This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/F084D9AADF1B11F0BDFBE1B1616F56BC.roa
File:                     F084D9AADF1B11F0BDFBE1B1616F56BC.roa (raw, json)
Hash identifier:          yfzcOl58QHWsxj/XdVdFOBJQ6VIhvnY3q000dZ/BJ44=
Subject key identifier:   72:6A:94:04:68:90:11:98:DE:83:96:BF:7C:30:C8:50:9B:7F:45:C5
Certificate issuer:       /CN=A912B666/serialNumber=3508197A10FEA46A718463314FEBA93944B6248B
Certificate serial:       16
Authority key identifier: 35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/F084D9AADF1B11F0BDFBE1B1616F56BC.roa
Signing time:             Mon 22 Dec 2025 09:52:34 +0000
ROA not before:           Mon 22 Dec 2025 09:52:34 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152698
IP address blocks:        2001:df6:5941::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl
                          rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B666, serialNumber=3508197A10FEA46A718463314FEBA93944B6248B
        Validity
            Not Before: Dec 22 09:52:34 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=694914e2-6cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8f:32:96:a2:33:36:dd:f7:76:4a:ba:6e:89:
                    d9:fa:c6:ec:15:93:fa:c7:44:01:fe:e4:15:ae:1e:
                    81:19:7f:90:63:47:9e:16:62:0b:9b:d7:0b:26:d4:
                    3c:d1:e3:5d:5f:79:78:28:94:c4:9c:81:fa:83:1c:
                    e1:d5:ea:e4:db:66:6a:0d:1a:df:cc:99:52:45:b2:
                    c4:88:99:2a:90:c9:33:08:70:80:11:ae:c6:d9:3d:
                    1a:1d:1f:c5:d2:5e:da:81:e8:cd:70:d5:13:9a:0b:
                    92:55:35:ed:f3:2e:a4:53:9b:eb:21:ef:15:67:5b:
                    32:3f:a9:96:59:5f:0b:88:68:94:00:34:d6:1d:21:
                    ad:fc:cb:ba:5e:cf:ca:e1:ca:16:c0:8b:83:47:00:
                    ed:3a:99:3d:fc:27:b2:98:27:28:23:38:21:57:08:
                    65:ec:e9:4f:05:cf:95:bf:ab:43:1f:33:1f:d8:33:
                    2d:7c:94:2b:7b:8b:d2:6d:18:04:96:3f:dc:28:ff:
                    2c:ae:57:ba:ed:c6:b0:59:f4:ef:08:96:46:66:37:
                    7f:d0:c1:2f:6c:03:ca:cb:6f:be:30:f9:46:2f:4e:
                    e2:d8:d6:24:5c:94:b2:4f:d7:aa:07:4d:39:48:69:
                    77:ad:e4:4f:79:05:a3:fa:ef:b5:ad:d2:8b:d9:79:
                    19:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6A:94:04:68:90:11:98:DE:83:96:BF:7C:30:C8:50:9B:7F:45:C5
            X509v3 Authority Key Identifier:
                keyid:35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/F084D9AADF1B11F0BDFBE1B1616F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:5941::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:1f:99:6c:0f:dc:07:08:fd:48:cf:58:77:4d:77:4c:8c:f4:
         3d:64:90:55:af:8a:a1:f6:d9:ea:b7:01:1b:34:bf:e3:b2:9e:
         09:b6:84:cf:f0:ee:1b:36:c2:0f:5c:5c:91:5e:17:4a:f1:a9:
         16:fe:27:cd:ea:a0:26:25:95:8a:c9:6f:7c:e5:9f:35:24:a5:
         3d:3f:d3:a1:25:5e:f8:cb:8e:da:52:63:d3:8e:58:34:55:6d:
         e4:04:6f:25:48:01:87:99:51:87:32:78:87:b3:84:dd:7f:dd:
         54:4c:de:f0:82:b8:a7:e3:18:4f:81:73:f3:5c:98:d8:34:39:
         8e:8a:75:95:88:e0:42:05:23:0f:84:65:59:75:73:89:31:80:
         bb:8b:06:ad:00:53:8e:36:b2:5a:ee:28:5b:82:4f:ba:f7:77:
         8b:aa:ac:4a:cf:55:58:52:97:2d:91:75:84:70:d2:2e:7b:b4:
         93:be:ae:98:ca:50:c2:31:ad:c6:49:46:98:da:3a:e5:bf:19:
         df:6f:42:ff:93:01:7f:fe:30:d2:30:e9:a2:28:ff:de:57:eb:
         96:d4:1c:68:dc:f9:5c:a4:d4:56:35:d1:98:eb:2b:db:97:8d:
         05:02:6c:f1:54:58:bf:47:9f:a1:33:1d:be:47:3d:64:ae:82:
         94:1d:c0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:22:35 2025 by rpki-client