This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/00D63708DD3711EC9EF48256C4F9AE02.roa
File:                     00D63708DD3711EC9EF48256C4F9AE02.roa (raw, json)
Hash identifier:          //KV7irskgDcUAWnVzABNstxODUmGNUu0/9moTMxDMc=
Subject key identifier:   27:D7:BD:DE:83:1C:93:D2:5E:DB:E6:DF:39:07:FB:B5:A6:71:F7:7F
Certificate issuer:       /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial:       03B0
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/00D63708DD3711EC9EF48256C4F9AE02.roa
Signing time:             Sat 08 Nov 2025 23:45:43 +0000
ROA not before:           Sat 08 Nov 2025 23:45:43 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        2407:30c0:100::/43 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
                          rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Nov 2025 23:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 944 (0x3b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
        Validity
            Not Before: Nov  8 23:45:43 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690fd627-5f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:33:a4:f1:41:d2:3f:ad:4e:e5:02:38:f6:
                    2e:13:5e:8f:a9:a5:dc:95:e1:32:21:d3:58:fb:ab:
                    79:f2:de:88:77:2b:1c:d7:96:98:a8:38:67:57:7e:
                    d8:b2:33:03:e1:03:26:17:9b:d7:37:30:e2:03:f8:
                    9d:8c:e9:af:42:52:b1:60:e4:0a:f2:51:17:ae:91:
                    ea:04:2f:ee:53:15:5d:11:63:d6:15:66:55:75:cc:
                    c3:06:0f:43:8e:94:e7:ee:15:ce:06:cb:19:67:79:
                    20:9d:94:d6:30:67:a6:7f:c7:8f:cc:22:8b:9c:ac:
                    4f:4c:a3:36:1c:fd:10:f1:0f:6b:f6:a8:5a:3f:50:
                    c1:58:81:20:1b:71:d6:4d:3b:3e:ca:24:4a:29:f4:
                    83:69:ab:2c:df:3e:0e:2f:2a:d5:e5:4e:c4:cf:c8:
                    47:b2:4b:36:e9:10:01:00:0a:f2:e6:88:79:c4:60:
                    b6:4f:dc:97:80:f5:87:c2:4d:28:48:cf:1d:16:d2:
                    76:20:99:74:da:84:25:cd:85:68:f4:e3:70:86:f6:
                    d6:ec:0b:fe:e3:fa:a4:e0:93:38:48:f2:86:9f:4c:
                    b3:5c:91:0f:5d:2b:78:ce:01:56:1b:1b:86:99:d2:
                    ec:84:9e:eb:95:06:c6:fb:bf:88:ab:25:38:02:8a:
                    44:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D7:BD:DE:83:1C:93:D2:5E:DB:E6:DF:39:07:FB:B5:A6:71:F7:7F
            X509v3 Authority Key Identifier:
                keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/00D63708DD3711EC9EF48256C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:30c0:100::/43

    Signature Algorithm: sha256WithRSAEncryption
         d0:1a:0d:19:61:d0:18:13:54:0c:50:f1:29:3e:0a:05:d3:cc:
         59:b1:15:02:66:69:46:e6:c2:d4:03:a7:cd:50:ea:e5:32:96:
         f6:ef:4a:c1:b3:b4:74:67:67:68:e5:96:11:04:34:68:1b:7e:
         45:c4:e1:a8:72:89:6c:cd:49:30:67:f7:05:99:a3:2d:dc:ff:
         eb:40:28:81:65:42:f0:ab:8d:58:de:08:f4:22:19:8d:78:71:
         85:62:46:cf:30:19:46:30:5a:b0:4e:06:ca:8d:06:0b:d8:6e:
         c1:24:ce:56:b9:ff:e3:bf:10:7e:f9:59:76:d6:e7:61:b8:79:
         17:37:ad:3e:cc:f4:72:c8:d1:b5:58:c8:94:07:da:9f:69:7b:
         c3:a2:42:40:00:2e:c0:55:01:eb:69:5e:20:07:fb:18:ca:c4:
         3a:65:00:32:55:97:ab:3f:88:3e:f4:c8:95:b4:92:f7:13:57:
         0f:80:5f:bb:53:79:92:f2:6f:b8:f2:82:20:6c:94:c7:ad:b9:
         6d:35:eb:d0:99:7b:fb:51:00:81:64:82:26:4f:d0:eb:13:58:
         fd:f7:a9:58:18:bc:94:89:2d:1f:b9:9c:2f:ea:89:41:df:65:
         d8:1b:68:a5:b4:22:0e:a5:f6:8e:47:3c:cc:53:0b:f6:8b:6f:
         aa:ee:e8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:30:57 2025 by rpki-client