This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/61352DFCC46F11F0848EF936C4F9AE02.roa
File:                     61352DFCC46F11F0848EF936C4F9AE02.roa (raw, json)
Hash identifier:          rzFGoJ54qGibQHLbmWB2hMncJkQRjlW4zZk27bctTrE=
Subject key identifier:   A1:22:6F:54:1D:3F:13:DC:7D:81:30:25:B2:BD:A4:2B:A8:FA:8C:BC
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       366B
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/61352DFCC46F11F0848EF936C4F9AE02.roa
Signing time:             Tue 18 Nov 2025 11:11:50 +0000
ROA not before:           Tue 18 Nov 2025 11:11:50 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     393942
IP address blocks:        182.54.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 14:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13931 (0x366b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Nov 18 11:11:50 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=691c5476-2e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8b:8e:fc:03:3c:42:99:ae:d4:90:42:88:ad:
                    de:d2:0c:33:be:e7:01:29:19:50:11:e7:26:03:94:
                    80:51:e6:4e:15:4a:dd:61:f2:01:49:a4:4c:83:e7:
                    85:b4:b8:64:71:ca:63:7e:b5:9a:26:da:ca:5f:f0:
                    7a:62:d7:c3:f2:b0:55:a1:1e:06:f3:1a:39:ef:3b:
                    6e:b6:2e:e7:7e:20:d4:fa:15:ad:1d:53:ce:ed:2b:
                    a0:aa:05:1f:c5:0b:dd:23:39:4c:4c:bf:fb:e8:f2:
                    bd:f5:e8:92:3d:96:ab:a6:41:2d:45:19:4c:6d:3b:
                    72:bf:ae:30:ee:5b:1b:19:5e:72:54:1e:02:c0:65:
                    68:a4:a9:16:7c:64:da:ba:51:30:e6:de:21:72:b3:
                    7f:fb:70:c4:d3:2e:92:45:75:81:40:73:67:b7:e4:
                    fe:a6:14:fc:e1:d7:cc:e5:75:cc:6d:0a:07:b9:a1:
                    5c:20:14:17:d4:7d:9f:25:7d:51:39:5e:fa:f7:14:
                    cf:17:60:d3:a8:b3:98:6e:65:3b:51:47:1e:96:1c:
                    3f:95:78:84:cf:d8:4b:55:60:f7:01:ac:e6:e7:e9:
                    bd:4f:8f:e1:05:c4:f5:bf:99:a1:e0:b5:78:0e:3e:
                    90:e9:68:a9:d5:99:27:c5:e9:f1:88:65:b6:5e:a5:
                    85:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:22:6F:54:1D:3F:13:DC:7D:81:30:25:B2:BD:A4:2B:A8:FA:8C:BC
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/61352DFCC46F11F0848EF936C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.54.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:d7:ad:74:b3:08:77:68:11:69:1a:c9:ca:a6:cf:b1:01:37:
         34:8b:a8:95:f6:b9:60:19:96:0e:c1:62:e8:dd:bb:a9:2c:f1:
         44:a3:d1:b4:11:75:a9:5e:2d:a6:7c:85:9e:cc:6c:4f:54:97:
         93:d3:2b:83:16:c0:44:43:c3:7e:bd:91:69:e4:f2:87:3d:b6:
         f5:2d:50:55:be:9a:fe:71:f1:b4:1f:3a:81:32:a7:76:3f:24:
         a0:21:88:0c:dc:ba:b0:1d:37:b7:8c:36:eb:ba:2d:5a:24:32:
         65:cb:17:d8:46:6e:51:a4:ee:f0:9a:4c:f6:62:c2:0c:c7:a6:
         ba:b2:d8:89:9f:2c:c0:74:40:02:67:77:d4:ee:b4:e5:73:d7:
         2b:a5:0a:e0:76:9f:dd:47:76:45:02:6b:b5:a0:da:af:14:8a:
         bf:7c:b9:b1:98:0e:ce:50:00:f4:69:07:f1:3d:5f:ca:df:b1:
         c1:8b:e8:5b:73:fe:cd:cb:5a:d1:9c:1b:ef:5b:62:91:3e:f3:
         9c:38:38:a6:76:5d:39:5c:e8:a1:4c:e4:04:8a:8c:8a:df:07:
         14:26:bf:52:ce:74:73:dc:6e:35:55:15:53:b0:c3:c2:50:e3:
         ed:d0:69:2b:2e:39:76:dd:6b:95:73:07:49:4e:81:78:94:fc:
         66:1a:34:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 06:43:45 2025 by rpki-client