This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/854A54FABB0611F0B8E77B27C4F9AE02.roa
File:                     854A54FABB0611F0B8E77B27C4F9AE02.roa (raw, json)
Hash identifier:          cnq1OPkQ7f3u/KF0x5I+NQc/PoHQU+xZcRAYZPjucKE=
Subject key identifier:   37:7F:57:FA:ED:27:04:4A:0B:8D:3C:3C:AF:8F:36:86:9F:A3:15:3C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       C6F7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/854A54FABB0611F0B8E77B27C4F9AE02.roa
Signing time:             Thu 06 Nov 2025 11:48:33 +0000
ROA not before:           Thu 06 Nov 2025 11:48:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134874
IP address blocks:        2406:27c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 12:14:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50935 (0xc6f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Nov  6 11:48:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=690c8b11-7fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:bf:6e:92:8f:e2:3b:83:01:16:b8:81:ec:
                    73:f0:91:e5:a5:f8:d2:29:51:ca:7d:19:28:ec:d2:
                    48:53:6e:48:30:08:c7:34:9b:70:17:76:4c:0e:61:
                    14:a8:dc:91:4e:d1:98:55:74:b9:0d:e8:90:7a:ce:
                    f5:ee:6a:c8:4c:a8:b8:12:dc:df:00:e6:54:bd:e6:
                    a1:10:de:c8:2e:db:ba:be:20:1d:90:a7:06:23:0a:
                    5c:8b:3c:11:ca:d6:c0:22:67:14:cb:9e:b2:64:50:
                    4c:b3:d2:f7:85:39:5d:71:07:55:a5:e6:2f:6f:a4:
                    25:95:b8:f2:a3:a2:c7:96:e5:bf:5b:1a:57:59:bf:
                    27:c2:c0:53:95:91:97:f9:fa:36:5d:e9:fe:20:54:
                    d8:18:c8:4f:40:3f:aa:1b:48:65:ec:09:bf:c0:3c:
                    f0:6d:e8:57:9e:10:25:17:b6:2d:f5:c5:4b:75:84:
                    4c:0a:77:09:18:f7:41:42:ea:d5:1d:9f:96:59:1f:
                    5c:bf:87:70:f3:ee:7f:50:30:5f:ca:66:1d:7f:0f:
                    3d:db:c1:5f:be:d5:5e:68:cb:13:c3:d8:d6:d3:33:
                    00:88:20:29:77:53:f6:fb:9f:31:63:56:60:03:ea:
                    8f:0b:2b:e1:7b:fa:52:20:bc:a2:f5:b3:8f:a1:4a:
                    45:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7F:57:FA:ED:27:04:4A:0B:8D:3C:3C:AF:8F:36:86:9F:A3:15:3C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/854A54FABB0611F0B8E77B27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:27c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:06:cf:d6:a8:02:22:b8:c6:0e:39:35:11:49:79:9d:d1:87:
         c0:14:c1:bf:59:3a:2a:fa:4a:3d:6c:1a:04:40:3f:ab:78:c2:
         13:29:8d:b2:b1:2f:9f:e5:6b:80:71:1a:6c:fc:8d:ae:33:0d:
         63:57:e8:e5:bf:65:8c:9c:d4:09:8b:93:ed:1b:fd:78:ba:c0:
         b8:ff:17:52:c8:67:d2:7d:e1:1a:2b:c3:86:7c:1e:b7:af:72:
         7e:6c:0e:29:ce:4d:fe:fb:ca:6c:c7:e5:95:4d:f3:6d:6a:83:
         f5:e2:a9:c8:7b:fc:12:a2:b5:b8:92:69:e5:44:4f:d1:35:25:
         70:9c:fa:0d:bd:5d:13:2f:ee:a3:2c:1e:48:02:ee:cf:cd:f9:
         09:12:bf:b3:3c:aa:80:a3:c2:73:bf:5b:9a:82:db:5a:0a:d8:
         84:e0:c1:1d:22:bb:89:c1:55:8d:0a:af:0e:1f:03:04:df:59:
         54:c5:56:99:82:36:f1:c1:5a:2c:25:af:07:b0:95:a3:a6:a6:
         74:ac:db:46:f9:40:2c:9d:37:34:58:ed:e0:04:cd:6d:cc:2b:
         3c:81:7e:0c:4d:f3:97:f1:96:d0:16:74:73:56:8d:42:10:39:
         a0:4b:c2:64:24:85:83:5f:0c:a5:d9:46:c6:c3:65:04:2b:15:
         26:db:5f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 17:19:21 2025 by rpki-client