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=694a6014-e6e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7b:bd:58:16:0d:a4:9f:e3:f5:0f:6c:ee:05:
                    44:7d:9a:23:66:55:c3:73:a9:70:37:b7:b9:c0:6b:
                    08:80:0b:23:dd:9e:97:a9:2d:34:3d:34:b1:e6:c6:
                    d6:ce:8c:34:1f:13:89:11:86:b0:a3:c6:d3:c1:e4:
                    f3:37:fc:81:36:14:6d:61:03:d0:84:f4:51:f6:d9:
                    e4:44:c5:e8:fc:0c:a1:28:e0:de:71:fe:03:1b:5c:
                    e3:27:0a:a1:c6:7e:21:39:a9:1d:a1:7c:92:69:42:
                    74:4d:9c:fb:7d:f1:77:99:0b:be:94:eb:29:a0:45:
                    81:80:fb:2c:5b:66:6f:8b:6c:92:94:c6:c7:be:88:
                    de:4a:67:51:59:4c:2d:d5:6a:8b:a2:50:30:7d:71:
                    96:77:79:62:fd:79:68:80:aa:0b:4d:77:68:4c:9b:
                    90:81:e6:66:90:09:6b:de:72:65:fe:d5:b2:7d:e9:
                    0e:c9:5c:86:ab:92:74:a8:79:f6:4e:85:2f:5a:58:
                    97:83:fb:d0:68:81:62:8c:77:da:f1:9e:ad:40:cd:
                    90:21:d2:e0:d1:df:42:08:8a:0e:ca:4f:c3:0d:59:
                    58:28:9a:fe:8c:ed:cb:46:a3:45:e9:76:e8:e2:dd:
                    00:4d:24:ad:12:a1:22:a3:18:5f:c5:d0:6b:7f:d9:
                    78:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A4:2F:46:14:0F:51:CE:11:2A:C6:58:C9:3B:AB:04:A5:A8:B4:69
            X509v3 Authority Key Identifier:
                keyid:4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/5905CBAEDFE111F083058845556F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:10:c6:4f:cd:9e:00:c0:33:35:d7:28:e6:32:59:df:39:af:
         cb:28:8d:4f:5d:ca:c7:55:ae:a0:4b:b2:7c:26:7f:24:21:6e:
         1e:9d:ac:dd:5f:c1:f9:fc:3d:8e:72:35:98:72:81:be:03:67:
         2f:52:23:83:4b:0a:3a:51:ef:26:06:60:52:ea:bb:fa:13:7e:
         a6:99:5b:7e:60:f2:1a:e5:e5:49:b2:62:2f:d2:21:75:3e:95:
         da:3c:64:9d:83:90:70:5b:f8:41:9a:ef:10:09:cb:78:92:e0:
         a8:96:f1:48:06:4c:91:d6:f7:fd:bf:f0:83:09:8f:1d:11:0d:
         85:40:7e:f3:11:1f:c5:6f:98:5a:3b:40:d0:b9:97:ba:8a:c5:
         d9:27:d7:67:4a:12:3c:78:6e:a7:c2:33:c2:ae:89:b3:b1:a4:
         27:cb:b3:93:1e:24:74:f2:0f:5a:60:9e:a9:d0:f6:58:8e:61:
         68:df:a8:ee:0d:97:4d:47:96:b6:61:78:ea:b3:18:17:36:98:
         55:52:a0:da:13:26:d8:80:46:02:b9:26:bb:48:f7:61:3a:1b:
         24:de:36:fa:d1:35:59:eb:5f:d2:01:93:61:3c:34:d1:92:38:
         38:fe:38:30:9b:c0:73:45:f2:35:9d:37:86:e3:5d:e4:54:9c:
         fb:a1:c5:6c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjgwNzAxMTAvBgNVBAUTKDRFRkI5M0I0OUJGMUJBNTYwMDhERkM2MDYwOEI1MjE2
QUVDOTlBQzYwHhcNMjUxMjIzMDkyNTQwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDDA02OTRhNjAxNC1lNmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuXu9WBYNpJ/j9Q9s7gVEfZojZlXDc6lwN7e5wGsIgAsj3Z6XqS00PTSx5sbW
zow0HxOJEYawo8bTweTzN/yBNhRtYQPQhPRR9tnkRMXo/AyhKODecf4DG1zjJwqh
xn4hOakdoXySaUJ0TZz7ffF3mQu+lOspoEWBgPssW2Zvi2ySlMbHvojeSmdRWUwt
1WqLolAwfXGWd3li/XlogKoLTXdoTJuQgeZmkAlr3nJl/tWyfekOyVyGq5J0qHn2
ToUvWliXg/vQaIFijHfa8Z6tQM2QIdLg0d9CCIoOyk/DDVlYKJr+jO3LRqNF6Xbo
4t0ATSStEqEioxhfxdBrf9l4lwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNikL0YU
D1HOESrGWMk7qwSlqLRpMB8GA1UdIwQYMBaAFE77k7Sb8bpWAI38YGCLUhauyZrG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODA3MC9BRTM2NDY5NjEz
ODQxMUYwQkM1RjQ1NDdDNEY5QUUwMi9UdnVUdEp2eHVsWUFqZnhnWUl0U0ZxN0pt
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R2dVR0SnZ4dWxZQWpmeGdZSXRTRnE3Sm1zWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjgwNzAvQUUzNjQ2OTYxMzg0MTFGMEJDNUY0NTQ3QzRGOUFFMDIvNTkwNUNCQUVE
RkUxMTFGMDgzMDU4ODQ1NTU2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGj3yYwDQYJKoZIhvcNAQELBQADggEBAF8Qxk/NngDAMzXX
KOYyWd85r8sojU9dysdVrqBLsnwmfyQhbh6drN1fwfn8PY5yNZhygb4DZy9SI4NL
CjpR7yYGYFLqu/oTfqaZW35g8hrl5UmyYi/SIXU+ldo8ZJ2DkHBb+EGa7xAJy3iS
4KiW8UgGTJHW9/2/8IMJjx0RDYVAfvMRH8VvmFo7QNC5l7qKxdkn12dKEjx4bqfC
M8KuibOxpCfLs5MeJHTyD1pgnqnQ9liOYWjfqO4Nl01HlrZheOqzGBc2mFVSoNoT
JtiARgK5JrtI92E6GyTeNvrRNVnrX9IBk2E8NNGSODj+ODCbwHNF8jWdN4bjXeRU
nPuhxWw=
-----END CERTIFICATE-----
Generated at Wed Dec 24 17:31:51 2025 by rpki-client