This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/E209029ACE9311F09FB94826C4F9AE02.roa
File:                     E209029ACE9311F09FB94826C4F9AE02.roa (raw, json)
Hash identifier:          PKPuV9j23qJT+Dxwsl2rpgb4JgUm9Dn3bd7jYxdkirs=
Subject key identifier:   9E:17:EC:7D:20:B3:F2:24:7B:F3:99:DF:B9:4B:62:A8:85:D1:B3:C6
Certificate issuer:       /CN=A918E1C4/serialNumber=F0495737FFA88E19FF1E152A56021EC756D8529B
Certificate serial:       02
Authority key identifier: F0:49:57:37:FF:A8:8E:19:FF:1E:15:2A:56:02:1E:C7:56:D8:52:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ElXN_-ojhn_HhUqVgIex1bYUps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/E209029ACE9311F09FB94826C4F9AE02.roa
Signing time:             Mon 01 Dec 2025 08:58:20 +0000
ROA not before:           Mon 01 Dec 2025 08:58:20 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     153432
IP address blocks:        2001:df6:5f40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.crl
                          rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ElXN_-ojhn_HhUqVgIex1bYUps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 06:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E1C4, serialNumber=F0495737FFA88E19FF1E152A56021EC756D8529B
        Validity
            Not Before: Dec  1 08:58:20 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=692d58ab-0630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8f:9c:cb:f7:ab:e0:ef:eb:ec:37:87:66:8e:
                    33:4c:c2:51:d3:f8:5e:70:8a:ca:98:c2:46:2a:2a:
                    57:c0:51:03:01:0e:df:e1:b7:28:f0:d9:5b:b5:25:
                    fe:69:fe:ee:5d:ac:f2:af:cd:84:94:d4:15:d6:e0:
                    34:f4:29:e7:8d:32:6a:a6:90:28:8b:7c:9e:6a:f1:
                    fc:67:29:4f:87:0a:68:35:7f:f5:f2:c0:dd:b0:a8:
                    d4:3f:3e:ac:16:06:39:fc:ed:0f:b8:bf:97:1a:f9:
                    7f:62:13:66:a8:4d:1c:58:40:0d:6e:99:2e:0c:dd:
                    3c:51:b1:b9:37:a7:35:1a:ec:fa:8e:1a:19:98:e0:
                    19:3d:78:59:db:23:93:27:a8:75:80:84:5a:fb:ed:
                    ad:75:86:db:6b:4f:14:69:71:9c:de:bc:11:aa:10:
                    43:85:04:9f:9f:70:99:9d:4d:d3:f6:27:be:46:9e:
                    f1:f8:1a:4e:91:d5:2f:ec:4c:3c:8e:43:e8:58:08:
                    7d:8c:e6:14:55:79:d5:3c:f2:2f:54:4e:f5:f7:1c:
                    55:82:ae:fd:07:32:58:2c:58:a8:fc:82:3e:0d:d3:
                    7f:b6:92:25:1a:67:94:0c:f1:62:f3:bd:40:67:ff:
                    73:ea:df:79:89:f7:af:1e:a6:35:8e:46:4f:f9:12:
                    5f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:17:EC:7D:20:B3:F2:24:7B:F3:99:DF:B9:4B:62:A8:85:D1:B3:C6
            X509v3 Authority Key Identifier:
                keyid:F0:49:57:37:FF:A8:8E:19:FF:1E:15:2A:56:02:1E:C7:56:D8:52:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ElXN_-ojhn_HhUqVgIex1bYUps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/E209029ACE9311F09FB94826C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:5f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:a1:80:28:5b:47:b6:42:c9:bf:5d:c8:db:59:24:bc:30:4d:
         93:57:ee:67:dd:6f:6a:5b:c5:5c:fd:aa:26:00:aa:a9:e2:26:
         25:07:90:1f:57:a7:25:86:48:2f:19:9c:dc:56:77:cb:97:b4:
         80:00:3e:37:c2:9b:44:d2:0d:1e:c8:98:07:ea:1b:88:df:73:
         89:4c:ed:c2:74:06:ba:47:4f:eb:60:8f:a9:7c:28:f8:3e:b4:
         01:23:3e:15:16:f7:da:75:a3:0c:ac:91:53:50:5f:35:76:f2:
         7d:3a:8a:7e:43:0a:04:db:78:9e:92:e5:ce:bd:38:21:42:49:
         c6:fe:c4:4e:6f:2e:ba:7e:b9:53:a7:a1:ab:c8:0f:02:15:d6:
         57:9f:d1:a2:86:71:ad:52:1c:7a:65:8d:9e:e2:2f:1f:8d:c6:
         dc:16:bd:8d:1b:0f:8f:78:bf:08:e5:3e:c3:8e:a4:70:87:c9:
         7f:dc:a3:62:cf:20:13:ce:67:3e:69:77:5b:fc:7d:47:80:d4:
         84:3b:db:71:79:87:ba:f2:b5:96:f3:91:22:23:39:8e:06:12:
         02:32:f4:1b:d2:d9:b9:fc:bd:f4:94:6e:a1:72:d6:75:33:29:
         bd:bd:5b:66:e1:7d:c6:d8:ba:5c:f7:8c:68:31:e7:cc:67:e9:
         0c:7f:bc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:27:58 2025 by rpki-client