This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/5D8B2B06D90B11F0A960BEC67CD3641D.roa
File:                     5D8B2B06D90B11F0A960BEC67CD3641D.roa (raw, json)
Hash identifier:          azYdkvf28Hm+el5cCXE3/Bju5Cb90/2fU/85uVO1sCM=
Subject key identifier:   07:41:79:74:CD:75:DB:B7:56:57:26:F9:3A:7D:AC:55:8A:2F:F7:41
Certificate issuer:       /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Certificate serial:       34F8
Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/5D8B2B06D90B11F0A960BEC67CD3641D.roa
Signing time:             Sun 14 Dec 2025 16:38:49 +0000
ROA not before:           Sun 14 Dec 2025 16:38:49 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     38197
IP address blocks:        112.213.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
                          rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 14:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13560 (0x34f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
        Validity
            Not Before: Dec 14 16:38:49 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=693ee818-d798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:39:b1:5c:f9:77:bd:80:99:5f:f7:a7:59:11:
                    c4:c1:43:ba:f1:13:64:c8:b0:b9:23:3d:c1:24:17:
                    ce:68:62:a7:42:cb:13:77:c8:d7:01:74:48:09:53:
                    45:88:dc:ab:e7:dc:60:4e:9f:02:73:be:42:56:f3:
                    e2:46:4f:65:db:8e:ec:9c:bc:9d:08:af:8d:33:45:
                    66:22:dd:fc:4f:3f:2d:96:a2:c5:77:e8:9e:d4:e5:
                    16:17:1e:16:d0:0b:4d:74:8d:54:83:d3:2d:7e:2a:
                    d7:f8:5d:36:18:3f:61:be:6b:09:2b:4e:df:e3:1c:
                    38:03:58:9a:4e:58:55:5d:3c:63:21:34:ca:b9:8b:
                    03:3c:3a:86:31:75:35:bb:c9:86:f4:2f:e6:59:a7:
                    84:2e:14:a4:ff:34:3d:d6:fa:db:ca:02:1d:63:a0:
                    e5:26:dd:71:47:1f:f9:10:41:aa:f2:9f:97:e7:43:
                    d0:f5:30:01:aa:9f:72:ea:c9:1c:38:b9:f7:63:3c:
                    77:89:a0:60:77:0a:ae:e0:d4:bc:39:2e:ac:ec:79:
                    a8:53:ee:7e:63:75:7b:f0:a0:49:24:1d:3c:66:d5:
                    28:d6:6f:3b:29:c1:2d:0b:a5:58:62:3b:cc:8c:e4:
                    57:41:e6:91:f1:70:f6:27:ba:fd:1f:1f:d3:b4:12:
                    da:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:41:79:74:CD:75:DB:B7:56:57:26:F9:3A:7D:AC:55:8A:2F:F7:41
            X509v3 Authority Key Identifier:
                keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/5D8B2B06D90B11F0A960BEC67CD3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.213.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:56:31:f6:1a:65:5c:32:c6:29:70:b8:b1:69:fd:83:1f:8e:
         23:16:65:26:21:a4:45:6e:06:d4:f2:7b:2d:10:fe:9e:5e:f4:
         fc:a8:0c:b5:1a:fa:20:75:83:2d:15:a2:2c:54:e9:ab:7a:ee:
         34:6f:0a:21:a1:ec:9d:6d:87:ac:58:82:88:e1:07:6d:e8:0c:
         0c:76:fc:2c:7d:2c:1a:2a:e4:f2:c3:18:a9:d1:4f:ea:ba:c6:
         f5:fa:27:28:84:7c:33:29:8f:04:0f:de:cd:54:26:f5:d2:8e:
         65:5e:06:55:49:88:6d:3c:c1:71:c0:c9:72:85:ba:01:54:1d:
         8e:38:9b:35:b3:69:f7:c8:33:2d:a4:37:f3:26:e2:72:ad:1c:
         df:a3:c6:e2:60:c1:0e:6d:b5:14:23:5d:ba:94:a6:12:f0:b9:
         39:f8:03:36:a2:2b:dc:de:ef:6a:c1:7a:61:c6:55:79:1b:ca:
         f9:b6:11:93:42:01:70:d6:79:2d:c8:55:1d:d2:c1:96:07:f8:
         ca:7c:67:4c:22:8f:ba:25:c6:04:85:c8:ee:ab:90:c9:9d:d9:
         f0:7b:cf:89:f3:bb:95:03:7d:d9:48:e1:78:60:5a:73:2b:f8:
         81:1b:b3:aa:ce:11:61:f4:76:ac:3c:37:54:12:f4:95:7c:5c:
         0b:c6:66:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:09:32 2025 by rpki-client