This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/F8E5E56ABA3311F097F3633AC4F9AE02.roa
File:                     F8E5E56ABA3311F097F3633AC4F9AE02.roa (raw, json)
Hash identifier:          NIZyKmCCRM9ECKj6ukBywbK33SdgVkLHapOUhLqLTmM=
Subject key identifier:   21:A0:D3:F6:49:30:9A:E6:22:E3:B7:A8:42:88:EA:01:C5:DA:A3:32
Certificate issuer:       /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Certificate serial:       08AD
Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/F8E5E56ABA3311F097F3633AC4F9AE02.roa
Signing time:             Wed 05 Nov 2025 10:41:23 +0000
ROA not before:           Wed 05 Nov 2025 10:41:23 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     24435
IP address blocks:        116.0.35.0/24 maxlen: 24
                          116.0.36.0/24 maxlen: 24
                          116.0.37.0/24 maxlen: 24
                          116.0.39.0/24 maxlen: 24
                          116.0.45.0/24 maxlen: 24
                          116.0.48.0/24 maxlen: 24
                          116.0.49.0/24 maxlen: 24
                          116.0.50.0/24 maxlen: 24
                          116.0.51.0/24 maxlen: 24
                          116.0.52.0/24 maxlen: 24
                          116.0.53.0/24 maxlen: 24
                          116.0.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
                          rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 19:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2221 (0x8ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
        Validity
            Not Before: Nov  5 10:41:23 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690b29d3-6258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:db:e8:e9:ba:c7:ce:e0:49:d2:58:6a:06:38:
                    93:30:dd:16:36:86:c4:74:22:a9:4d:ce:d5:85:01:
                    0d:1e:36:c5:7d:3c:8a:9d:81:b2:53:0a:5e:a3:c1:
                    32:89:9b:da:98:07:5c:ab:b6:90:a9:c7:1f:59:ed:
                    45:fc:04:69:35:96:8f:7f:51:3f:30:58:82:03:d1:
                    82:0d:2a:47:e9:71:bf:36:21:59:dd:38:1f:9e:43:
                    b3:f0:c9:8b:8a:1d:48:a0:37:d6:ff:ec:6b:15:6d:
                    18:16:fa:3c:3d:99:52:8e:d1:a3:67:2a:fa:6d:7d:
                    50:62:e8:89:a5:3e:67:c5:fb:06:8d:16:c6:5e:34:
                    70:3b:8e:63:fd:cd:52:4c:6c:7e:68:1d:69:7c:74:
                    d9:03:9d:6c:0f:37:61:d5:c3:df:39:09:be:d2:af:
                    0c:ab:69:dd:a8:6a:8c:d2:9c:fe:9c:18:49:c7:bb:
                    21:a6:7a:e4:66:da:3a:9d:a1:97:90:52:62:3d:05:
                    c6:70:63:7d:b0:79:89:7b:e7:33:71:23:c7:71:f0:
                    c1:59:8a:e6:1e:c8:e8:dd:9a:f7:97:ab:13:d7:e0:
                    19:b4:62:a7:86:d6:1e:61:51:d5:a9:b7:84:16:55:
                    a9:d5:51:94:f5:1b:f0:9e:03:eb:00:6e:80:a7:b8:
                    eb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A0:D3:F6:49:30:9A:E6:22:E3:B7:A8:42:88:EA:01:C5:DA:A3:32
            X509v3 Authority Key Identifier:
                keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/F8E5E56ABA3311F097F3633AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.0.35.0-116.0.37.255
                  116.0.39.0/24
                  116.0.45.0/24
                  116.0.48.0-116.0.54.255

    Signature Algorithm: sha256WithRSAEncryption
         7c:d6:55:5b:76:e4:a5:47:5c:c1:5c:2e:04:a0:75:a6:0b:9f:
         c2:f8:81:74:c8:cc:bb:e4:9c:31:66:0a:51:ca:60:36:e9:57:
         46:21:bd:d9:ee:7d:80:d5:b1:71:ea:b6:57:30:88:c5:7a:1a:
         ff:f1:14:ce:11:69:fd:36:b2:2d:e0:0a:8f:d2:99:15:43:1f:
         12:65:9f:b1:36:54:32:04:91:4f:e2:25:ad:8f:0c:75:b8:48:
         e6:e2:60:4c:9b:f8:38:c6:b3:b1:df:7f:fe:89:c2:10:b0:b6:
         8c:0b:6f:c1:c2:5b:c3:08:79:7d:a4:f4:f4:26:46:71:37:52:
         2b:c7:f7:03:86:e9:53:71:ba:b8:e3:84:da:d8:2f:ec:17:e4:
         0b:0b:16:ad:52:10:a9:63:07:26:ee:e1:00:97:79:06:c6:04:
         b3:f5:81:30:88:3a:b7:0a:fb:18:6a:a4:c8:93:c5:e4:c1:ee:
         68:db:da:c5:1e:d8:13:71:17:a6:a5:5e:f0:58:1a:7e:67:d5:
         72:01:57:c0:34:aa:0a:c7:f6:3f:ac:07:61:fc:a2:4c:bd:70:
         14:de:52:ee:e1:13:b7:65:38:89:cf:30:ce:71:b2:02:8e:5b:
         5d:78:ca:28:ec:ab:19:cc:f3:4b:f5:0c:97:36:8a:6e:db:18:
         aa:c2:c6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 22:11:41 2025 by rpki-client