This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/11D4EBBABDFA11F08D47856DC4F9AE02.roa
File:                     11D4EBBABDFA11F08D47856DC4F9AE02.roa (raw, json)
Hash identifier:          +yUMs2QhbOLp8IUh9/T9V8ki+77tccWA9/o1nEfb+yg=
Subject key identifier:   F5:61:7A:79:2C:EB:FD:1A:94:B0:40:23:A5:5D:89:A1:8D:8E:7F:06
Certificate issuer:       /CN=A91357FC/serialNumber=8325D0C68AABCFD9AAC89F6AED684D4992EF3A75
Certificate serial:       02
Authority key identifier: 83:25:D0:C6:8A:AB:CF:D9:AA:C8:9F:6A:ED:68:4D:49:92:EF:3A:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/11D4EBBABDFA11F08D47856DC4F9AE02.roa
Signing time:             Mon 10 Nov 2025 05:56:59 +0000
ROA not before:           Mon 10 Nov 2025 05:56:59 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     135410
IP address blocks:        2001:df6:49c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl
                          rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 06:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91357FC, serialNumber=8325D0C68AABCFD9AAC89F6AED684D4992EF3A75
        Validity
            Not Before: Nov 10 05:56:59 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69117eaa-a792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:59:65:c6:ec:c8:6c:7a:39:4e:ef:41:20:84:
                    cf:4b:28:44:f3:1e:4a:25:0c:97:eb:5a:bb:fa:fc:
                    23:7c:df:a7:f7:dd:e6:ff:e8:fd:06:c2:aa:c0:81:
                    18:c8:81:71:36:16:57:42:96:27:59:84:38:3a:be:
                    93:2f:ed:06:db:2e:8c:8b:87:23:dd:c3:aa:aa:43:
                    14:17:89:be:ad:eb:7b:5b:bf:64:55:78:7c:d9:07:
                    eb:e4:ce:6b:e1:b9:80:1b:c3:00:6e:7a:94:3e:48:
                    f6:21:59:fb:72:90:ce:95:28:7a:59:f4:d2:38:b9:
                    92:59:05:98:35:9d:c7:8f:d3:26:7b:aa:94:98:1e:
                    1c:b8:45:34:50:3e:82:e2:e4:9a:8e:ff:8e:66:03:
                    c0:61:51:cf:70:45:a8:1b:19:d5:7d:96:ce:13:3f:
                    3e:9e:61:a9:7f:48:02:9b:0c:ad:8e:8e:84:35:9d:
                    e5:50:26:57:dd:dd:b2:87:e8:7b:58:79:e0:5a:0d:
                    cb:4c:ee:23:64:24:a9:ed:ee:89:3f:2d:f1:70:3e:
                    ba:08:60:cc:dc:19:f6:67:19:ce:4d:87:6a:82:74:
                    e2:1e:2f:f8:6d:af:c1:80:f7:67:84:c9:d7:cd:80:
                    31:01:80:44:9b:07:3e:b3:cc:a7:ca:9a:8f:f9:1a:
                    28:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:61:7A:79:2C:EB:FD:1A:94:B0:40:23:A5:5D:89:A1:8D:8E:7F:06
            X509v3 Authority Key Identifier:
                keyid:83:25:D0:C6:8A:AB:CF:D9:AA:C8:9F:6A:ED:68:4D:49:92:EF:3A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/11D4EBBABDFA11F08D47856DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:49c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:3b:52:86:c3:98:fa:b2:d2:8a:52:8b:86:4e:af:48:cb:df:
         03:e9:79:e1:3a:b1:9b:00:e1:ff:5d:e7:3f:ee:29:9d:ab:d3:
         46:b3:f9:69:d8:e7:24:dd:aa:52:96:7f:33:f0:bf:a0:e4:0c:
         e7:5d:75:7d:48:ef:61:12:f9:02:ff:1b:1c:e7:38:1b:98:2e:
         6e:1c:0d:17:d1:53:cf:ea:1a:0e:20:5a:f4:16:25:f8:9d:43:
         ee:0a:d4:ae:00:2e:69:01:d6:ee:5d:69:9e:20:16:8b:eb:9e:
         7b:d1:4a:23:eb:45:e2:3b:01:bc:0a:a8:e0:1d:a5:95:86:63:
         e7:43:bd:4b:c0:68:9c:73:e2:f4:eb:e2:06:ac:50:5d:3c:5e:
         27:e2:5e:26:66:d1:1c:96:a4:e6:b9:1d:40:62:45:b2:bd:67:
         c7:72:08:9b:be:34:cd:9b:72:ac:99:a5:7f:08:22:95:67:cf:
         4f:6e:11:a3:73:b0:99:ab:01:92:7c:57:0f:17:a8:00:19:56:
         b3:64:5c:9a:4d:c6:40:79:39:46:80:47:70:12:89:fd:b1:73:
         21:45:59:b1:af:33:aa:cd:6e:0b:c3:4f:e7:f3:e0:5a:ec:57:
         70:e4:36:49:70:8d:2b:21:f2:42:0d:af:b1:07:61:59:ea:6f:
         fa:9e:9c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:19:35 2025 by rpki-client