This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/E830A74E71ED11EF9D592D1AC4F9AE02.roa
File:                     E830A74E71ED11EF9D592D1AC4F9AE02.roa (raw, json)
Hash identifier:          hRALKKZYrXjRAZFH/kodixrgghdkVI/t4Zis6l2iMMA=
Subject key identifier:   85:E8:6F:FD:FA:C8:4E:62:65:0B:FF:F0:CB:E5:46:61:7C:C1:DC:A6
Certificate issuer:       /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137
Certificate serial:       01AB
Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/E830A74E71ED11EF9D592D1AC4F9AE02.roa
Signing time:             Tue 23 Dec 2025 03:23:34 +0000
ROA not before:           Tue 23 Dec 2025 03:23:34 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     149311
IP address blocks:        2001:df3:2fc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl
                          rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194C67, serialNumber=22D021488AE1317FC95C74A38825254AB7926137
        Validity
            Not Before: Dec 23 03:23:34 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=694a0b36-f61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:25:17:6f:f2:0a:e6:f4:47:06:1b:8e:39:09:
                    96:7b:9f:19:4c:9b:ad:e4:19:e8:8b:bf:34:b4:21:
                    48:98:fb:a7:b4:29:84:6c:d6:b6:32:9e:ac:6e:cd:
                    f7:86:8c:f0:bb:11:6a:76:c5:c4:94:72:e4:c0:89:
                    aa:ec:48:20:ce:c0:e3:54:f8:8a:93:d7:6f:79:67:
                    bf:6e:06:2b:b4:dd:b8:66:f4:6f:67:e9:b0:ae:99:
                    fa:bf:2c:19:38:1d:28:21:f4:af:3c:09:91:58:a5:
                    f7:57:20:d3:3b:11:f6:d2:8f:14:eb:cd:92:51:c3:
                    78:6f:c2:05:cb:1e:ab:78:16:63:ea:91:8e:07:d3:
                    14:02:71:d7:ba:54:4e:dd:2f:9a:98:92:b5:82:21:
                    1a:07:0f:f5:f5:0f:77:5f:aa:bd:ab:ab:0c:e7:da:
                    81:5c:77:f4:6e:95:0f:aa:ee:cd:b1:47:05:ce:93:
                    a3:1e:1c:bf:03:95:be:56:37:a1:ee:b0:da:3d:60:
                    de:0c:11:f5:a7:d1:74:d7:9a:a0:00:f7:44:c1:52:
                    0a:a4:58:5d:d3:11:dd:db:26:e1:e8:e2:5f:70:d6:
                    38:8d:16:68:c0:43:40:6f:e2:24:64:86:94:94:92:
                    2a:58:1c:45:23:8c:11:70:2d:77:55:00:b0:48:d4:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E8:6F:FD:FA:C8:4E:62:65:0B:FF:F0:CB:E5:46:61:7C:C1:DC:A6
            X509v3 Authority Key Identifier:
                keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/E830A74E71ED11EF9D592D1AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:2fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:e5:fa:98:68:5d:34:39:03:10:cd:ff:77:16:e5:5c:e8:98:
         46:b5:c3:ea:f5:74:bb:61:83:d3:ff:98:b6:f6:b7:57:ff:e6:
         74:54:75:6d:f3:7c:14:a3:c3:62:99:a3:36:e2:b1:9b:20:d3:
         d4:1a:4a:9b:d6:d0:e7:f6:2a:dc:f0:84:9b:4f:ac:63:32:b7:
         d6:78:9a:c6:1e:dc:5a:5b:37:8c:a3:f5:5c:62:54:b8:25:42:
         20:2a:81:a1:c6:66:10:f4:39:a9:4f:e4:ea:d5:b0:fb:c6:2a:
         17:a8:b3:45:15:dd:d0:ee:a2:2d:bc:5a:9f:af:a3:0d:b2:bf:
         43:b3:db:d3:66:93:33:2f:ea:99:21:f1:8f:37:c5:6a:de:a6:
         9c:7c:17:a0:0d:e1:fe:32:cc:cd:66:3c:c1:10:be:b9:7f:31:
         59:1d:46:b4:8b:ba:2c:9a:c8:d8:21:20:f3:36:de:03:98:0f:
         7e:cc:d7:ae:17:a5:07:88:21:22:09:26:df:e2:bd:d9:ee:f8:
         03:81:48:d9:22:d6:95:49:17:51:14:08:34:98:9d:48:39:dd:
         ba:cc:00:1e:35:20:b7:9d:f1:ac:e2:cc:37:bb:ed:5a:f2:89:
         34:c7:5a:45:97:f8:f2:8c:10:c0:a6:48:71:4e:c2:af:34:aa:
         5e:b1:3c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 15:24:56 2025 by rpki-client