This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/6A5F29CED8A511F0B3F453F094D3641D.roa
File:                     6A5F29CED8A511F0B3F453F094D3641D.roa (raw, json)
Hash identifier:          V4JYvS6vIh92au5uufnZnSFxlfzupkzvK15Gc19h2ao=
Subject key identifier:   12:FC:43:83:02:C2:59:3D:2B:DF:8C:EF:50:2B:FF:45:A6:0E:6F:15
Certificate issuer:       /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Certificate serial:       010C
Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/6A5F29CED8A511F0B3F453F094D3641D.roa
Signing time:             Sun 14 Dec 2025 04:29:01 +0000
ROA not before:           Sun 14 Dec 2025 04:29:01 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152698
IP address blocks:        2001:df4:13c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl
                          rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
        Validity
            Not Before: Dec 14 04:29:01 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=693e3d0d-1dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:58:59:35:c5:90:f8:3b:f1:d0:09:e1:71:d5:
                    0c:cc:1d:1d:40:86:e3:7e:5b:3a:82:fc:71:f0:92:
                    bc:31:94:7b:a3:44:7c:4a:71:2d:26:94:8a:17:5d:
                    25:a1:3f:8e:d1:d3:68:c4:6b:dc:46:08:c8:6f:77:
                    6f:e9:00:8e:a3:23:72:64:14:a0:99:e3:e4:dd:6a:
                    ce:ca:d6:e1:a6:46:a6:44:30:bf:65:17:9e:f9:68:
                    59:ed:0e:9a:ea:0e:c6:07:73:7a:df:c0:c4:e7:3b:
                    6e:46:d4:2f:54:c5:a7:74:89:16:51:6f:6a:b8:50:
                    32:48:fc:1e:0c:a3:32:4b:f9:d4:db:ff:7e:c0:c1:
                    23:e5:76:7e:b6:8f:8a:eb:74:06:7f:d4:76:78:a5:
                    28:1d:8a:2e:18:5c:f4:f7:2a:62:22:80:ab:4f:53:
                    ef:ca:44:a4:c7:2b:d1:11:f0:b1:f8:c0:8d:d4:ed:
                    15:ad:36:5c:93:49:43:2f:79:2f:50:e4:04:6b:56:
                    f1:c5:0c:0e:6d:f6:d1:d0:d0:6e:06:24:9c:0a:0c:
                    de:0e:15:9c:13:66:6d:51:a7:2e:c6:cf:71:01:1c:
                    9c:80:c8:09:61:7e:68:6d:8f:98:62:f2:c9:4e:e4:
                    38:c9:a2:3b:29:3d:91:fb:2d:10:46:7a:f2:4e:47:
                    29:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FC:43:83:02:C2:59:3D:2B:DF:8C:EF:50:2B:FF:45:A6:0E:6F:15
            X509v3 Authority Key Identifier:
                keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/6A5F29CED8A511F0B3F453F094D3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:13c1::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:36:d3:7e:ff:2b:e0:10:b3:26:31:c0:0a:51:11:36:19:10:
         24:d2:83:c4:30:0c:f8:ee:28:d6:65:06:a9:dd:79:9a:a0:34:
         b2:f6:c8:df:39:ab:c2:87:d9:96:b5:02:ba:ef:00:eb:f5:f1:
         49:8e:7e:72:38:3e:e2:e8:32:6f:18:75:81:66:69:43:dc:5a:
         9d:ad:89:c4:b1:c8:ab:fb:63:91:a4:ba:a2:e0:cb:2c:8c:0b:
         58:2d:3f:21:5f:45:a9:e0:0b:2a:ef:57:84:a0:a4:ef:73:4f:
         29:38:41:b4:cf:1e:a7:3f:ab:dc:19:b6:7c:13:4f:58:e8:0f:
         11:4f:af:d2:b2:e1:cb:3f:dd:9a:21:2d:f0:49:88:14:7f:54:
         1a:97:ee:1a:9b:76:a4:ba:3f:19:ae:97:af:ae:f9:24:7b:92:
         9f:79:08:02:ed:4b:64:7e:df:4a:f1:61:7e:fc:b1:19:c9:cd:
         61:5c:a8:3b:81:91:3a:9e:43:ed:31:65:09:7c:94:04:5b:8c:
         9d:b5:e5:1b:98:68:80:39:d0:af:e1:a4:b7:74:2b:2e:38:25:
         82:02:9e:9e:bb:b1:1e:f4:0d:df:91:12:2f:ec:dc:0c:2c:9f:
         34:ec:53:59:37:22:53:3b:13:81:96:b0:0f:c6:64:53:87:be:
         1e:91:0b:65
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJEQTkxMTAvBgNVBAUTKEI0RTdFMzQ0QURDRTM2RDg0RjFGM0FCQ0NEMTRCMjRD
MTUxMkJCQUEwHhcNMjUxMjE0MDQyOTAxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTNlM2QwZC0xZGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAulhZNcWQ+Dvx0AnhcdUMzB0dQIbjfls6gvxx8JK8MZR7o0R8SnEtJpSKF10l
oT+O0dNoxGvcRgjIb3dv6QCOoyNyZBSgmePk3WrOytbhpkamRDC/ZRee+WhZ7Q6a
6g7GB3N638DE5ztuRtQvVMWndIkWUW9quFAySPweDKMyS/nU2/9+wMEj5XZ+to+K
63QGf9R2eKUoHYouGFz09ypiIoCrT1PvykSkxyvREfCx+MCN1O0VrTZck0lDL3kv
UOQEa1bxxQwObfbR0NBuBiScCgzeDhWcE2ZtUacuxs9xARycgMgJYX5obY+YYvLJ
TuQ4yaI7KT2R+y0QRnryTkcpbQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFBL8Q4MC
wlk9K9+M71Ar/0WmDm8VMB8GA1UdIwQYMBaAFLTn40StzjbYTx86vM0UskwVEruq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8zNkE1MzBGNjQ0
QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050aFBIenE4elJTeVRCVVN1
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RPZmpSSzNPTnRoUEh6cTh6UlN5VEJVU3U2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJEQTkvMzZBNTMwRjY0NEJEMTFFRkI3M0RCNzdCQzRGOUFFMDIvNkE1RjI5Q0VE
OEE1MTFGMEIzRjQ1M0YwOTREMzY0MUQucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ30E8EwDQYJKoZIhvcNAQELBQADggEBAK02037/K+AQ
syYxwApRETYZECTSg8QwDPjuKNZlBqndeZqgNLL2yN85q8KH2Za1ArrvAOv18UmO
fnI4PuLoMm8YdYFmaUPcWp2ticSxyKv7Y5GkuqLgyyyMC1gtPyFfRangCyrvV4Sg
pO9zTyk4QbTPHqc/q9wZtnwTT1joDxFPr9Ky4cs/3ZohLfBJiBR/VBqX7hqbdqS6
Pxmul6+u+SR7kp95CALtS2R+30rxYX78sRnJzWFcqDuBkTqeQ+0xZQl8lARbjJ21
5RuYaIA50K/hpLd0Ky44JYICnp67sR70Dd+REi/s3AwsnzTsU1k3IlM7E4GWsA/G
ZFOHvh6RC2U=
-----END CERTIFICATE-----
Generated at Wed Dec 24 17:31:55 2025 by rpki-client