This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/4AB6B736DA3F11F0A550B47F8ED3641D.roa
File:                     4AB6B736DA3F11F0A550B47F8ED3641D.roa (raw, json)
Hash identifier:          o21jgh9wurw+Q8rhFWS/mFvCRGzFGONSERAdmnvicAQ=
Subject key identifier:   A8:D5:D5:F5:07:82:12:97:A0:A2:6D:93:EA:4D:F2:48:76:06:FA:D4
Certificate issuer:       /CN=A91471A0/serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD
Certificate serial:       03
Authority key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/4AB6B736DA3F11F0A550B47F8ED3641D.roa
Signing time:             Tue 16 Dec 2025 05:23:02 +0000
ROA not before:           Tue 16 Dec 2025 05:23:02 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     64050
IP address blocks:        43.226.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl
                          rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 05:23:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD
        Validity
            Not Before: Dec 16 05:23:02 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=6940ecb6-fff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2e:55:b2:79:e9:55:2f:19:a3:0f:ff:c5:18:
                    e4:f2:4c:8e:9b:11:e0:8b:a1:31:b4:bf:ec:dd:cb:
                    c4:c4:b6:57:50:71:ad:95:09:b2:b2:68:fe:a1:ea:
                    fd:ef:29:0b:bb:1f:04:34:de:bf:3d:5a:a3:e9:1b:
                    59:6b:8b:24:29:f3:4c:7d:e0:4c:1b:f7:68:8f:fb:
                    fd:63:04:b6:f6:92:ae:41:d1:16:11:29:52:de:1b:
                    80:78:e2:cb:dd:7c:e2:9e:ee:5c:07:d5:c6:69:86:
                    fd:42:16:4a:2b:20:95:5f:af:93:40:39:42:02:12:
                    e8:e3:3e:65:6d:b6:1d:ad:7d:54:d0:2f:b6:80:94:
                    35:06:19:74:dc:3a:88:f3:67:0b:55:63:72:f4:64:
                    14:53:b4:9c:9e:24:04:83:48:ce:c9:66:17:b3:02:
                    19:cd:fd:68:61:f3:93:b8:ec:2a:de:0a:67:4b:f5:
                    63:bf:54:17:85:b4:23:fa:d4:3f:89:bb:5f:cc:d2:
                    47:44:d3:94:47:67:ec:7a:b6:0e:c0:bb:13:5b:31:
                    3f:ac:54:7c:44:f9:84:b4:f1:53:27:3f:45:4d:56:
                    c2:f2:51:8d:18:6d:2b:40:62:0d:3b:ce:08:a7:d1:
                    ce:02:ae:30:e8:8f:d6:a1:83:a5:07:f7:4b:f6:bb:
                    9e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D5:D5:F5:07:82:12:97:A0:A2:6D:93:EA:4D:F2:48:76:06:FA:D4
            X509v3 Authority Key Identifier:
                keyid:DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/4AB6B736DA3F11F0A550B47F8ED3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:b9:a5:25:b2:e1:de:e1:5a:2e:2e:e5:8c:34:db:d5:93:89:
         ef:c6:8e:06:ae:4d:0d:f1:62:60:b2:a8:2d:38:d0:41:5f:14:
         43:a0:f7:03:fd:98:b6:6f:ae:3c:0c:e9:f7:11:cb:e9:99:03:
         13:3a:49:c8:30:be:b5:f1:16:8f:26:d3:03:67:56:fd:c3:a4:
         db:4e:bd:1f:ff:21:d2:50:bf:2a:7e:68:6e:66:b3:9a:79:fa:
         20:da:21:6e:c9:87:8a:54:21:b1:c6:79:02:b2:23:cc:45:52:
         8f:56:6d:73:f9:b9:4e:ab:b3:3a:7f:ee:8e:97:3c:2f:6d:03:
         2e:1b:4b:d4:b2:49:d2:37:b0:bc:f0:18:9b:d2:71:e3:c3:17:
         ed:ea:6e:a4:f7:43:de:0c:cb:0b:12:c8:05:57:78:ee:85:ba:
         62:75:45:84:9b:f8:7c:bc:be:15:04:bc:ea:4c:0b:94:4c:49:
         98:ae:07:42:e6:da:c4:a5:12:b5:9a:52:e5:d7:69:d2:f9:26:
         00:b7:7a:ca:e9:32:75:80:ea:bb:ed:df:fa:a2:a7:8b:c7:05:
         e1:88:c5:64:03:dc:a8:c0:1d:38:32:2b:d0:9a:36:8c:65:21:
         d0:cf:80:c2:e1:d4:c0:f1:b0:c2:bd:5f:ed:0b:1f:fc:21:e3:
         bc:38:34:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:27:21 2025 by rpki-client