This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/324C60ACDD2211F0BB0B52AC636F56BC.roa
File:                     324C60ACDD2211F0BB0B52AC636F56BC.roa (raw, json)
Hash identifier:          gI6Ocwuki2ImNUHXoO60d4oG8kBXNFeGJheNrP8mZnQ=
Subject key identifier:   D7:7A:15:E3:13:B4:22:64:C9:EB:09:66:47:54:F0:83:02:6F:4E:B2
Certificate issuer:       /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300
Certificate serial:       061B
Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/324C60ACDD2211F0BB0B52AC636F56BC.roa
Signing time:             Fri 19 Dec 2025 21:32:19 +0000
ROA not before:           Fri 19 Dec 2025 21:32:19 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     204800
IP address blocks:        45.120.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl
                          rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 22:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1563 (0x61b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300
        Validity
            Not Before: Dec 19 21:32:19 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6945c463-c68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:82:6f:e3:39:5e:63:11:29:44:92:96:cb:38:
                    bf:e8:1d:fc:c8:b9:49:36:18:c1:52:ea:7c:ec:e1:
                    39:26:f9:1b:6c:13:1e:2b:37:ba:01:ff:61:d0:c9:
                    10:ea:4f:43:a7:73:d9:13:9d:aa:72:9e:99:cc:51:
                    23:99:71:41:c3:e4:fe:8b:2c:93:80:c9:02:12:bc:
                    04:51:28:23:3a:21:a8:0f:9d:a0:89:9c:a8:18:56:
                    39:15:df:5e:74:63:0a:b1:b3:42:cd:ad:65:1f:38:
                    2e:35:70:85:97:80:04:30:7e:87:74:ae:25:3b:f6:
                    38:b9:e9:8c:d5:22:ec:62:1b:27:c6:fa:2d:c2:51:
                    7b:af:25:fa:f9:9b:3e:a9:f0:26:25:98:d4:4e:fa:
                    2c:71:43:cb:0f:57:b0:a8:35:b2:ec:01:5a:78:5b:
                    ae:f9:40:4e:87:a7:59:c7:d6:43:c4:1c:51:eb:bf:
                    a4:7e:f4:45:1b:71:ff:48:f5:ce:74:40:b5:3d:24:
                    38:82:e7:e5:b6:62:51:08:23:c3:83:a3:ee:f2:f3:
                    41:ed:49:39:5b:8a:39:bd:5f:07:ce:62:50:ed:33:
                    d1:92:61:e1:9c:0c:45:66:c9:13:fc:3e:55:62:8a:
                    a3:c2:30:78:4b:ff:fa:7f:86:00:a0:8d:6f:3a:a8:
                    0f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7A:15:E3:13:B4:22:64:C9:EB:09:66:47:54:F0:83:02:6F:4E:B2
            X509v3 Authority Key Identifier:
                keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/324C60ACDD2211F0BB0B52AC636F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.120.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:00:07:85:b3:82:af:4e:4e:0c:bd:0a:42:04:c5:37:0b:0d:
         e4:02:97:a3:5b:d6:50:37:af:7c:e1:02:52:56:95:3a:2c:71:
         59:a9:39:23:ec:e9:14:c5:1e:a9:bd:2d:41:5d:bd:86:68:0e:
         96:5e:a2:6c:ca:a3:38:e0:1d:f0:f2:4c:07:e9:8a:2b:96:28:
         8e:18:02:8b:98:c5:14:b3:ab:5e:75:5f:3d:b2:6b:54:94:32:
         41:a0:18:ed:04:dc:18:f4:f4:7b:0a:72:22:8f:67:85:b0:c2:
         ba:22:3e:b4:91:10:7c:2b:38:0f:75:80:06:30:a6:ef:27:bd:
         b9:70:43:a6:51:2f:13:0d:c8:04:d3:8a:5f:e5:23:1d:53:66:
         67:f0:16:06:83:e6:b1:1e:f3:e6:fd:fb:da:c0:2c:14:ad:02:
         1e:5f:61:7e:81:f0:19:a5:6f:6e:75:31:66:6a:b9:2e:62:92:
         ab:81:c3:9f:37:08:7d:92:e0:7b:79:65:f0:39:3f:c2:d7:6f:
         51:84:73:cc:ad:6b:11:7a:73:b6:ce:90:6d:82:c2:76:3c:12:
         e3:4f:bc:fc:2d:1e:f4:bb:3b:55:79:5f:55:33:79:28:02:18:
         c6:95:bc:a6:0b:ae:a4:b4:f8:17:f6:82:e0:48:c1:9a:e0:ce:
         91:21:80:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:55:42 2025 by rpki-client