This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/78C65D926B0B11EFBFE25881C4F9AE02.roa
File:                     78C65D926B0B11EFBFE25881C4F9AE02.roa (raw, json)
Hash identifier:          sAIqbSA37kZfhhIbSPeW/xlNAowJO0Dbs/ojqnCmLqE=
Subject key identifier:   AD:DE:19:80:8E:9D:7D:68:A7:BE:D9:3B:6C:01:EB:6B:52:68:2C:D2
Certificate issuer:       /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Certificate serial:       010F
Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/78C65D926B0B11EFBFE25881C4F9AE02.roa
Signing time:             Sat 13 Dec 2025 05:04:02 +0000
ROA not before:           Sat 13 Dec 2025 05:04:02 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     23467
IP address blocks:        64.251.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
                          rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 04:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
        Validity
            Not Before: Dec 13 05:04:02 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=693cf3c2-ab2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d3:b9:cf:28:02:01:16:1f:0d:a3:87:5a:40:
                    2f:7d:cc:8d:a2:6a:61:a7:05:32:f4:9b:91:83:42:
                    c8:95:46:46:5f:9a:6a:4e:37:b1:03:5f:0d:21:1f:
                    8e:a8:ab:bd:a3:5a:f8:7b:93:d4:0e:4f:39:7a:c7:
                    91:0e:c5:e3:f0:81:3c:98:53:65:4a:93:8b:51:58:
                    11:1f:3b:22:f3:5c:92:bf:10:6a:a0:b5:d6:1b:6c:
                    57:9e:c0:17:ab:8f:2e:1b:08:b7:bb:9b:fa:d4:91:
                    85:70:5f:d2:38:82:00:b3:9e:69:a5:c4:c5:69:ad:
                    5f:df:54:6c:c1:70:56:93:55:69:ee:67:82:9c:a6:
                    9e:66:54:6c:9a:51:a3:1a:38:66:63:99:c1:25:3c:
                    7b:08:cc:2d:13:74:15:28:bd:ff:43:f7:3a:79:c5:
                    80:5d:00:d5:ca:98:9b:7c:fe:d6:68:5c:5d:28:2f:
                    34:66:fc:12:8c:8c:06:9f:37:1c:3c:c6:f9:56:9e:
                    9b:8a:00:c0:83:56:1f:2f:77:25:7f:28:b9:74:9d:
                    23:75:ad:db:86:69:a6:3b:f5:54:e3:3d:9e:3e:cc:
                    66:b4:47:1e:ea:f8:00:b5:af:34:b4:df:9d:b6:ae:
                    ab:4c:b6:2e:76:9a:0e:a2:7f:ff:d8:5b:fa:71:8e:
                    0c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DE:19:80:8E:9D:7D:68:A7:BE:D9:3B:6C:01:EB:6B:52:68:2C:D2
            X509v3 Authority Key Identifier:
                keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/78C65D926B0B11EFBFE25881C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.251.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a9:96:ca:af:8d:d8:7b:ba:b6:90:c1:17:c0:61:a8:8a:a3:3f:
         24:8d:5f:26:5f:15:77:58:a3:6e:49:82:b6:b8:aa:57:40:ad:
         af:5a:40:83:77:b2:49:33:e7:b0:55:68:19:d4:f8:86:5b:c7:
         c9:4e:cb:75:e6:4d:fa:4c:69:9a:79:39:7b:d7:b1:ff:6e:2c:
         f0:b1:a9:7b:50:e0:80:ef:10:d5:83:49:15:85:1f:08:8c:65:
         55:33:b7:7b:58:f0:5e:2c:67:f4:71:ff:32:df:d9:a6:d4:c4:
         b7:d2:4a:f0:7c:79:eb:c3:aa:eb:5f:8d:c8:a1:6f:c9:7d:79:
         4e:61:e1:b9:6b:7b:96:e0:e7:1f:3d:96:e2:44:a6:f9:50:0a:
         da:49:00:c2:80:84:51:68:0d:5b:55:5d:53:b9:82:d1:ef:33:
         6d:df:cb:80:3c:ea:23:0b:40:60:be:57:a0:ae:71:81:d5:44:
         9f:d1:fb:d6:ff:fa:e9:c9:3a:6a:a2:af:f3:d3:b3:a2:37:8f:
         ba:a8:b6:43:3b:44:64:b8:29:13:1e:61:47:95:9c:6f:43:cf:
         47:41:66:10:5b:42:f6:06:8c:b4:77:55:08:f9:bd:62:5c:53:
         79:15:25:53:12:54:57:1d:52:81:b4:28:05:d3:2a:0c:60:b1:
         6f:97:c6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 03:34:19 2025 by rpki-client