This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01607012DD3711EC9EF48256C4F9AE02.roa
File:                     01607012DD3711EC9EF48256C4F9AE02.roa (raw, json)
Hash identifier:          Q2SSdUGho2j7H+8ou7DuxmcggjBbLvW3sHTdOc9TRn0=
Subject key identifier:   4A:CD:23:17:96:C3:58:9F:CF:B9:0D:FE:32:01:ED:71:9A:09:62:0C
Certificate issuer:       /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial:       03B1
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01607012DD3711EC9EF48256C4F9AE02.roa
Signing time:             Sat 08 Nov 2025 23:45:44 +0000
ROA not before:           Sat 08 Nov 2025 23:45:44 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        2407:30c0:100::/43 maxlen: 48
                          2407:30c0:120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
                          rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 945 (0x3b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
        Validity
            Not Before: Nov  8 23:45:44 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690fd628-e589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:dd:1e:8a:ad:c6:e4:b0:f6:91:d2:74:39:
                    a0:09:57:18:27:59:63:5c:47:48:b1:49:30:3d:6b:
                    af:26:36:dc:4c:a7:4a:f4:6c:9a:76:ed:90:d6:69:
                    e2:b3:32:d0:c6:27:21:ac:d6:42:bb:ba:ce:b7:be:
                    7e:0b:10:1d:2f:11:61:0a:99:fe:1f:c6:3a:6a:e7:
                    62:ac:93:bf:66:0e:33:63:b4:47:78:8d:5d:99:86:
                    20:78:8e:33:47:bd:6c:a4:5e:b3:9c:ae:52:b7:4b:
                    dc:05:b2:37:1a:8b:a7:b3:c4:eb:65:6f:7a:bc:10:
                    3c:47:38:c3:f3:cf:ef:00:b7:0e:3f:f5:61:44:b7:
                    40:9d:76:3f:b4:2c:57:47:6d:05:28:8f:62:af:cf:
                    db:20:fe:27:f6:ea:e3:60:79:9f:cf:0a:62:59:40:
                    58:50:bf:bf:df:57:de:08:a1:f6:55:f3:52:6e:43:
                    ed:57:81:81:51:6f:ce:c4:64:88:44:e3:1f:dd:3d:
                    3d:be:73:2a:0b:df:98:ff:a6:e2:ae:81:57:b3:7b:
                    21:1b:bd:90:bd:35:42:52:83:7a:e4:88:d6:5b:87:
                    6b:28:d3:f9:3e:d7:68:d8:26:da:90:57:90:6c:52:
                    9e:c0:b0:0c:9b:e9:7c:e5:39:94:ac:f2:24:ac:cc:
                    ba:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CD:23:17:96:C3:58:9F:CF:B9:0D:FE:32:01:ED:71:9A:09:62:0C
            X509v3 Authority Key Identifier:
                keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01607012DD3711EC9EF48256C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:30c0:100::-2407:30c0:120:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         c0:14:6c:34:56:25:7a:d9:a1:c7:f2:e4:3a:88:74:56:2e:b1:
         19:4c:c4:ab:11:4b:e1:81:ac:af:7c:61:11:65:56:24:f3:5d:
         d2:e9:7c:f9:05:19:cc:d1:f2:b3:30:bb:51:0d:0d:15:86:2e:
         f9:de:7e:3b:bb:a0:50:b8:db:14:8c:26:3e:90:a1:9e:b5:03:
         05:c7:d2:b6:0b:0e:74:3f:9b:4d:df:09:bc:1a:de:cb:e3:d7:
         c2:ed:6d:40:ed:e2:1a:f2:91:d6:d3:59:5e:e3:38:9a:ac:1e:
         33:21:3a:37:bc:bd:62:e1:2a:2a:0a:7e:5b:48:c9:5e:9a:04:
         e6:71:09:6f:be:0a:63:cb:96:3f:f2:d3:7e:67:2d:25:72:c3:
         e0:59:c7:f4:26:61:55:67:67:d1:12:1d:63:1f:ac:aa:36:b3:
         33:04:d3:9c:64:b2:2e:37:92:4f:06:13:5f:f1:49:01:24:d2:
         50:b9:74:a3:fe:41:d3:5a:b4:0b:90:2c:0b:19:a4:0e:5a:c1:
         bb:52:11:7c:2e:5b:46:b1:a2:b0:8e:a3:0a:d2:2c:e5:6c:10:
         6b:96:8b:d6:99:f4:b8:63:48:a5:e6:45:2a:86:5e:a0:9b:c0:
         f7:48:ca:3f:98:f4:38:b6:6c:e6:db:11:29:0a:19:c7:a1:ca:
         50:b5:e1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 08:53:33 2025 by rpki-client