This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/57680C9CCA9911F0A4E15D65C4F9AE02.roa
File:                     57680C9CCA9911F0A4E15D65C4F9AE02.roa (raw, json)
Hash identifier:          Z9LTiur1herT8zSPtiHbMjkBlisQeIO9j0t2u6mg3io=
Subject key identifier:   3E:60:2D:A8:59:5B:9D:E0:1E:8C:F4:23:29:63:EA:36:F4:23:DE:FB
Certificate issuer:       /CN=A911EEF8/serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C
Certificate serial:       BB
Authority key identifier: 56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/57680C9CCA9911F0A4E15D65C4F9AE02.roa
Signing time:             Wed 26 Nov 2025 07:27:20 +0000
ROA not before:           Wed 26 Nov 2025 07:27:20 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     18383
IP address blocks:        202.10.96.0/20 maxlen: 24
                          2403:1800::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl
                          rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 04:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EEF8, serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C
        Validity
            Not Before: Nov 26 07:27:20 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6926abd7-76f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a0:9f:93:43:61:a4:90:09:22:07:2d:78:17:
                    b2:af:33:dc:54:2b:cc:dc:67:e4:1e:01:da:8d:0b:
                    35:87:95:ea:ea:55:59:f1:98:f9:75:83:12:bf:73:
                    dd:28:39:ab:51:b6:8b:78:aa:4f:5b:2f:99:5b:58:
                    f7:33:9c:b9:72:cf:ff:61:68:95:cf:cc:22:0b:95:
                    0b:8a:79:44:70:85:8a:31:e0:bc:6c:58:cf:bd:9b:
                    02:d1:f7:ce:43:6f:28:ef:b3:58:c8:88:90:9b:f7:
                    a6:79:80:6a:b6:20:46:c5:2e:90:3b:ee:78:f4:73:
                    9b:40:75:1b:e2:79:4f:5a:0e:a8:36:92:35:49:42:
                    37:43:cc:72:3a:db:2a:ce:e8:c1:bb:c5:39:a6:4d:
                    2b:97:9a:18:ce:99:64:0d:fe:5d:58:c7:4b:04:3e:
                    11:b2:2d:11:c9:d8:14:fa:eb:db:ad:1c:43:2a:8a:
                    70:2e:48:2a:47:e9:42:22:be:da:fc:a4:66:4d:52:
                    47:18:95:92:f4:30:ac:bd:35:1c:08:51:a5:b5:75:
                    40:93:93:51:f9:ff:5d:02:25:f8:58:6f:18:2b:d7:
                    6a:5e:94:5f:e5:81:fd:ca:73:c6:e1:da:66:39:ab:
                    b1:18:91:c3:49:66:92:e0:98:39:61:3f:41:f1:d8:
                    bb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:60:2D:A8:59:5B:9D:E0:1E:8C:F4:23:29:63:EA:36:F4:23:DE:FB
            X509v3 Authority Key Identifier:
                keyid:56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/57680C9CCA9911F0A4E15D65C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.96.0/20
                IPv6:
                  2403:1800::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:29:16:38:a7:09:72:e8:21:5a:33:07:48:d0:04:49:9a:35:
         80:c4:b1:7c:9b:37:67:b5:1b:42:a5:a6:7a:91:5f:b6:6c:ee:
         b8:ed:c2:c2:14:9e:23:cf:65:78:de:a8:5a:47:f5:8c:f6:91:
         1b:8a:89:0d:d7:3f:9f:5b:d4:1c:b4:84:12:82:02:85:2f:62:
         1d:c1:94:1e:1c:7c:bd:82:3a:3a:ed:fe:33:03:8f:78:8f:8e:
         55:36:d4:39:dc:18:bb:e2:49:3a:6b:27:33:74:d1:84:37:67:
         7a:82:12:31:60:15:68:c5:80:62:e8:49:b2:5f:d4:8d:e7:2b:
         45:4b:0f:fe:4b:a2:ef:9d:36:86:92:f5:64:ab:a1:01:1e:7d:
         b9:6e:40:3b:13:8b:a2:c5:27:19:71:27:7b:c9:84:9f:be:fa:
         5c:1c:12:bf:a5:b0:04:18:b2:f1:7d:52:46:61:06:d1:d7:ed:
         5f:64:7a:dc:a3:23:bc:5d:9e:b7:cb:06:c0:54:e0:7d:3c:ea:
         08:26:14:b8:76:15:95:37:d4:ce:c5:b2:c0:f6:a4:42:e5:bf:
         e4:bd:06:41:28:14:58:fa:91:50:9d:35:25:07:32:b3:3d:1e:
         47:e2:2e:df:2d:22:ee:49:68:44:91:da:07:f6:cc:e2:73:54:
         0c:b0:b3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:45:01 2025 by rpki-client