This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/34885E7CE09A11F0A3604C36446F56BC.roa
File:                     34885E7CE09A11F0A3604C36446F56BC.roa (raw, json)
Hash identifier:          Eenbg/d8N6GXpoDZ+ERX3cJqhC8+/ZQTonCpInxR83A=
Subject key identifier:   B5:DE:DF:35:E2:64:B7:88:D2:E6:23:1A:F0:75:79:B1:FA:FD:CE:77
Certificate issuer:       /CN=A91DB53B/serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
Certificate serial:       05
Authority key identifier: 44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/34885E7CE09A11F0A3604C36446F56BC.roa
Signing time:             Wed 24 Dec 2025 07:28:56 +0000
ROA not before:           Wed 24 Dec 2025 07:28:56 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154402
IP address blocks:        144.79.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl
                          rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 07:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB53B, serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
        Validity
            Not Before: Dec 24 07:28:56 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=694b9638-965f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9a:6e:c0:e3:db:55:55:41:ea:e0:53:31:21:
                    5d:7e:f0:71:7a:d0:e8:f2:cb:80:ed:1a:17:71:d8:
                    c2:39:77:6a:a2:00:1f:42:e4:8e:51:43:f3:b2:07:
                    62:c0:1d:83:37:92:fe:de:ff:86:73:1c:9e:d6:1d:
                    6c:5e:ec:d2:31:e2:f9:fd:3f:87:b9:c0:99:ee:e0:
                    ac:81:18:37:22:71:36:0d:ae:8f:44:72:fa:d8:a5:
                    4b:8d:af:a5:e6:2c:a4:c7:5a:0e:ea:2e:bf:70:85:
                    c3:54:67:38:85:24:92:98:03:3a:bc:5a:e9:29:d2:
                    ba:17:a4:fa:f0:4e:fc:29:e7:9f:41:47:a0:6f:ab:
                    38:c1:f6:ff:c9:dc:dc:8a:03:47:fe:d5:82:0f:93:
                    43:d4:65:c7:59:2f:34:36:e7:90:5a:65:a8:a1:16:
                    38:d3:10:f0:4b:31:66:3c:e8:e3:70:ec:1c:96:92:
                    d2:9c:96:b1:01:9e:47:fc:ab:2a:31:f2:61:7f:d9:
                    a8:e9:02:76:32:8f:4f:7d:a7:7f:f9:80:52:09:85:
                    5a:59:b9:48:3f:b1:80:1e:b7:71:de:40:35:71:55:
                    ae:44:33:05:9a:5c:d1:98:71:e9:e5:20:fc:df:b9:
                    81:4e:43:ba:6e:9e:dc:96:e7:bb:7b:6a:38:38:2e:
                    d8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DE:DF:35:E2:64:B7:88:D2:E6:23:1A:F0:75:79:B1:FA:FD:CE:77
            X509v3 Authority Key Identifier:
                keyid:44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/34885E7CE09A11F0A3604C36446F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:76:d8:a1:32:db:9c:28:9d:5a:7e:a5:1c:b8:13:ed:a0:2d:
         bb:98:c3:46:f7:37:45:14:10:30:41:fb:68:7c:86:7f:23:b9:
         2d:97:c6:8a:ee:92:b7:24:06:9b:2a:82:64:53:8f:10:65:18:
         82:dc:1a:9f:4e:1d:7a:c9:fc:dd:51:2d:ba:e0:33:3e:91:82:
         1b:15:0a:ff:74:e1:3e:1c:f1:c7:9d:92:88:6c:3a:72:85:91:
         75:4a:a9:c4:c6:9c:4f:d2:3b:8f:c0:bb:73:4b:0a:89:17:7c:
         14:d2:15:49:f1:be:28:bf:82:ec:eb:83:43:7c:88:db:3a:ea:
         36:d2:6a:c0:e3:ab:5b:d7:59:f2:3f:91:3a:39:a7:f8:0c:f8:
         d2:73:42:c9:60:95:93:77:e6:e5:42:8e:85:08:8f:f3:7c:30:
         d6:e5:82:86:6e:2f:68:03:26:3c:f5:40:73:71:e4:dd:66:e0:
         8d:95:b7:45:2f:e8:84:d5:97:f0:2b:1b:0a:96:41:4f:48:d4:
         8e:3e:07:b8:da:25:37:77:ea:e4:8c:e1:e8:d2:80:bf:bd:ea:
         7e:d8:89:71:2f:66:65:48:82:75:b7:b1:f1:30:b2:c6:65:5e:
         d9:8c:50:59:aa:e0:f0:83:47:9b:6b:a6:f3:a9:97:0b:cc:7c:
         30:70:53:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:22:36 2025 by rpki-client