This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/5725C1363AB711EDBB6FC759C4F9AE02.roa
File:                     5725C1363AB711EDBB6FC759C4F9AE02.roa (raw, json)
Hash identifier:          MMNV0WFJPDmBrnJ58hLCTn0qZ0UGPXof6MadQzXXtIs=
Subject key identifier:   1F:A0:0C:BB:A3:52:C2:CC:DE:34:55:5B:80:F5:DC:98:61:94:A4:DB
Certificate issuer:       /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial:       03B2
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/5725C1363AB711EDBB6FC759C4F9AE02.roa
Signing time:             Sat 08 Nov 2025 23:45:45 +0000
ROA not before:           Sat 08 Nov 2025 23:45:45 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     209242
IP address blocks:        2407:30c0:182::/48 maxlen: 48
                          2407:30c0:183::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
                          rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 946 (0x3b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
        Validity
            Not Before: Nov  8 23:45:45 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690fd629-5479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ec:76:5f:de:8b:e9:54:84:da:d2:55:30:06:
                    85:1e:a6:72:52:1d:4c:c0:e8:f9:54:78:db:7b:7b:
                    b4:e5:6a:61:ce:c5:3e:a8:e7:35:e0:c1:6c:62:40:
                    ec:dd:d0:7e:d5:6b:d3:30:52:75:94:f1:d3:5a:76:
                    52:d5:e9:8b:be:24:a6:c1:03:08:2f:ce:00:15:57:
                    26:44:5f:a5:19:98:a8:ab:54:a2:85:78:79:2f:f6:
                    81:df:35:b2:00:79:ca:9e:6e:79:50:7c:68:39:76:
                    89:30:dd:d4:0c:76:59:25:38:3c:ff:ba:4e:e6:1d:
                    b1:a1:ef:40:e6:80:ac:cf:c1:1e:72:ae:a0:bf:dc:
                    78:70:25:61:0e:da:73:a0:61:4a:6d:75:69:b6:60:
                    75:e9:ef:11:fb:25:fd:5f:1d:75:fd:fe:01:d0:e3:
                    f2:e7:a5:73:82:54:6a:cc:42:13:88:44:58:1e:55:
                    ff:80:dd:05:dc:ba:82:60:b6:8f:47:81:4c:e6:55:
                    ad:d6:30:bf:fa:8f:5b:c3:2a:53:39:ba:8d:08:e3:
                    4d:97:11:6b:01:2d:f5:8c:e8:94:bc:46:8e:0c:8a:
                    47:38:e7:04:c9:d6:8e:ac:63:cf:54:40:6f:58:12:
                    1e:e2:9e:6b:b6:43:60:85:9e:af:e0:37:b3:55:5d:
                    d7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A0:0C:BB:A3:52:C2:CC:DE:34:55:5B:80:F5:DC:98:61:94:A4:DB
            X509v3 Authority Key Identifier:
                keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/5725C1363AB711EDBB6FC759C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:30c0:182::/47

    Signature Algorithm: sha256WithRSAEncryption
         95:69:8a:29:27:3e:62:47:97:33:56:fa:8a:a3:2f:88:9d:94:
         c4:7e:38:7d:97:a6:4e:43:d6:91:c3:44:a7:ac:ba:6c:9d:a6:
         73:a4:3a:37:5c:e8:f5:d1:e4:a5:d5:ba:a8:42:22:21:3e:2d:
         55:d1:4c:08:c1:a2:8c:1b:d1:4d:26:7d:ca:45:03:87:ea:b8:
         d0:13:37:da:09:d4:20:bb:35:a9:31:f4:07:42:56:de:f3:c4:
         5e:b3:fe:27:a1:e6:c1:f7:f5:f6:38:20:9d:95:8f:1b:1a:9b:
         74:eb:9c:75:5e:80:da:fb:04:f9:e3:e3:54:e1:2a:ca:8e:4e:
         ce:91:f2:1e:61:6f:6f:91:3f:5f:22:95:f3:e7:e9:f3:e8:05:
         19:0e:d8:be:0c:78:b5:bf:7b:11:e6:9a:eb:d4:a8:8e:5a:b1:
         fe:aa:d2:17:3c:ec:14:da:5b:fe:32:03:f9:a7:90:b6:ce:53:
         bc:40:b8:08:7b:3f:a7:24:23:d3:fd:bd:75:24:e5:69:c6:ec:
         92:44:b3:23:bb:7b:2f:30:90:80:e2:c8:ac:9e:c7:c5:e2:30:
         92:aa:de:8a:28:74:75:db:2e:07:4b:cc:09:93:bf:c1:c2:fb:
         69:3b:ee:7e:32:32:3f:f9:63:5d:16:7a:34:5d:24:54:7a:58:
         32:5c:ef:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 08:53:19 2025 by rpki-client