This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/45395E28C8F411F0A2F04129C4F9AE02.roa
File:                     45395E28C8F411F0A2F04129C4F9AE02.roa (raw, json)
Hash identifier:          afkEaQ/8swH1PQQMSELASTKf/x3bI9lkHYSPkyJ2iSo=
Subject key identifier:   7B:6C:4D:9B:3A:5D:EC:05:81:6D:86:53:17:70:8C:D5:A5:89:6F:60
Certificate issuer:       /CN=A919B59F/serialNumber=FB858EFBAE93C3892D949BDC41FC446A8EBCEE1B
Certificate serial:       02
Authority key identifier: FB:85:8E:FB:AE:93:C3:89:2D:94:9B:DC:41:FC:44:6A:8E:BC:EE:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/45395E28C8F411F0A2F04129C4F9AE02.roa
Signing time:             Mon 24 Nov 2025 05:13:11 +0000
ROA not before:           Mon 24 Nov 2025 05:13:11 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139773
IP address blocks:        2001:df6:5ac0::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.crl
                          rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 06:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B59F, serialNumber=FB858EFBAE93C3892D949BDC41FC446A8EBCEE1B
        Validity
            Not Before: Nov 24 05:13:11 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6923e967-60e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:7b:21:18:cd:8a:f4:ad:40:d9:b0:2f:c0:
                    96:17:e0:ff:3b:0a:2f:ed:f5:c9:55:84:07:e9:fa:
                    00:ed:57:d0:86:42:50:85:6b:3d:ef:28:98:16:92:
                    31:e9:b0:81:28:63:06:c9:e5:51:e5:34:79:6a:63:
                    71:0c:f1:e0:d7:e7:06:3e:2e:98:32:c6:90:de:bb:
                    df:49:76:69:6a:09:6b:70:6f:4c:3d:ea:1c:3a:f8:
                    cf:06:b0:28:4a:d2:01:7f:34:46:c0:bf:0f:ab:c1:
                    ed:84:82:0e:aa:42:6b:6c:99:22:3e:a6:bf:57:c4:
                    44:d7:ce:4e:20:3a:12:c7:ab:d3:19:7d:bb:72:b8:
                    38:c9:1e:9a:a8:b9:9e:f1:8e:ce:23:f9:fb:28:90:
                    08:cf:3b:25:bc:99:1b:8e:be:11:75:bd:6d:98:c1:
                    2a:c5:7f:3d:20:4b:65:90:2d:47:b7:29:13:e1:14:
                    0a:3c:87:7c:1a:18:8d:5a:9f:81:1e:b1:c5:77:4a:
                    d1:28:af:73:6c:0e:f3:3f:de:d6:97:e5:a0:45:7f:
                    47:fc:cc:86:12:30:12:d8:88:24:da:ce:a5:9b:4e:
                    a8:94:7e:cc:36:c3:33:75:22:21:4e:8e:10:a0:f1:
                    67:b2:e7:29:85:8c:b1:53:ff:89:ed:43:31:12:c0:
                    45:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6C:4D:9B:3A:5D:EC:05:81:6D:86:53:17:70:8C:D5:A5:89:6F:60
            X509v3 Authority Key Identifier:
                keyid:FB:85:8E:FB:AE:93:C3:89:2D:94:9B:DC:41:FC:44:6A:8E:BC:EE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/45395E28C8F411F0A2F04129C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:5ac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:a3:13:2a:38:6b:e4:ee:09:e4:52:6b:a0:d0:23:c9:7a:ca:
         fe:f6:68:82:8f:4a:88:e5:c8:ee:e5:0c:35:a6:41:6c:2e:85:
         cb:f8:5c:8c:cc:c0:7f:7a:cc:44:b9:9b:f1:4a:50:25:19:7e:
         a2:90:64:9d:02:34:d8:fb:43:47:fe:8d:18:20:53:94:df:33:
         a7:53:a7:11:1e:a7:68:94:6c:d0:c2:bd:f6:c1:01:a0:6f:84:
         0f:47:44:90:83:0f:bc:9c:53:2b:cc:ac:1e:32:05:5b:dc:8d:
         18:da:fc:35:61:3b:c5:26:19:c9:b0:d5:3f:54:2e:54:89:82:
         76:ae:47:01:d4:3f:e9:d8:dd:70:1c:83:c1:e6:29:3f:86:8c:
         36:53:3a:b1:9b:fc:f4:42:91:0d:61:8a:40:68:6a:7c:af:37:
         6e:51:3d:cf:e3:89:83:fc:6a:df:53:80:f6:87:55:7c:d7:b3:
         31:f8:74:f1:7a:57:3a:e8:a5:32:35:7c:11:54:1a:6e:8b:68:
         5d:08:b2:24:67:8c:60:69:8f:48:3f:a5:2d:bf:07:be:2f:ea:
         bc:9b:95:32:db:78:44:cc:11:fe:54:82:74:b5:36:b3:85:9a:
         10:b4:8a:92:d7:07:9f:41:ca:df:4c:02:51:d3:56:ee:98:0c:
         57:31:86:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:19:32 2025 by rpki-client