This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/0F59B14CC55011F08C55AF0AC4F9AE02.roa
File:                     0F59B14CC55011F08C55AF0AC4F9AE02.roa (raw, json)
Hash identifier:          s2gchgumm5kqev0LEXRxjXbLTYWjDSMQAi6Y60e4bgY=
Subject key identifier:   4B:BF:E2:6C:4A:B8:F9:70:90:E8:62:02:38:36:62:7C:BB:8A:00:11
Certificate issuer:       /CN=A918306F/serialNumber=BEB2EDBCF5C706E8E3018C006AC7613C6C88F5AD
Certificate serial:       02
Authority key identifier: BE:B2:ED:BC:F5:C7:06:E8:E3:01:8C:00:6A:C7:61:3C:6C:88:F5:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrLtvPXHBujjAYwAasdhPGyI9a0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/0F59B14CC55011F08C55AF0AC4F9AE02.roa
Signing time:             Wed 19 Nov 2025 14:00:09 +0000
ROA not before:           Wed 19 Nov 2025 14:00:09 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     154373
IP address blocks:        2001:df6:54c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.crl
                          rsync://rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrLtvPXHBujjAYwAasdhPGyI9a0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 06:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918306F, serialNumber=BEB2EDBCF5C706E8E3018C006AC7613C6C88F5AD
        Validity
            Not Before: Nov 19 14:00:09 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=691dcd69-22ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:86:20:88:d7:79:d4:82:03:fc:bd:55:84:0c:
                    fa:7c:a2:87:38:38:d1:e8:a4:91:72:fc:91:49:0d:
                    cf:42:86:57:07:d6:e1:27:77:10:79:a3:29:d2:ab:
                    6a:bf:93:b4:07:84:89:72:d2:8b:f8:3c:14:be:ef:
                    cb:c2:48:e8:56:d4:d1:5e:76:3b:be:b1:94:0e:d7:
                    26:16:3a:f0:db:df:ff:c8:9e:67:65:b5:a5:5f:60:
                    b4:67:aa:f9:0e:2a:2c:30:d7:7c:55:fc:80:99:39:
                    d6:38:04:77:1a:34:d0:30:a0:9b:8d:5d:fc:50:52:
                    39:8c:29:6c:5c:f7:e3:58:08:a2:6f:3d:e5:ac:86:
                    74:1f:1d:71:b1:00:17:ed:e9:67:79:af:1e:63:47:
                    ce:c4:65:49:01:16:07:6f:48:46:ed:41:44:da:3b:
                    ac:10:cd:28:b9:ed:21:54:b7:e0:97:65:73:43:29:
                    61:fe:b7:bc:e1:a8:02:3b:b1:4c:80:f3:ad:6a:19:
                    b6:9f:f5:37:ba:3f:65:3d:f7:de:b0:0e:41:60:33:
                    27:8b:44:49:a7:12:1d:70:f4:e0:42:05:cf:08:ac:
                    d7:2f:d6:4f:68:89:5e:7c:41:56:d4:c2:f5:73:6d:
                    20:1e:b3:4a:6d:8e:67:5d:a5:30:15:e5:19:19:26:
                    a9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BF:E2:6C:4A:B8:F9:70:90:E8:62:02:38:36:62:7C:BB:8A:00:11
            X509v3 Authority Key Identifier:
                keyid:BE:B2:ED:BC:F5:C7:06:E8:E3:01:8C:00:6A:C7:61:3C:6C:88:F5:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrLtvPXHBujjAYwAasdhPGyI9a0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/0F59B14CC55011F08C55AF0AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:54c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:54:5a:50:7e:b3:75:a8:07:33:cc:42:96:0c:d5:a6:ce:7b:
         66:30:3b:e4:68:15:d5:7e:a9:4a:d9:f0:33:68:fd:64:a2:6a:
         66:9a:0f:28:36:a8:cc:72:41:c9:82:0a:3e:40:e7:28:d3:70:
         69:3b:bf:fc:5e:37:6e:8a:10:96:d1:ab:97:16:a2:ae:00:64:
         23:a3:a1:0e:49:59:58:ec:3f:1b:9d:8c:a4:c8:52:e9:55:34:
         44:cf:9f:57:2b:08:fb:0d:b8:02:77:79:50:11:72:1e:d2:7b:
         b3:95:17:17:cd:c0:73:a9:d6:2d:1c:c6:67:7c:c4:4a:d4:ca:
         ee:3f:e7:dc:ce:96:c9:7d:2c:44:c7:97:be:6a:0c:79:f9:b4:
         0a:c0:59:87:c3:03:5d:c7:cc:1c:46:cd:55:d5:4e:14:4f:ad:
         de:e0:8d:52:21:c1:94:b1:16:a9:b9:8b:c7:13:2b:2a:24:51:
         92:dd:42:c0:b3:e9:41:d5:42:5d:4e:53:cb:b4:32:bb:3b:61:
         ce:cd:76:ee:bf:3f:d8:80:1c:94:49:c1:fe:13:c0:a0:85:c2:
         99:60:18:1a:a0:d8:ed:5a:8a:f1:23:64:c2:35:3e:b6:35:70:
         5f:c4:b4:a3:db:62:8e:15:77:ed:87:20:67:dd:ab:57:31:2a:
         70:28:a1:4d
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MzA2RjExMC8GA1UEBRMoQkVCMkVEQkNGNUM3MDZFOEUzMDE4QzAwNkFDNzYxM0M2
Qzg4RjVBRDAeFw0yNTExMTkxNDAwMDlaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5MWRjZDY5LTIyZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQChhiCI13nUggP8vVWEDPp8ooc4ONHopJFy/JFJDc9ChlcH1uEndxB5oynSq2q/
k7QHhIly0ov4PBS+78vCSOhW1NFedju+sZQO1yYWOvDb3//InmdltaVfYLRnqvkO
Kiww13xV/ICZOdY4BHcaNNAwoJuNXfxQUjmMKWxc9+NYCKJvPeWshnQfHXGxABft
6Wd5rx5jR87EZUkBFgdvSEbtQUTaO6wQzSi57SFUt+CXZXNDKWH+t7zhqAI7sUyA
861qGbaf9Te6P2U9996wDkFgMyeLREmnEh1w9OBCBc8IrNcv1k9oiV58QVbUwvVz
bSAes0ptjmddpTAV5RkZJqmtAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUS7/ibEq4
+XCQ6GICODZifLuKABEwHwYDVR0jBBgwFoAUvrLtvPXHBujjAYwAasdhPGyI9a0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzMDZGLzZBOTJEMTlFQzU0
RTExRjBBNDlDNEY4NkM0RjlBRTAyL3ZyTHR2UFhIQnVqakFZd0Fhc2RoUEd5STlh
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdnJMdHZQWEhCdWpqQVl3QWFzZGhQR3lJOWEwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MzA2Ri82QTkyRDE5RUM1NEUxMUYwQTQ5QzRGODZDNEY5QUUwMi8wRjU5QjE0Q0M1
NTAxMUYwOEM1NUFGMEFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABDfZUwDANBgkqhkiG9w0BAQsFAAOCAQEAIlRaUH6zdagH
M8xClgzVps57ZjA75GgV1X6pStnwM2j9ZKJqZpoPKDaozHJByYIKPkDnKNNwaTu/
/F43booQltGrlxairgBkI6OhDklZWOw/G52MpMhS6VU0RM+fVysI+w24And5UBFy
HtJ7s5UXF83Ac6nWLRzGZ3zEStTK7j/n3M6WyX0sRMeXvmoMefm0CsBZh8MDXcfM
HEbNVdVOFE+t3uCNUiHBlLEWqbmLxxMrKiRRkt1CwLPpQdVCXU5Ty7Qyuzthzs12
7r8/2IAclEnB/hPAoIXCmWAYGqDY7VqK8SNkwjU+tjVwX8S0o9tijhV37YcgZ92r
VzEqcCihTQ==
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:30:42 2025 by rpki-client