This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/81D3CB186B7D11F0A482004CC4F9AE02.roa
File:                     81D3CB186B7D11F0A482004CC4F9AE02.roa (raw, json)
Hash identifier:          qNYtSlmPM+Uvz/D6x/pLP0palJS2i+Z/G329nGefhRQ=
Subject key identifier:   91:90:33:8E:AB:7A:FD:ED:DE:F4:DA:72:FE:60:2B:10:70:85:50:F0
Certificate issuer:       /CN=A9132B7A/serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20
Certificate serial:       019E
Authority key identifier: 87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/81D3CB186B7D11F0A482004CC4F9AE02.roa
Signing time:             Fri 21 Nov 2025 02:19:24 +0000
ROA not before:           Fri 21 Nov 2025 02:19:24 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     147261
IP address blocks:        2401:4260:fff2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl
                          rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132B7A, serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20
        Validity
            Not Before: Nov 21 02:19:24 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=691fcc2c-4b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:3a:7d:a3:31:da:4c:20:8c:6f:95:56:58:
                    6b:e2:38:bc:36:fc:89:62:43:01:83:de:41:4f:52:
                    cd:30:b6:f1:b9:6a:28:28:a0:1f:ac:bb:e3:d5:07:
                    ba:cd:6a:f0:b8:96:23:58:f4:0d:1b:d5:e0:45:b3:
                    4e:36:7c:c4:73:30:9e:ef:ac:c5:6b:7b:81:ac:f7:
                    cf:d2:bb:71:e7:00:a5:ab:e5:9b:c8:25:f2:4c:6d:
                    dd:23:af:3e:68:d8:74:df:cd:75:ea:98:8f:b1:ad:
                    e9:d3:85:bc:8f:eb:31:be:ae:96:a9:26:99:ea:b3:
                    ed:61:4b:0d:21:6f:e4:f2:b0:ef:ba:1b:7b:8e:21:
                    63:66:c1:6c:85:67:8d:b4:c8:fd:c3:51:bc:ba:27:
                    b1:cb:16:d6:57:67:43:37:f5:77:2c:d3:47:83:68:
                    64:b9:1e:36:10:69:18:32:b3:16:5c:0a:94:63:7c:
                    bc:a5:4a:05:bd:16:7b:c5:ce:35:3f:01:17:91:f0:
                    fc:bf:4d:17:1c:85:e7:f4:2f:1d:d5:3b:fb:e6:9f:
                    9b:05:50:db:52:92:53:12:18:9c:a3:1c:a0:f5:76:
                    d2:e6:23:10:8a:37:e2:e6:da:74:45:c1:65:35:3f:
                    7a:7e:1c:13:88:64:7b:31:7c:58:df:60:76:94:40:
                    6c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:90:33:8E:AB:7A:FD:ED:DE:F4:DA:72:FE:60:2B:10:70:85:50:F0
            X509v3 Authority Key Identifier:
                keyid:87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/81D3CB186B7D11F0A482004CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:4260:fff2::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:89:4f:5a:e6:b4:66:25:d0:fe:7f:7e:17:23:0d:de:a0:9e:
         3f:5f:15:02:b3:6d:68:80:5b:8d:6a:27:93:ff:92:7c:37:54:
         8d:78:28:cb:fa:75:9b:bd:84:0e:d0:6d:ab:9e:59:eb:02:f3:
         57:ea:42:7c:44:0a:34:18:4f:ed:ae:84:ba:1f:c7:72:00:c2:
         0f:53:87:74:bf:c8:61:50:46:5b:22:2b:83:34:0f:4b:97:d8:
         6a:ed:93:c6:98:30:bb:62:f6:95:ef:17:f7:cd:e3:ce:cd:02:
         e2:da:b5:bb:42:76:86:a7:03:cf:92:f5:56:68:47:fa:8e:a7:
         ee:ab:66:71:f2:5a:76:d3:37:4b:22:d2:ae:53:f1:d8:dc:d4:
         1f:4a:76:d0:3d:25:47:cf:ea:2b:18:f3:ed:c4:a9:01:4e:3d:
         6b:4a:6e:6a:70:65:d6:4e:01:65:bb:04:0a:7d:06:3c:f0:a7:
         c9:02:78:88:c9:e6:f7:08:e2:8f:a5:4a:41:f0:84:22:2f:3e:
         d5:8c:4a:9f:35:4a:e1:3b:6b:46:9e:8a:e9:d0:19:3f:76:7a:
         1e:24:cc:20:e9:10:5a:6b:b7:27:7c:50:3f:6b:40:39:ac:26:
         2c:44:38:63:5f:35:84:a1:ec:45:0d:b1:c4:80:0d:3b:e7:44:
         6d:7c:a6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:42:52 2025 by rpki-client