This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/038A3E10C47C11F092370F0AC4F9AE02.roa
File:                     038A3E10C47C11F092370F0AC4F9AE02.roa (raw, json)
Hash identifier:          R6ZWg78kRuVdQEvjckkV5CrRltvEccJZf3UzS4WTXw0=
Subject key identifier:   93:62:35:6F:D7:36:1B:76:07:1B:CE:D1:6E:F8:6F:8E:D5:F8:F2:AA
Certificate issuer:       /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial:       0652
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/038A3E10C47C11F092370F0AC4F9AE02.roa
Signing time:             Tue 18 Nov 2025 12:42:16 +0000
ROA not before:           Tue 18 Nov 2025 12:42:16 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     4755
IP address blocks:        124.247.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
                          rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1618 (0x652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
        Validity
            Not Before: Nov 18 12:42:16 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=691c69a8-de40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:80:4a:9a:72:74:57:0c:28:12:52:19:84:31:
                    3e:f7:d5:2f:94:f2:ca:5f:b6:fb:fd:7c:43:f5:a8:
                    03:a1:5f:06:b1:eb:3c:21:bb:2d:c6:97:1b:15:0c:
                    31:d6:16:ad:9e:1d:21:00:fb:7c:ea:01:41:81:44:
                    1c:ba:4b:95:0b:95:68:9d:a6:c2:32:02:65:83:a3:
                    96:d9:b3:23:2a:46:9d:42:3e:ac:bf:f5:3e:9f:12:
                    2e:ad:33:1b:6e:dc:1a:7b:6d:d1:72:83:35:ff:20:
                    7d:39:5b:0e:72:cf:af:1d:50:7a:74:ac:b0:8b:14:
                    6d:69:6d:b2:f0:ca:b5:92:71:ab:9f:34:51:38:3d:
                    18:8d:c8:84:f4:b9:c6:13:68:ad:d8:eb:15:77:13:
                    9d:25:60:9b:6c:1c:17:76:2a:9e:14:f1:01:e3:06:
                    0f:77:97:1d:79:34:e1:1d:83:fc:49:bc:2f:88:7f:
                    a9:e3:b3:3c:a5:f9:b1:12:d8:44:3e:c4:bc:38:03:
                    86:29:f5:f0:03:74:18:ed:a8:03:c4:14:bf:7d:9c:
                    08:7e:fa:82:41:a8:26:44:1b:15:3e:b2:f9:1a:ca:
                    3a:49:71:88:52:92:db:ba:95:e3:99:2d:3d:51:bc:
                    65:21:ae:9b:e6:91:7b:46:3d:8d:f9:be:e5:43:7e:
                    e0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:62:35:6F:D7:36:1B:76:07:1B:CE:D1:6E:F8:6F:8E:D5:F8:F2:AA
            X509v3 Authority Key Identifier:
                keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/038A3E10C47C11F092370F0AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.247.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:da:3c:bc:b2:f5:b5:62:50:c0:d6:9b:21:e1:73:9b:d8:ef:
         3e:1f:5e:4a:5c:73:b3:0b:fc:cd:c5:ca:90:73:d6:68:54:f8:
         ab:cb:9f:c6:a0:ea:4d:9c:7e:24:a8:32:1f:2f:5a:57:da:6c:
         63:22:a7:3d:b0:53:8b:20:6b:a1:84:39:71:17:da:58:19:53:
         64:bc:18:18:5e:9d:a9:36:3d:7e:58:0f:02:f3:a1:a6:90:9d:
         ff:dd:ef:f4:44:1e:f5:44:5e:df:1f:2b:ef:e7:bf:e0:c8:b9:
         17:16:6e:4c:7d:e5:f6:4a:96:40:4b:cf:ba:76:23:ad:ec:c2:
         79:dd:34:2f:df:b1:fa:24:38:da:d3:cb:25:f4:27:bd:99:82:
         20:77:99:82:eb:4a:ea:66:62:18:aa:3b:d8:ea:f4:87:8a:52:
         cd:1c:5a:ce:60:a0:e6:49:00:86:69:f3:45:94:86:fa:8a:7c:
         4e:eb:7b:88:39:7a:8b:37:9d:29:d0:4c:be:6b:df:87:03:31:
         ca:b1:89:ca:38:55:70:cb:17:5e:2a:29:74:52:91:3f:64:87:
         c9:79:c6:a3:6a:97:d2:78:fe:e0:9b:ca:24:f8:87:0d:1d:85:
         3c:d8:46:f7:85:1b:49:d9:cb:e1:7b:7d:6a:9a:73:63:80:21:
         f9:52:e0:51
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3
RDc0MTQ3RjMwHhcNMjUxMTE4MTI0MjE2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTFjNjlhOC1kZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA24BKmnJ0VwwoElIZhDE+99UvlPLKX7b7/XxD9agDoV8Gses8IbstxpcbFQwx
1hatnh0hAPt86gFBgUQcukuVC5VonabCMgJlg6OW2bMjKkadQj6sv/U+nxIurTMb
btwae23RcoM1/yB9OVsOcs+vHVB6dKywixRtaW2y8Mq1knGrnzRROD0YjciE9LnG
E2it2OsVdxOdJWCbbBwXdiqeFPEB4wYPd5cdeTThHYP8SbwviH+p47M8pfmxEthE
PsS8OAOGKfXwA3QY7agDxBS/fZwIfvqCQagmRBsVPrL5Gso6SXGIUpLbupXjmS09
UbxlIa6b5pF7Rj2N+b7lQ37g2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFJNiNW/X
Nht2BxvO0W74b47V+PKqMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF
NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvMDM4QTNFMTBD
NDdDMTFGMDkyMzcwRjBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB89/IwDQYJKoZIhvcNAQELBQADggEBABbaPLyy9bViUMDW
myHhc5vY7z4fXkpcc7ML/M3FypBz1mhU+KvLn8ag6k2cfiSoMh8vWlfabGMipz2w
U4sga6GEOXEX2lgZU2S8GBhenak2PX5YDwLzoaaQnf/d7/REHvVEXt8fK+/nv+DI
uRcWbkx95fZKlkBLz7p2I63swnndNC/fsfokONrTyyX0J72ZgiB3mYLrSupmYhiq
O9jq9IeKUs0cWs5goOZJAIZp80WUhvqKfE7re4g5eos3nSnQTL5r34cDMcqxico4
VXDLF14qKXRSkT9kh8l5xqNql9J4/uCbyiT4hw0dhTzYRveFG0nZy+F7fWqac2OA
IflS4FE=
-----END CERTIFICATE-----
Generated at Fri Dec 5 18:54:19 2025 by rpki-client