This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/AC465D48D02211F0A5535D5AC4F9AE02.roa
File:                     AC465D48D02211F0A5535D5AC4F9AE02.roa (raw, json)
Hash identifier:          0Su3Xy3ETeqv2p9otS7nhMUjS14WdCWUwds8sCIua50=
Subject key identifier:   74:AE:1C:FB:FE:C2:A4:8E:88:A5:91:CF:8C:4E:99:CD:22:C9:B2:4D
Certificate issuer:       /CN=A91F1451/serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
Certificate serial:       06
Authority key identifier: 7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/AC465D48D02211F0A5535D5AC4F9AE02.roa
Signing time:             Wed 03 Dec 2025 08:32:59 +0000
ROA not before:           Wed 03 Dec 2025 08:32:59 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     141409
IP address blocks:        2001:df6:62c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl
                          rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 08:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1451, serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
        Validity
            Not Before: Dec  3 08:32:59 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=692ff5ba-5a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:09:24:4c:e6:3e:8c:cc:f5:d1:65:b0:49:
                    b1:7f:a3:d4:1d:19:ae:c1:88:0a:57:9c:85:9f:62:
                    84:be:82:7d:02:7e:9f:c2:d3:3b:eb:6e:f5:7f:24:
                    43:cb:1d:7e:43:3d:12:6f:c8:a7:05:1d:b8:ed:f9:
                    50:47:bf:69:96:9c:e0:1a:95:da:9c:1b:7b:86:7b:
                    a4:fc:4a:b5:07:37:bc:9c:78:93:53:f3:e6:42:c4:
                    b7:0e:db:1d:de:b4:59:17:a1:01:92:3d:f9:eb:33:
                    f2:c0:17:fb:26:26:28:85:5d:47:fd:be:83:04:39:
                    49:60:2c:71:86:f9:9b:71:25:48:49:78:b4:0e:ed:
                    a1:39:b2:f8:44:31:79:45:95:5e:b1:7a:03:a3:f9:
                    21:22:9c:75:e0:a4:bc:f9:de:ec:82:6f:d9:45:e4:
                    2f:ef:e1:07:aa:c9:ff:2b:ef:c5:f5:da:fb:76:84:
                    05:78:f2:a0:c2:03:bc:ff:7b:e8:8e:b3:05:80:f0:
                    ef:05:ec:26:fe:b5:bf:50:0d:c5:fd:5c:20:88:86:
                    af:58:6a:b5:a7:0c:94:f8:31:51:85:7b:7a:87:f8:
                    3c:c1:06:23:ca:58:21:fd:e4:b5:3a:bf:6f:a9:6a:
                    dd:61:4e:a0:22:f5:3b:77:b4:a6:e3:e1:f9:db:ea:
                    af:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AE:1C:FB:FE:C2:A4:8E:88:A5:91:CF:8C:4E:99:CD:22:C9:B2:4D
            X509v3 Authority Key Identifier:
                keyid:7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/AC465D48D02211F0A5535D5AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:62c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:c8:9b:46:df:52:e3:eb:de:fb:71:96:ba:85:c8:60:99:d2:
         80:b2:39:ce:52:f1:42:77:8e:d4:02:f5:2d:08:5d:99:e6:8b:
         ce:b4:b4:59:ac:60:c8:a2:d9:db:f1:56:d5:c9:61:f1:8e:d5:
         94:8b:d2:d9:14:91:4c:82:03:9a:00:b7:02:5c:af:ef:50:c5:
         3b:9b:50:3d:42:22:c5:4a:8d:4e:03:6f:8c:cf:4a:6a:56:6b:
         2f:2d:d0:78:ab:9b:b1:8f:36:d2:7c:34:e0:7a:8e:9f:14:f2:
         30:03:37:e3:2f:6a:a5:46:0b:78:9b:42:ad:89:50:bd:05:ae:
         ad:95:48:48:b6:b0:57:b1:b0:8f:c7:ef:65:bc:cb:17:c2:28:
         e2:97:eb:65:64:6e:f4:36:df:af:90:c1:38:d1:1e:16:4c:6a:
         2e:c7:a3:bc:d7:0e:a5:3a:8e:c5:f7:ee:a1:88:08:f4:e7:ae:
         9b:bf:b9:b0:cd:ca:62:d8:9f:52:82:6c:48:25:15:c6:1a:d6:
         c3:f8:d1:85:66:cf:84:c6:d3:3e:88:5c:40:a7:66:39:e5:48:
         7f:22:d2:b6:71:58:22:30:cf:0f:7b:85:ff:60:d6:0e:fc:5a:
         8e:da:f6:72:88:a4:e0:63:7d:18:95:79:8f:e9:de:f0:fb:cc:
         a4:63:94:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:05:07 2025 by rpki-client