This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01F6431CDD3711EC9EF48256C4F9AE02.roa
File:                     01F6431CDD3711EC9EF48256C4F9AE02.roa (raw, json)
Hash identifier:          shiOCi8JerzzKNFxAB+xO1FlbchCAXUQzSieDiVA75k=
Subject key identifier:   7E:51:3E:33:90:1A:F7:7C:CC:34:0B:4F:B8:AC:E3:82:E9:4B:97:6A
Certificate issuer:       /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial:       03B3
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01F6431CDD3711EC9EF48256C4F9AE02.roa
Signing time:             Sat 08 Nov 2025 23:45:46 +0000
ROA not before:           Sat 08 Nov 2025 23:45:46 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     213151
IP address blocks:        2407:30c0:100::/43 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
                          rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 947 (0x3b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
        Validity
            Not Before: Nov  8 23:45:46 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690fd62a-8f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a4:04:8f:a4:27:b5:ba:9c:b3:20:be:18:b3:
                    e4:89:b3:13:46:9d:98:81:dc:dd:08:54:c6:61:42:
                    73:54:08:2b:f5:49:2a:17:ac:e8:1e:c5:31:a5:e9:
                    15:d7:8d:6d:d8:c7:8a:60:88:30:2e:93:f8:5a:b0:
                    2b:0d:8c:a0:7b:19:f2:88:bc:12:4f:e7:3f:db:13:
                    6f:07:66:56:47:79:92:ea:71:27:24:b2:0f:ae:e0:
                    fe:94:e7:6c:21:07:4f:1c:0f:9a:7a:99:ba:65:c6:
                    10:21:dc:50:ae:46:92:78:3b:36:68:da:f6:05:0c:
                    c4:1c:c4:c1:88:aa:13:ad:3c:f1:4a:f4:e2:1a:79:
                    87:32:1d:5e:7c:b5:28:a5:88:4d:75:78:a8:2d:b6:
                    ed:d7:e9:f0:c1:8b:3e:3a:c0:3b:cc:a3:dc:05:52:
                    96:95:8e:08:98:94:42:c8:74:f4:71:34:b9:00:50:
                    fc:05:34:a6:99:2d:e2:23:36:73:b0:cf:df:07:56:
                    db:ec:33:66:4b:7b:44:bc:c4:1d:79:38:a9:cf:8a:
                    d1:38:c9:85:b2:d0:48:71:d8:b4:eb:29:08:6f:09:
                    49:c1:ad:43:5c:3f:46:87:5b:7d:ea:bf:1e:af:72:
                    95:be:dd:ce:f5:81:2e:01:90:e6:24:3d:b3:af:7d:
                    8d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:51:3E:33:90:1A:F7:7C:CC:34:0B:4F:B8:AC:E3:82:E9:4B:97:6A
            X509v3 Authority Key Identifier:
                keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01F6431CDD3711EC9EF48256C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:30c0:100::/43

    Signature Algorithm: sha256WithRSAEncryption
         8b:4d:e9:97:ea:2d:01:ae:7a:69:0b:2a:f7:30:fd:30:05:72:
         8f:a6:de:db:67:c1:49:df:ca:de:b9:b1:7a:e1:08:14:64:1e:
         39:57:8a:57:03:0d:36:d7:e2:bc:54:01:57:1e:49:43:3c:5e:
         68:2c:25:11:74:e0:23:c9:cf:c1:15:98:1d:03:a3:bf:24:2f:
         f3:09:3e:81:99:23:ce:ba:31:13:11:86:1a:66:89:8f:e1:15:
         f2:6c:52:d8:5c:d6:93:73:80:43:46:45:2e:67:0b:bf:b1:ca:
         a1:70:15:04:e6:b7:df:ee:81:bb:90:9c:fe:1f:94:07:56:b8:
         2d:b0:50:ca:93:ac:73:a4:91:c1:64:23:52:78:e4:18:d4:75:
         0d:5c:f3:69:58:5d:a0:01:ab:2a:ca:d7:8f:10:24:42:d7:31:
         38:e2:c2:2e:42:a3:ec:27:7c:9d:bb:6a:46:31:b0:76:89:28:
         6d:67:10:02:16:d6:f1:b0:cc:72:85:b4:4a:8d:0e:7c:0f:56:
         98:84:00:ea:5c:cc:9f:ab:9b:db:eb:36:17:3a:72:a2:78:c1:
         4b:07:59:10:03:2f:04:35:18:71:73:0f:e7:f0:b3:4c:b1:53:
         74:09:1a:51:b3:a8:dd:80:01:f0:81:1e:a4:da:20:d3:e4:86:
         69:c5:0a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 08:52:14 2025 by rpki-client