This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/8B9109C06B8911F0A0F62851C4F9AE02.roa
File:                     8B9109C06B8911F0A0F62851C4F9AE02.roa (raw, json)
Hash identifier:          MQngZQ/wU1MkMIqSO6wrur4Hqr2/VRq/8pjF4hDEg7I=
Subject key identifier:   90:D1:48:36:A6:EA:47:28:B8:F1:F9:78:99:3A:D2:A2:94:36:A2:54
Certificate issuer:       /CN=A91D488C/serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
Certificate serial:       4D
Authority key identifier: 10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/8B9109C06B8911F0A0F62851C4F9AE02.roa
Signing time:             Tue 25 Nov 2025 05:52:49 +0000
ROA not before:           Tue 25 Nov 2025 05:52:49 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     17539
IP address blocks:        160.250.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl
                          rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D488C, serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
        Validity
            Not Before: Nov 25 05:52:49 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69254431-324b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:74:81:96:08:7b:03:18:72:ce:b5:8d:5e:32:
                    f2:b2:cb:66:d3:44:12:a0:49:29:af:1c:ec:f3:f0:
                    e8:20:25:3b:80:32:82:10:bd:90:e2:8e:e1:e3:54:
                    4b:f1:be:34:6b:4c:84:0b:62:69:3e:44:6a:37:2a:
                    7c:3f:d9:78:23:03:ae:a7:f3:4e:2d:df:70:31:1b:
                    af:c4:95:76:06:e2:de:fb:8f:3c:87:f8:88:70:96:
                    eb:80:a9:16:ef:66:1c:35:d3:be:39:57:53:f2:d8:
                    30:ca:f1:6e:2f:59:3e:17:d9:ab:8b:a6:fa:59:1d:
                    99:1e:3a:99:2e:a0:38:6d:59:0c:77:37:ab:b6:20:
                    99:4f:91:e5:1b:fe:b9:33:5e:aa:0a:71:2f:f2:db:
                    79:47:ef:da:24:3c:7f:7b:5f:21:2c:6e:97:de:14:
                    35:af:aa:4e:0e:39:2e:6d:c7:4a:c7:0b:44:b9:82:
                    40:7b:7d:ea:0b:0c:ae:e2:b1:32:58:73:73:28:78:
                    a5:12:3f:c9:40:9b:3c:ad:5c:f9:70:f9:03:ed:b8:
                    e4:71:dd:de:9d:53:eb:bc:20:3d:30:34:df:ad:2e:
                    78:bd:67:1f:64:e4:82:99:8d:6d:a2:4c:e8:45:6a:
                    bd:c3:54:cf:c4:01:0e:c9:06:77:81:c8:a5:e4:cb:
                    83:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D1:48:36:A6:EA:47:28:B8:F1:F9:78:99:3A:D2:A2:94:36:A2:54
            X509v3 Authority Key Identifier:
                keyid:10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/8B9109C06B8911F0A0F62851C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:34:a4:f5:6b:2f:c3:ae:c7:57:c2:76:ce:0c:7d:b4:b0:56:
         e3:d9:4c:2e:b2:0f:12:89:28:b4:2b:65:b7:37:ed:18:c4:20:
         8a:b2:c3:40:e0:4d:ad:77:d7:5d:3b:77:50:31:78:8f:f2:e1:
         dc:eb:df:1a:04:c6:fa:46:ed:9b:c3:40:c4:d7:97:0f:d1:50:
         fd:b9:bd:8f:cd:a2:0e:d3:e1:0c:7d:8b:4c:cd:a7:43:38:c2:
         e6:78:10:17:b0:9e:4e:a8:84:83:dc:ec:42:52:0f:34:a8:58:
         bc:81:ad:75:35:b1:77:07:2c:e6:ad:27:a8:5b:e5:bd:c2:a3:
         32:ab:da:7a:26:1c:66:14:a4:b1:f5:af:3c:dc:e2:7e:73:72:
         c5:41:2a:5b:69:7f:ea:cc:6e:ed:ee:c3:75:7f:64:3c:fd:9f:
         23:29:02:19:70:47:69:87:cc:8f:ad:d9:c9:5a:65:ab:bd:96:
         96:45:7d:86:3c:11:d5:c9:45:db:80:f7:dc:85:b1:db:19:5a:
         33:99:93:e3:62:8b:bb:10:3e:0b:6e:e8:93:7d:30:72:71:c9:
         ad:0f:3f:de:e9:b9:b8:83:ee:70:a7:b3:95:1a:ef:d4:c9:ae:
         2a:19:00:41:a0:cb:b2:c2:4b:02:e0:d2:32:41:a1:14:e3:98:
         f9:56:2e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 13:20:36 2025 by rpki-client