This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/ADB02E5C5CB411F0BE8D2465C4F9AE02.roa
File:                     ADB02E5C5CB411F0BE8D2465C4F9AE02.roa (raw, json)
Hash identifier:          GlElYR4MQ+WjHEq4StdZmipu3LXVNxIXh4H6eysyH+4=
Subject key identifier:   05:AC:FB:BF:03:ED:55:46:50:08:1C:3D:14:10:3F:56:C7:27:77:C9
Certificate issuer:       /CN=A9132B7A/serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20
Certificate serial:       01A0
Authority key identifier: 87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/ADB02E5C5CB411F0BE8D2465C4F9AE02.roa
Signing time:             Fri 21 Nov 2025 02:19:27 +0000
ROA not before:           Fri 21 Nov 2025 02:19:27 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     55470
IP address blocks:        2401:4260:fff1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl
                          rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132B7A, serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20
        Validity
            Not Before: Nov 21 02:19:27 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=691fcc2f-b908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:d2:7b:83:21:32:99:18:6c:a4:c1:46:cf:
                    1f:ad:5b:53:a3:d1:67:7f:32:2a:69:e2:80:d9:87:
                    b2:39:b8:14:f0:66:fd:db:18:99:7a:49:dc:0b:40:
                    a4:93:5f:15:70:9f:85:3c:18:90:4d:d9:57:02:2c:
                    86:e8:bc:e9:37:e2:df:07:e1:04:83:eb:9f:41:c0:
                    66:29:5f:37:28:01:f1:4b:78:14:9a:34:64:6e:96:
                    78:7f:f4:65:04:24:06:f1:59:e2:8f:e1:39:ca:08:
                    ae:a6:b1:c8:7e:ed:45:48:d8:96:87:89:f2:fc:20:
                    40:28:73:a9:c8:f7:06:9e:86:c9:aa:6e:3a:ac:e1:
                    05:0b:66:2a:a0:9c:88:84:76:50:ad:0e:ac:fc:c3:
                    bc:7d:58:d9:53:c0:49:53:e7:5c:5a:ec:77:e0:ad:
                    17:3d:30:3b:87:b7:fe:5e:4f:57:9c:53:7a:8e:fe:
                    ad:e5:ce:58:54:01:80:36:b8:d3:f6:d3:16:74:d3:
                    87:57:a3:de:d1:ff:c2:c9:72:69:98:42:57:53:42:
                    36:63:e5:e7:d2:2d:8b:ba:86:85:9d:ff:29:08:d8:
                    f5:40:8a:ed:ae:f5:c7:fa:cb:2e:ab:39:6f:07:a5:
                    00:a8:98:c2:1f:e4:2e:fa:d7:ee:77:19:12:fa:75:
                    2b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AC:FB:BF:03:ED:55:46:50:08:1C:3D:14:10:3F:56:C7:27:77:C9
            X509v3 Authority Key Identifier:
                keyid:87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/ADB02E5C5CB411F0BE8D2465C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:4260:fff1::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:fa:20:75:d2:ff:b5:76:7e:e4:35:4b:cc:e5:51:5a:64:c9:
         85:fa:b9:62:60:e4:25:ce:7f:ed:1b:c1:de:46:f7:76:24:ef:
         88:f2:76:0f:46:44:4e:6b:e8:75:07:26:f2:66:4b:52:9a:4d:
         41:ff:5c:dc:04:a7:8f:16:d9:7d:23:87:1a:43:bd:ba:ee:dc:
         6a:9f:04:f9:30:66:06:34:76:36:99:c3:d4:6c:73:eb:a6:2d:
         66:c6:ed:cc:dd:65:c7:24:8c:70:84:98:72:bb:60:70:32:66:
         7f:bc:93:2d:28:bf:8f:c8:d6:5f:d2:7a:19:ed:38:2e:2c:54:
         79:1e:ce:0d:b5:53:6e:4f:21:bf:58:5d:2f:1c:34:c6:72:b1:
         84:40:e4:1d:55:0d:70:57:05:87:c7:18:e2:9c:12:a9:26:df:
         8c:4b:34:b9:d4:36:d1:ff:b4:c2:ff:ae:39:37:64:ac:7a:dd:
         4a:9c:25:1c:31:1a:1f:f8:48:4a:85:27:74:f7:6b:80:c5:d1:
         8a:7f:ad:08:0c:2e:af:b2:71:d0:59:1b:a4:8b:c9:83:f8:dc:
         d9:b7:7a:d5:d6:06:df:cf:53:d8:4c:9c:4b:a9:59:6b:a1:3e:
         f2:f7:1f:69:c6:01:26:ff:93:1c:18:87:8d:03:f1:ef:f1:b7:
         92:1b:fb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:01:05 2025 by rpki-client