This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/F255E05612DB11EBBE14D853C4F9AE02.roa
File:                     F255E05612DB11EBBE14D853C4F9AE02.roa (raw, json)
Hash identifier:          rDpjDMpANY5UP6fw4xa4nyyZLU0t3Hrc+biZaf2hOUQ=
Subject key identifier:   89:A1:8A:93:84:7F:6B:8A:A9:6F:92:20:C4:90:C1:E3:00:92:68:EF
Certificate issuer:       /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial:       0866
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/F255E05612DB11EBBE14D853C4F9AE02.roa
Signing time:             Tue 16 Dec 2025 21:17:28 +0000
ROA not before:           Tue 16 Dec 2025 21:17:28 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     209557
IP address blocks:        2406:9dc0:40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
                          rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 21:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2150 (0x866)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
        Validity
            Not Before: Dec 16 21:17:28 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6941cc68-f868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:a2:35:4c:c0:99:c0:0a:6f:21:b6:d4:b7:
                    94:b5:ee:ff:c8:d4:e2:83:3d:18:96:aa:ff:cb:ed:
                    e5:7e:28:45:36:d7:d4:8a:27:43:30:e6:b6:a6:e6:
                    e6:ac:fb:f4:6c:7c:f3:f5:94:2a:b1:81:46:6b:24:
                    17:26:b7:fc:21:db:5b:76:7d:9b:4d:da:2b:0c:f6:
                    e8:93:92:53:89:84:77:ca:b6:42:9c:69:e6:38:70:
                    0f:06:ab:ba:dc:8b:ad:6c:96:ca:5a:04:21:86:b8:
                    9d:b8:6a:d5:9a:cc:39:2d:34:d6:10:40:a0:70:3d:
                    55:46:72:cc:98:0f:de:5a:4e:0b:97:b1:98:4a:26:
                    f4:8b:33:97:ed:3d:96:c2:ae:c3:61:da:7b:a5:3b:
                    48:d4:ff:88:7b:f7:fb:f3:f6:23:70:23:1e:d3:cc:
                    e1:e3:72:70:16:9a:6e:8d:17:35:cc:1f:bf:da:52:
                    1c:ed:a5:c6:bf:d0:19:d4:9f:67:4f:f0:d6:6c:5c:
                    5b:32:51:e3:67:b8:61:ce:e8:62:d5:0c:5d:50:42:
                    e2:05:37:94:e0:dd:26:a3:01:35:e9:87:f7:83:9b:
                    1f:78:18:16:26:70:80:32:b8:17:be:e1:32:47:f6:
                    1f:16:7f:ac:34:d0:96:28:68:6c:ea:ea:de:26:f2:
                    a9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A1:8A:93:84:7F:6B:8A:A9:6F:92:20:C4:90:C1:E3:00:92:68:EF
            X509v3 Authority Key Identifier:
                keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/F255E05612DB11EBBE14D853C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:9dc0:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         76:2d:69:8b:af:67:a0:77:68:43:f5:88:89:c0:4f:d0:9d:b3:
         4c:2d:2c:2f:06:80:c1:27:4d:66:e7:09:b3:82:8f:8f:b6:02:
         de:30:d7:e7:e5:69:50:db:25:e9:5b:fa:b6:35:52:a0:8f:d4:
         e9:86:31:98:2a:b6:ad:4a:f5:ee:f9:04:20:bb:2b:15:25:0a:
         15:09:9e:1a:e0:96:47:bd:1a:84:cd:72:a8:29:8d:6e:52:81:
         9a:23:ad:30:db:42:31:cb:fa:e6:f6:9c:c5:c5:bb:bd:3d:e6:
         3b:78:15:c0:4d:88:91:c3:88:4d:6a:2e:c5:3f:81:60:73:6c:
         3e:b0:52:5c:30:77:fa:a8:00:f8:5c:ea:1c:73:e7:a1:f3:fd:
         63:c6:1a:20:85:66:9a:f8:ef:ad:8a:cc:a6:9a:68:cf:09:4a:
         78:de:09:23:61:48:a7:36:5f:1c:7d:e9:23:e4:89:5b:14:7e:
         48:44:dd:cc:1e:07:cc:05:50:70:90:d6:9b:8e:bd:d3:43:0c:
         a0:f3:34:38:59:28:29:72:29:f7:eb:02:d3:1e:e3:83:26:79:
         15:25:63:61:69:a8:e0:03:10:07:89:ba:a0:97:87:70:8f:b7:
         84:b8:13:70:34:cd:24:df:3a:8d:4e:04:c6:41:9d:23:70:d9:
         03:9f:91:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 12:18:06 2025 by rpki-client