This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/7F4D30ACB0CD11E58B55FC73C4F9AE02.roa
File:                     7F4D30ACB0CD11E58B55FC73C4F9AE02.roa (raw, json)
Hash identifier:          4X/9XTCj8Tn5wmoatIqa/M1mn+d3I1LzqCMAdWjEEKo=
Subject key identifier:   7E:2F:C3:C7:A2:C6:8E:A8:9F:03:E5:A7:A5:80:8C:3C:34:F5:A3:2E
Certificate issuer:       /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial:       3666
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/7F4D30ACB0CD11E58B55FC73C4F9AE02.roa
Signing time:             Tue 02 Dec 2025 14:41:51 +0000
ROA not before:           Tue 02 Dec 2025 14:41:51 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     59244
IP address blocks:        210.4.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
                          rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:26:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13926 (0x3666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
        Validity
            Not Before: Dec  2 14:41:51 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692efaaf-3ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c0:0d:22:d4:48:17:01:b3:cb:95:93:37:b7:
                    c1:09:0d:84:f0:f0:f3:e4:8d:18:47:46:a7:ca:4f:
                    7e:a3:38:01:e7:e8:30:93:96:c2:9b:a3:19:aa:31:
                    e8:98:00:fe:a3:02:5b:3d:1d:c4:ea:b1:8a:3a:89:
                    8d:c2:8e:20:46:19:28:63:06:f5:02:9d:97:c5:b2:
                    dc:91:7f:85:e3:48:de:c7:96:74:b5:63:01:77:87:
                    ff:26:e4:cf:cb:b4:3d:0b:63:ef:2c:fd:0a:ca:3a:
                    23:ea:3b:e6:97:8a:e5:52:ab:ce:20:23:e8:d0:d4:
                    d6:21:5a:0f:83:a7:11:8f:9b:4a:c2:79:f3:dd:d4:
                    b0:5d:58:18:03:02:2b:37:04:ab:85:b6:96:5a:10:
                    b9:d6:b9:bc:18:41:e8:e8:12:c8:82:d4:66:c5:f7:
                    7b:6c:45:04:b9:e3:4f:07:68:01:58:b0:b7:8a:94:
                    c0:2a:98:06:48:43:7a:c3:69:7b:fd:ab:ba:d1:cc:
                    65:81:e2:95:da:8b:ed:b2:7d:87:1d:4b:3d:6e:3d:
                    74:16:a6:63:85:1f:dd:ca:92:5d:e6:86:35:8c:93:
                    9d:15:24:16:81:41:1e:a8:99:4b:f4:15:b5:46:a7:
                    9b:2a:c9:f3:a0:ae:c0:5a:07:1c:5a:77:d8:8c:8c:
                    cd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2F:C3:C7:A2:C6:8E:A8:9F:03:E5:A7:A5:80:8C:3C:34:F5:A3:2E
            X509v3 Authority Key Identifier:
                keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/7F4D30ACB0CD11E58B55FC73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.4.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:5d:4a:49:d2:a2:f5:01:c1:51:f1:c0:8b:6c:c9:f6:3a:e9:
         62:64:ac:26:61:62:ac:4d:fc:c8:81:e4:30:52:df:9d:dd:b1:
         22:68:43:11:62:92:4e:ad:00:02:6c:52:70:cb:39:cb:c0:57:
         6f:1e:e2:23:af:61:a3:b1:b2:e9:50:ea:53:3e:ef:48:fd:d2:
         4c:43:b8:15:fe:18:e2:c6:d8:40:a4:4a:f7:57:f2:b0:dc:d3:
         ab:b1:ed:db:91:c4:59:cd:5b:96:f6:25:f3:f3:0d:8c:e7:60:
         95:b4:b7:a8:a8:b4:79:99:53:57:98:21:df:71:7d:20:23:9a:
         d0:7c:42:d9:53:96:c6:25:f9:85:29:ee:82:44:ac:82:86:9c:
         2f:54:ab:4b:83:e6:e2:13:22:53:5e:f9:bd:79:56:5e:05:7d:
         e1:a7:91:fa:cc:fe:a8:ae:d8:82:fb:5a:bb:5d:41:5b:f5:e7:
         a2:f8:58:ae:71:56:8b:4b:57:44:a2:1c:3e:b5:94:9b:78:7b:
         92:69:57:7c:ab:27:25:a8:55:b8:5e:0e:e4:8e:45:60:7c:dc:
         b5:49:7f:fd:90:2d:92:e0:c7:87:45:44:fb:c8:f3:d6:99:8f:
         6b:82:19:7e:18:34:d6:5b:91:ef:e5:4c:7f:9a:67:7b:40:c8:
         b7:f8:e1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 23:44:05 2025 by rpki-client