This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/1D5E8EB6887B11EE8981CE28C4F9AE02.roa
File:                     1D5E8EB6887B11EE8981CE28C4F9AE02.roa (raw, json)
Hash identifier:          8onb495DsY+6sybfjvn3/yiqLOv+8ormyHYLSFvICB8=
Subject key identifier:   C7:48:D3:F1:55:AC:43:19:95:7D:CC:66:35:D3:D1:40:E6:CA:02:9D
Certificate issuer:       /CN=A911A1FC/serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
Certificate serial:       017D
Authority key identifier: 11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/1D5E8EB6887B11EE8981CE28C4F9AE02.roa
Signing time:             Mon 01 Dec 2025 02:30:30 +0000
ROA not before:           Mon 01 Dec 2025 02:30:30 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     132408
IP address blocks:        180.94.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl
                          rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 01:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A1FC, serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
        Validity
            Not Before: Dec  1 02:30:30 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692cfdc6-d0b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:fe:7a:3c:d5:d5:17:cd:a2:d7:1c:f7:00:
                    ef:49:dc:f2:fd:44:8c:7f:62:6e:92:01:a2:84:7b:
                    8d:3a:71:81:05:7f:e2:38:7e:cf:0d:93:13:7c:88:
                    99:cd:36:59:c6:fc:91:ac:36:4a:ae:b5:2a:61:c3:
                    91:70:1b:2d:b4:cf:f5:7e:92:35:bd:68:30:20:59:
                    4d:af:76:12:9b:26:75:ec:e3:7c:d5:28:a5:ab:90:
                    2f:9b:07:ad:93:46:9a:12:ca:7f:cb:bd:29:14:df:
                    85:00:e2:b3:eb:41:83:1e:1c:f6:b6:d6:fa:7e:54:
                    34:90:10:53:25:f8:29:d8:f4:93:69:24:93:ec:9b:
                    dd:d5:3b:02:52:4b:3e:c1:c4:cd:00:b5:fe:ff:8f:
                    66:c7:f8:f6:b6:9d:31:68:24:d6:09:8a:49:32:47:
                    48:d4:22:07:bc:8e:ab:d5:70:15:cb:24:e4:38:b2:
                    d5:27:84:50:c6:e3:6e:36:10:59:b0:de:61:83:02:
                    9c:5a:ba:75:6c:4e:df:e4:7e:ac:92:5d:6d:5c:3a:
                    4d:ad:24:fc:65:c0:2e:35:49:e3:da:54:d1:3c:bf:
                    15:c6:1a:bc:8a:3f:db:ae:c8:10:97:9c:23:50:a2:
                    c8:41:ec:71:48:ef:62:9c:9c:e8:c6:42:d2:e1:e3:
                    a8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:48:D3:F1:55:AC:43:19:95:7D:CC:66:35:D3:D1:40:E6:CA:02:9D
            X509v3 Authority Key Identifier:
                keyid:11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/1D5E8EB6887B11EE8981CE28C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:91:c5:f8:ce:63:4a:63:c2:03:8b:31:60:2e:27:b0:48:62:
         4f:33:dc:e4:32:15:d0:65:e9:f9:96:75:c3:c4:09:9d:0e:c0:
         55:75:3a:f5:1b:e5:67:dd:04:65:a1:e6:ce:9b:28:1f:2e:1f:
         18:5f:00:8b:a2:7f:af:ec:de:6d:82:16:f0:a8:4a:3d:2e:19:
         c5:0f:6a:ee:11:99:b4:fe:d6:e7:28:ee:28:ef:10:dc:61:31:
         45:2e:13:07:03:d8:08:9c:6c:58:eb:4f:01:d1:cc:e0:b6:62:
         b3:00:89:5f:7e:d9:bf:ab:23:0e:26:b9:fc:7a:b3:09:e5:3c:
         81:21:aa:6e:cc:9c:a0:11:6c:ae:bb:61:54:d0:2d:bd:99:df:
         c2:7e:64:1a:84:53:8a:14:4c:b0:2f:64:92:2a:61:a4:cc:39:
         51:04:6b:20:b2:ec:cc:29:03:0b:8e:1a:85:50:ef:eb:eb:f1:
         d2:db:95:f2:66:80:86:0b:2c:fb:61:83:42:c6:81:7d:04:90:
         ee:6b:0e:2a:95:ba:ee:bf:a3:dc:70:20:e6:0e:5e:79:f6:d1:
         bf:75:04:62:fc:f8:b6:1f:b3:57:5f:fb:1e:20:b8:c9:cb:6a:
         00:34:45:32:7a:d9:bd:e2:29:63:3a:84:c7:01:3f:50:0d:72:
         cc:4e:9e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 17:12:49 2025 by rpki-client