This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6c88c264-a40d-4c0b-9138-31ff0c2ca926.roa
File:                     6c88c264-a40d-4c0b-9138-31ff0c2ca926.roa (raw, json)
Hash identifier:          JdlOKPbJZW0POU6q1mfL97rv7cg9Q95SZhKwOC4PDhw=
Subject key identifier:   11:C4:A3:42:52:38:FF:71:10:C0:EE:7F:09:64:D0:EB:7E:14:C4:D6
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       409893C346AC54779850E203A77DB0ADDBA4E6CC
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6c88c264-a40d-4c0b-9138-31ff0c2ca926.roa
Signing time:             Wed 03 Dec 2025 00:01:11 +0000
ROA not before:           Wed 03 Dec 2025 00:01:11 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        116.206.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 00:10:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:98:93:c3:46:ac:54:77:98:50:e2:03:a7:7d:b0:ad:db:a4:e6:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Dec  3 00:01:11 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=ad3519da99af1fe9e72f9b4bb1c2f2f3a3a6069cb3826afee7a85f526de5cab1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d2:e4:07:36:14:c0:ac:a6:e1:6c:69:53:57:
                    19:2f:ee:96:8c:2e:3f:7c:6b:2b:7d:10:9b:ce:67:
                    f2:09:d1:8e:6a:f7:0d:4e:e1:00:6c:68:3e:e2:f8:
                    53:89:7b:fb:b4:53:3d:dd:ff:2a:b1:07:dd:03:ea:
                    8b:b0:26:f6:c8:dd:2d:4f:27:c2:91:68:4e:28:72:
                    70:7a:cd:18:ab:01:b0:fd:1c:a1:9c:38:df:b7:31:
                    3b:2f:33:ad:ec:b9:9c:c8:2d:35:fa:10:75:16:85:
                    de:1d:73:c4:e0:6d:a0:01:9e:43:be:6d:3a:14:a7:
                    72:8b:62:b1:a6:72:13:f1:30:66:89:6e:68:92:dd:
                    2a:6b:f4:24:f4:07:5b:8d:40:bd:ab:a4:b8:fa:2d:
                    15:ab:02:1a:51:b4:a2:5e:64:7d:5b:6e:7d:c5:98:
                    49:b5:33:69:fd:c8:c6:03:aa:f6:58:a0:cd:85:6d:
                    b8:2d:a5:34:6c:ab:24:15:48:62:be:6a:2b:02:b3:
                    67:24:8e:50:15:56:d4:70:59:cf:b1:0b:e3:80:54:
                    10:f8:95:d3:fd:39:3e:ae:76:32:18:fb:8f:4a:6c:
                    73:f8:a3:c6:bf:79:a5:31:ec:4d:37:a2:92:c7:cf:
                    ec:71:f2:8e:94:ee:f1:0c:6e:6c:98:d2:71:6c:c7:
                    8f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C4:A3:42:52:38:FF:71:10:C0:EE:7F:09:64:D0:EB:7E:14:C4:D6
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6c88c264-a40d-4c0b-9138-31ff0c2ca926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:13:6f:23:ae:3b:c6:7d:0e:79:76:b4:4c:e9:28:18:62:21:
         e5:f9:b6:bb:db:d9:52:ec:a0:12:0e:21:7d:66:43:62:9e:14:
         b1:56:b7:03:2f:a6:51:a5:cf:e4:eb:08:7e:8f:e8:1a:76:2c:
         55:19:38:44:8d:7a:31:36:35:54:76:39:1b:3c:9a:04:f1:57:
         b6:fc:cd:b8:49:a9:56:db:0a:2c:88:ad:1a:d4:29:81:6f:60:
         60:e2:56:db:75:b3:cc:44:f9:7a:ff:26:0e:43:91:00:93:5a:
         3e:4c:76:ce:c1:f1:c8:42:3d:a8:c3:70:0a:39:d4:1b:cd:d9:
         8d:ef:58:92:48:d3:e5:15:b7:2b:9d:76:2c:2d:ff:96:2a:3d:
         24:47:d4:5f:c7:ac:68:26:4d:e3:29:02:5b:84:cb:2a:6c:73:
         f1:3b:f4:20:94:44:1d:14:66:3e:3f:7c:2f:c5:7d:cf:e7:1a:
         7a:c2:2e:2a:42:ae:90:6f:b3:d6:a5:e5:1f:39:f9:98:01:9b:
         b8:06:1e:90:e9:79:c3:04:4a:bf:80:7f:d2:5e:c0:26:e6:ee:
         f1:a7:d1:2d:50:77:1a:b7:1e:1d:b1:2a:50:46:8b:dc:31:34:
         10:86:b4:ac:8e:e0:0f:40:37:23:8a:75:28:ec:c8:d9:46:54:
         5c:46:b5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:04:26 2025 by rpki-client