This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/FC3E29FC85E111EFB365E459C4F9AE02.roa
File:                     FC3E29FC85E111EFB365E459C4F9AE02.roa (raw, json)
Hash identifier:          Y3P581iwNBtM7GAEmYXEwohRufrsNXEYBtPTu9fYw2o=
Subject key identifier:   E6:CD:DD:3D:71:FD:F1:F1:AE:26:66:C1:4E:FB:2C:A5:C7:D9:A6:59
Certificate issuer:       /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4
Certificate serial:       DE
Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/FC3E29FC85E111EFB365E459C4F9AE02.roa
Signing time:             Tue 09 Dec 2025 03:42:57 +0000
ROA not before:           Tue 09 Dec 2025 03:42:57 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139005
IP address blocks:        160.187.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 04:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C68AD, serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4
        Validity
            Not Before: Dec  9 03:42:57 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69379ac1-7d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:37:97:34:2e:77:69:6b:57:69:0c:64:c2:46:
                    15:81:8f:90:17:69:47:78:ba:42:0f:4e:85:9b:af:
                    86:0b:42:30:13:90:a0:cf:02:00:ac:a4:f9:7e:32:
                    33:d3:fc:1e:14:5f:ff:64:4b:74:8e:00:56:35:fd:
                    32:89:e1:e9:65:78:22:6b:86:f5:2b:3e:12:41:9d:
                    d0:bf:cc:a0:24:0a:8f:2e:9d:10:05:59:1e:15:67:
                    06:d0:df:e6:42:f5:32:5f:f9:16:39:ca:fb:e7:d9:
                    13:19:fd:a9:ce:e0:05:3e:6d:61:bc:aa:bf:cf:29:
                    b4:76:23:83:75:54:02:de:87:ba:f2:22:9a:12:9f:
                    59:87:aa:9d:e2:1e:bc:91:29:09:0c:bd:8a:bf:8e:
                    74:49:f4:84:ee:0f:23:2a:90:01:0a:2d:34:43:ec:
                    a5:3b:7b:54:be:fa:9f:bf:04:f8:db:84:90:c9:86:
                    c0:24:d9:65:7d:da:f7:28:a8:1c:78:61:c1:58:b9:
                    aa:ea:5f:79:10:2d:32:3e:7e:6f:e7:00:04:0c:21:
                    ca:c7:18:6c:cf:79:79:5b:8b:a3:d8:0a:07:a8:bf:
                    1f:c8:df:15:97:a2:f5:22:fe:a4:2b:47:0e:5f:d1:
                    74:76:6b:2c:ce:0e:71:16:3a:cc:2b:25:04:bf:0e:
                    c7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CD:DD:3D:71:FD:F1:F1:AE:26:66:C1:4E:FB:2C:A5:C7:D9:A6:59
            X509v3 Authority Key Identifier:
                keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/FC3E29FC85E111EFB365E459C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:92:ff:de:ba:f0:39:89:7f:b1:10:e4:7e:20:13:59:0a:59:
         f6:d3:5d:ab:43:5d:52:fe:44:8f:5d:62:2d:65:54:51:38:aa:
         8b:ab:f5:d5:cd:c3:fa:4a:74:15:75:d0:dc:96:01:33:e7:b5:
         83:c5:93:52:cc:78:6b:e9:c0:df:d2:7c:a3:60:2b:61:32:74:
         a2:6a:c3:7f:0f:11:ca:5c:ae:87:70:44:87:73:c1:0f:b9:d4:
         a7:00:49:bf:03:47:f7:f4:80:a8:ae:86:62:d4:59:35:05:e9:
         89:6b:50:77:a4:7d:af:90:72:e0:5b:49:1a:d9:e5:47:d1:91:
         0f:e5:73:c1:53:47:16:63:c0:5c:e0:45:5f:49:3b:9e:34:6d:
         03:51:7c:69:25:0a:c7:1c:0d:de:89:90:50:e3:1e:b7:30:1d:
         9f:8f:ef:a2:8c:2a:41:8c:91:0d:bf:ae:6d:ea:29:36:ff:7e:
         9d:fd:79:68:cc:a0:94:0a:4e:e9:82:dc:e7:03:92:37:7f:01:
         65:f0:19:3a:37:7f:ac:ba:aa:15:52:74:be:8c:d8:32:62:ea:
         08:99:9a:e3:56:5e:eb:a2:6f:71:17:46:1f:86:f1:49:92:c7:
         3f:1e:f9:b9:a6:30:63:32:be:16:05:7d:ef:84:a0:6e:af:9a:
         12:81:9c:19
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY4QUQxMTAvBgNVBAUTKEU5RjJDRTQ4M0YxQjA2RDI5RDVFQTJBQkUzNzVCRDFE
MjJBOUUxQzQwHhcNMjUxMjA5MDM0MjU3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTM3OWFjMS03ZDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1TeXNC53aWtXaQxkwkYVgY+QF2lHeLpCD06Fm6+GC0IwE5CgzwIArKT5fjIz
0/weFF//ZEt0jgBWNf0yieHpZXgia4b1Kz4SQZ3Qv8ygJAqPLp0QBVkeFWcG0N/m
QvUyX/kWOcr759kTGf2pzuAFPm1hvKq/zym0diODdVQC3oe68iKaEp9Zh6qd4h68
kSkJDL2Kv450SfSE7g8jKpABCi00Q+ylO3tUvvqfvwT424SQyYbAJNllfdr3KKgc
eGHBWLmq6l95EC0yPn5v5wAEDCHKxxhsz3l5W4uj2AoHqL8fyN8Vl6L1Iv6kK0cO
X9F0dmsszg5xFjrMKyUEvw7HZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFObN3T1x
/fHxriZmwU77LKXH2aZZMB8GA1UdIwQYMBaAFOnyzkg/GwbSnV6iq+N1vR0iqeHE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjhBRC80OURFRUU2NDg1
RTAxMUVGQTc1ODc2NTVDNEY5QUUwMi82ZkxPU0Q4YkJ0S2RYcUtyNDNXOUhTS3A0
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZmTE9TRDhiQnRLZFhxS3I0M1c5SFNLcDRjUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzY4QUQvNDlERUVFNjQ4NUUwMTFFRkE3NTg3NjU1QzRGOUFFMDIvRkMzRTI5RkM4
NUUxMTFFRkIzNjVFNDU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGgu9gwDQYJKoZIhvcNAQELBQADggEBAH+S/9668DmJf7EQ
5H4gE1kKWfbTXatDXVL+RI9dYi1lVFE4qour9dXNw/pKdBV10NyWATPntYPFk1LM
eGvpwN/SfKNgK2EydKJqw38PEcpcrodwRIdzwQ+51KcASb8DR/f0gKiuhmLUWTUF
6YlrUHekfa+QcuBbSRrZ5UfRkQ/lc8FTRxZjwFzgRV9JO540bQNRfGklCsccDd6J
kFDjHrcwHZ+P76KMKkGMkQ2/rm3qKTb/fp39eWjMoJQKTumC3OcDkjd/AWXwGTo3
f6y6qhVSdL6M2DJi6giZmuNWXuuib3EXRh+G8UmSxz8e+bmmMGMyvhYFfe+EoG6v
mhKBnBk=
-----END CERTIFICATE-----
Generated at Mon Dec 22 14:30:08 2025 by rpki-client