This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/A18C777C6F5F11EFAF849B28C4F9AE02.roa
File:                     A18C777C6F5F11EFAF849B28C4F9AE02.roa (raw, json)
Hash identifier:          67w4cTtuf8Ims02A+heNAOHRPel7W1rTLPVEF7YAI0M=
Subject key identifier:   80:3F:0C:9B:F7:A9:8F:45:18:19:C7:13:0E:51:6E:EE:D5:A1:F3:21
Certificate issuer:       /CN=A91F89D9/serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E
Certificate serial:       E2
Authority key identifier: 17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/A18C777C6F5F11EFAF849B28C4F9AE02.roa
Signing time:             Fri 07 Nov 2025 01:11:03 +0000
ROA not before:           Fri 07 Nov 2025 01:11:03 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138558
IP address blocks:        160.30.184.0/24 maxlen: 24
                          160.30.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl
                          rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 03:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89D9, serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E
        Validity
            Not Before: Nov  7 01:11:03 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=690d4727-abf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:03:f0:2a:6a:7c:d9:60:b4:4f:20:62:8c:7f:
                    d4:0c:e3:6b:72:46:57:3c:0b:c9:82:5d:2b:57:ce:
                    21:69:e3:14:f1:b7:56:71:6f:3c:02:20:f0:f6:4f:
                    e8:dd:9d:f2:da:b2:a1:88:64:84:b4:d8:07:e5:42:
                    59:40:a3:c4:44:9f:65:f1:11:d7:89:4a:08:30:1d:
                    e9:4e:70:b2:94:88:d9:f2:e6:7f:5e:65:6f:72:71:
                    54:54:18:6b:9f:ec:66:f2:b2:08:36:17:4e:b5:c7:
                    72:63:3c:69:f1:de:a8:14:2f:37:e0:bf:6f:45:0e:
                    cf:99:83:d8:22:0a:4a:67:a8:0a:e5:c4:c1:a6:47:
                    05:44:84:8b:f1:5d:4a:54:f1:00:03:15:25:23:41:
                    ce:f3:74:18:b4:18:0d:66:76:12:48:41:b4:3a:a2:
                    f8:c0:cb:2a:3c:6c:e6:ac:dc:9b:09:1c:32:bd:7f:
                    d0:c4:6d:29:20:1d:11:ed:d8:92:7a:87:43:9b:52:
                    61:02:b6:27:bf:7f:73:4c:44:c2:e5:ca:4c:93:08:
                    a9:20:4d:1a:8e:e7:c0:af:98:f3:31:13:81:69:5d:
                    f4:a7:84:07:51:16:c3:17:62:27:9c:c1:88:74:7a:
                    fa:a9:a7:57:4b:88:20:6e:e6:9b:20:6e:6b:73:ae:
                    a8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3F:0C:9B:F7:A9:8F:45:18:19:C7:13:0E:51:6E:EE:D5:A1:F3:21
            X509v3 Authority Key Identifier:
                keyid:17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/A18C777C6F5F11EFAF849B28C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:15:fe:e3:69:58:ba:64:f4:9c:fc:ff:a3:74:05:1f:fa:f7:
         d6:75:97:8a:45:77:1c:d8:8c:41:99:0a:5b:5b:46:66:80:bc:
         cb:5d:27:3d:c6:b1:57:6e:94:c9:96:e0:f8:ac:f1:fa:b6:f3:
         f1:b4:94:2b:43:98:1b:77:ac:14:1e:f9:25:ff:ca:88:86:a0:
         33:19:c9:d8:a8:dc:5e:1b:c3:ef:f9:72:53:b2:c3:4d:af:87:
         b6:ec:37:64:40:9d:ed:09:23:af:41:9d:6e:74:59:01:1c:0c:
         cf:26:02:93:64:af:54:6e:a4:ab:88:e3:b5:c5:5a:80:c1:0a:
         f9:be:4c:1e:9a:fb:ac:42:21:42:a2:d7:fb:2f:8f:5a:b8:d6:
         48:bc:ff:55:1a:7f:e5:28:40:08:14:3b:9e:8b:72:cb:28:8d:
         be:f7:3e:f6:59:52:06:55:fa:39:b1:9e:12:13:8e:43:2f:53:
         a7:de:ad:09:e5:e7:72:4c:18:66:8b:49:5d:fd:89:48:d5:22:
         f6:b0:ad:8a:95:da:a0:6c:34:5a:94:f6:06:9d:5e:56:d9:fb:
         a0:22:97:44:00:1a:97:ac:ea:81:72:8c:af:0e:4f:fa:97:1e:
         58:dd:8a:9d:f1:8b:ef:ef:2c:f7:8d:67:e2:91:90:ef:50:db:
         94:49:7a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:50:54 2025 by rpki-client