This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/48A87092E55C11F0AC7781DC396F56BC.roa
File:                     48A87092E55C11F0AC7781DC396F56BC.roa (raw, json)
Hash identifier:          cOTVbOzJpvCxSelRScfWVMeegrX9N3Z0kUbsAzIuCrc=
Subject key identifier:   9A:C2:DC:B0:42:4E:12:62:09:8D:0F:D1:66:1E:33:74:BE:6F:E8:45
Certificate issuer:       /CN=A91A9720/serialNumber=C2E574D210CD71588736BF379D47CD1146AC37B2
Certificate serial:       04
Authority key identifier: C2:E5:74:D2:10:CD:71:58:87:36:BF:37:9D:47:CD:11:46:AC:37:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuV00hDNcViHNr83nUfNEUasN7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/48A87092E55C11F0AC7781DC396F56BC.roa
Signing time:             Tue 30 Dec 2025 08:54:46 +0000
ROA not before:           Tue 30 Dec 2025 08:54:46 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     154416
IP address blocks:        2402:3e20::/32 maxlen: 32
                          2402:3e20::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.crl
                          rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuV00hDNcViHNr83nUfNEUasN7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Jan 2026 07:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9720, serialNumber=C2E574D210CD71588736BF379D47CD1146AC37B2
        Validity
            Not Before: Dec 30 08:54:46 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69539356-bb25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:37:b0:b8:36:98:70:e5:75:cb:14:ae:d0:33:
                    53:28:48:61:d5:02:01:ec:06:b3:a9:41:b9:d8:7e:
                    8b:be:e8:ca:ff:a0:18:81:33:18:54:72:41:07:f1:
                    57:0a:bf:6c:0b:8d:a7:e0:c4:11:5a:c4:9e:f7:42:
                    2f:65:5d:3e:d3:db:c6:3a:99:2c:79:74:18:08:b9:
                    d9:69:cb:5b:ca:72:ec:ee:0d:96:d0:4e:86:2e:02:
                    a9:80:ee:71:90:d3:e1:cb:28:78:e0:6a:74:52:e3:
                    d3:e9:4c:24:07:1a:2b:7c:29:1f:92:cb:d7:73:9b:
                    9a:8f:5b:63:fe:d5:eb:9b:3e:b6:7b:ee:63:8a:36:
                    2b:33:97:6f:93:00:b7:71:da:a0:6c:cd:0e:0d:bb:
                    ce:45:10:96:1d:43:20:a2:97:4d:df:bd:d4:cf:89:
                    d2:19:4a:f5:28:85:a1:38:cd:05:98:2f:cb:8a:a2:
                    9f:56:df:bb:95:31:60:d5:a6:38:fd:71:73:d0:a6:
                    e1:a9:8a:31:22:69:0e:24:de:6d:63:3c:d8:ce:2f:
                    03:90:81:f6:24:ef:17:f5:82:20:8f:08:0c:43:7f:
                    1f:6b:e4:21:6c:c6:a2:cf:ae:7f:1e:3a:8b:da:18:
                    f8:97:46:ad:37:65:ad:86:3e:c4:19:85:3f:4d:98:
                    f0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C2:DC:B0:42:4E:12:62:09:8D:0F:D1:66:1E:33:74:BE:6F:E8:45
            X509v3 Authority Key Identifier:
                keyid:C2:E5:74:D2:10:CD:71:58:87:36:BF:37:9D:47:CD:11:46:AC:37:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuV00hDNcViHNr83nUfNEUasN7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/48A87092E55C11F0AC7781DC396F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3e20::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:62:b5:d0:5b:8f:b1:4a:ac:0e:74:ac:7d:20:e7:9f:80:a9:
         4e:58:12:c1:69:94:f1:66:4a:d0:a7:c4:29:18:c2:42:60:f7:
         6b:af:50:94:d2:5a:bd:60:ae:46:af:81:85:90:c9:87:2d:9c:
         5f:c5:52:b5:5f:db:6a:03:20:49:6b:d9:ac:2a:bd:8c:af:53:
         6c:10:4b:ae:f2:af:46:11:c8:75:21:21:e9:27:b9:cc:ed:a9:
         72:f8:05:dd:55:14:4f:9b:b5:2f:e4:8f:11:db:e9:55:d7:e8:
         d4:b3:e8:20:e9:f3:fe:61:b1:27:c0:2c:3c:15:0a:fe:36:63:
         f5:6a:4e:23:5e:ec:86:39:da:03:45:9f:ca:37:a5:a9:e2:df:
         c0:f5:13:bd:4b:d3:77:00:03:aa:3a:d7:81:08:0d:95:a4:95:
         af:cd:d5:7f:e3:61:19:a5:b3:b6:38:00:2f:b1:47:66:29:a4:
         75:ef:a2:7c:4f:3a:d2:bb:5f:32:f9:96:bb:cb:97:de:2d:3f:
         dd:d1:e9:79:a7:0d:e1:02:77:ae:ef:f7:d8:a8:a6:17:b8:7a:
         c6:4d:4e:53:9b:03:9c:a3:a5:f5:78:bf:af:bb:34:37:0f:81:
         1b:04:8a:8e:04:6f:e2:2b:c9:ed:90:36:34:34:84:74:f8:a9:
         13:54:54:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 09:15:04 2026 by rpki-client