This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A50523F43F5211EBB1B1701FC4F9AE02.roa
File:                     A50523F43F5211EBB1B1701FC4F9AE02.roa (raw, json)
Hash identifier:          9avL2Ad9M1e51xqr+g4Ok7rpofizFz/lEbEixkRcZkk=
Subject key identifier:   7B:12:E0:83:1E:7D:F2:73:87:10:6F:36:CF:12:60:D1:36:02:AB:D5
Certificate issuer:       /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
Certificate serial:       079A
Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A50523F43F5211EBB1B1701FC4F9AE02.roa
Signing time:             Fri 28 Nov 2025 20:53:49 +0000
ROA not before:           Fri 28 Nov 2025 20:53:49 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     7474
IP address blocks:        2402:13c0::/48 maxlen: 48
                          2402:13c0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl
                          rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:36:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1946 (0x79a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B58FF, serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
        Validity
            Not Before: Nov 28 20:53:49 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692a0bdd-9f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:2c:29:72:93:f2:6e:68:19:a3:fe:d8:f9:
                    46:49:21:7b:6e:4a:9c:f9:5c:f9:b9:3a:43:30:7e:
                    f7:56:f0:49:29:c0:23:97:ed:f3:b0:0a:01:7a:75:
                    73:91:22:eb:6e:84:31:17:fc:fc:ca:0c:c5:6b:b5:
                    1b:29:ea:47:2d:f2:7b:e8:0d:0c:ec:a5:11:4a:30:
                    82:92:c0:21:22:08:35:2e:5d:ac:81:05:ce:23:ca:
                    2f:d7:60:12:18:f6:84:a8:b2:22:4e:c4:37:e6:d7:
                    69:dd:e7:5d:02:53:7d:f1:1d:0a:1a:cb:25:b9:8c:
                    a0:ca:ca:87:f0:71:b9:ed:93:93:6b:a3:49:d8:1f:
                    40:73:35:9c:d6:ae:cc:e7:96:c1:8e:52:d7:67:8a:
                    a4:8b:36:42:2c:39:4b:d7:6e:e6:8d:42:e5:81:eb:
                    ab:d3:3f:d4:5f:f5:06:d5:71:63:b0:a5:5e:90:0b:
                    ed:a3:9c:64:a3:63:1a:1f:00:b6:fd:46:61:fe:6e:
                    50:cc:94:92:0b:89:db:34:c6:b8:20:3e:10:42:47:
                    c7:14:b6:e5:21:d2:03:d6:0b:87:54:5a:49:5b:f2:
                    b7:e9:bb:c2:4e:b5:80:7b:44:5a:78:73:50:e8:b6:
                    f5:f4:9b:a2:11:21:f0:57:a4:ea:37:f9:54:33:2f:
                    10:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:12:E0:83:1E:7D:F2:73:87:10:6F:36:CF:12:60:D1:36:02:AB:D5
            X509v3 Authority Key Identifier:
                keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A50523F43F5211EBB1B1701FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:13c0::/47

    Signature Algorithm: sha256WithRSAEncryption
         aa:41:66:26:4e:eb:07:73:28:7a:19:c5:f4:ef:49:6e:2a:fe:
         9a:61:1f:90:d9:f7:e2:59:f1:e2:c8:d1:63:ca:40:6d:a8:c9:
         88:bd:93:b9:70:c2:0c:ac:8a:85:a5:91:5b:87:e1:93:53:bc:
         a8:1a:57:b9:c1:73:9a:31:05:7c:ec:14:f1:e3:7d:e2:d7:5b:
         ef:e9:6b:3b:f1:3a:a4:11:24:a3:6d:c7:96:07:32:7f:f9:a6:
         6e:41:11:09:25:e3:eb:50:0f:17:2e:1d:7f:56:11:1a:4d:ed:
         db:6e:61:a3:64:4d:7e:7f:25:50:36:54:95:7a:53:7b:08:96:
         11:9f:2a:be:c4:2e:3b:01:1f:59:96:31:85:74:2b:bf:8b:95:
         12:43:39:0e:16:63:2a:f2:98:5f:56:8b:67:1c:62:ae:d9:e7:
         ab:63:42:6b:b2:df:1f:e5:19:43:1b:64:8f:9e:c0:16:d2:ba:
         23:6b:71:da:49:9b:b7:fb:c2:8f:bf:c7:6f:96:13:57:45:a8:
         c6:31:fe:b5:91:14:37:17:a2:03:00:86:14:46:48:f5:db:ba:
         d6:43:b0:ba:7b:a1:29:bf:10:03:d2:67:16:35:8a:13:83:18:
         1c:53:13:40:21:7f:61:ae:b6:89:f9:db:7e:81:fc:78:11:20:
         f5:77:8e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 23:44:04 2025 by rpki-client