This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/6201F1DEC46F11F08682F936C4F9AE02.roa
File:                     6201F1DEC46F11F08682F936C4F9AE02.roa (raw, json)
Hash identifier:          FY0t2N10iRK+Zr0ip8svKKHBrZSNX6MAybdSYEAFs30=
Subject key identifier:   66:1F:F0:A8:E6:0A:B7:A3:EA:F2:AE:6C:CC:45:99:A5:E6:87:AF:5F
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       366C
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/6201F1DEC46F11F08682F936C4F9AE02.roa
Signing time:             Tue 18 Nov 2025 11:11:51 +0000
ROA not before:           Tue 18 Nov 2025 11:11:51 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     834
IP address blocks:        182.54.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 14:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13932 (0x366c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Nov 18 11:11:51 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=691c5477-1ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:25:02:54:46:9d:a0:20:25:59:0b:6a:35:c8:
                    60:c5:46:3a:58:4c:df:02:77:dc:03:32:0d:b6:8b:
                    52:54:85:42:77:d6:fb:b4:27:0a:95:41:8d:96:df:
                    6f:2c:7d:e8:f9:f6:28:25:b5:ef:da:87:54:a7:28:
                    0f:ae:8d:6b:92:53:e4:38:4f:67:19:ca:be:fb:45:
                    91:e3:31:56:60:d4:34:91:1a:5a:2d:e8:c3:01:61:
                    bb:33:73:78:37:4c:e8:a0:70:82:2c:96:6c:45:9b:
                    29:30:ac:81:4b:90:20:4a:3e:87:5a:bc:ec:f5:06:
                    17:9a:02:21:4f:be:59:fc:6e:a1:86:66:29:5f:e5:
                    24:ab:50:57:a9:fd:13:20:9e:86:b7:a6:45:c5:0c:
                    fd:18:20:ac:aa:ff:85:20:50:8c:24:c1:50:4e:7d:
                    45:46:a6:3e:0b:d7:52:c2:78:66:8d:4f:13:f7:8c:
                    d7:57:c2:80:71:a5:74:61:c6:d7:dc:11:0f:9d:d2:
                    bb:f4:a1:80:18:66:78:2e:96:fe:3b:70:d2:ac:87:
                    a5:f4:39:5b:e4:9d:1d:27:ae:d5:e4:d4:8f:d0:d5:
                    c7:77:e2:64:4c:fe:39:04:b8:94:48:d9:4d:d9:5a:
                    ba:7c:76:52:af:1a:e4:4c:08:34:ce:22:b6:9a:a0:
                    82:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1F:F0:A8:E6:0A:B7:A3:EA:F2:AE:6C:CC:45:99:A5:E6:87:AF:5F
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/6201F1DEC46F11F08682F936C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.54.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:b5:a8:ef:bd:c0:82:85:94:c4:ba:ef:3a:34:dd:3f:8d:70:
         50:2b:09:ec:0d:05:9a:a9:9b:58:4e:d4:54:16:76:f2:89:9c:
         50:b9:f5:37:b3:29:8b:01:e0:29:67:2c:f6:48:82:2a:63:91:
         c6:95:c6:7e:b4:e4:3a:24:6e:60:ae:04:7f:40:6f:5b:8b:06:
         68:bc:d0:23:cd:67:9b:75:36:a7:be:99:e9:a8:12:44:ee:f2:
         27:30:bd:78:3a:67:10:1e:1b:4b:e7:99:38:15:f7:44:79:12:
         1b:bd:21:6a:39:8a:bb:ab:27:65:78:00:0b:7b:c1:4d:3f:d1:
         e9:75:a5:d8:dc:22:e4:5b:04:7b:9a:9f:ac:9e:fe:82:d1:9a:
         a6:0d:c5:a4:d6:3c:f7:b5:45:d6:25:d0:30:35:7e:fe:b8:26:
         83:d4:69:4e:0e:b0:76:37:bd:d9:11:23:31:45:b2:c0:b8:ca:
         6d:db:d5:06:10:1b:11:01:c3:3d:29:b3:8c:11:d2:e3:7e:63:
         df:8d:8c:ba:2b:76:67:57:64:35:d7:ee:6c:c6:f1:d1:e5:99:
         1b:6e:a8:22:ab:a3:91:ea:2a:09:d6:76:e9:47:63:05:ac:27:
         af:2d:2d:d8:a1:d2:c6:fc:3f:26:78:da:68:c8:cf:07:54:61:
         a4:71:a1:05
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0
OTExRjFGNEYwHhcNMjUxMTE4MTExMTUxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTFjNTQ3Ny0xYWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAniUCVEadoCAlWQtqNchgxUY6WEzfAnfcAzINtotSVIVCd9b7tCcKlUGNlt9v
LH3o+fYoJbXv2odUpygPro1rklPkOE9nGcq++0WR4zFWYNQ0kRpaLejDAWG7M3N4
N0zooHCCLJZsRZspMKyBS5AgSj6HWrzs9QYXmgIhT75Z/G6hhmYpX+Ukq1BXqf0T
IJ6Gt6ZFxQz9GCCsqv+FIFCMJMFQTn1FRqY+C9dSwnhmjU8T94zXV8KAcaV0YcbX
3BEPndK79KGAGGZ4Lpb+O3DSrIel9Dlb5J0dJ67V5NSP0NXHd+JkTP45BLiUSNlN
2Vq6fHZSrxrkTAg0ziK2mqCCbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGYf8Kjm
Crej6vKubMxFmaXmh69fMB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE
OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvNjIwMUYxREVD
NDZGMTFGMDg2ODJGOTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC2Nu8wDQYJKoZIhvcNAQELBQADggEBAKe1qO+9wIKFlMS6
7zo03T+NcFArCewNBZqpm1hO1FQWdvKJnFC59TezKYsB4ClnLPZIgipjkcaVxn60
5DokbmCuBH9Ab1uLBmi80CPNZ5t1Nqe+memoEkTu8icwvXg6ZxAeG0vnmTgV90R5
Ehu9IWo5irurJ2V4AAt7wU0/0el1pdjcIuRbBHuan6ye/oLRmqYNxaTWPPe1RdYl
0DA1fv64JoPUaU4OsHY3vdkRIzFFssC4ym3b1QYQGxEBwz0ps4wR0uN+Y9+NjLor
dmdXZDXX7mzG8dHlmRtuqCKro5HqKgnWdulHYwWsJ68tLdih0sb8PyZ42mjIzwdU
YaRxoQU=
-----END CERTIFICATE-----
Generated at Fri Dec 5 08:05:19 2025 by rpki-client