This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/D6F76118231C11EF84144357C4F9AE02.roa
File:                     D6F76118231C11EF84144357C4F9AE02.roa (raw, json)
Hash identifier:          MiuSv15VLIaeb36ClOcMlCFhKBkosPaBSp5hyovVY7I=
Subject key identifier:   01:5A:EC:23:5F:44:91:BF:0A:F2:74:9F:E1:71:E2:A8:82:A4:F1:14
Certificate issuer:       /CN=A914C475/serialNumber=228507EFF81AA28E491E326FBD1DC3B3C90872B8
Certificate serial:       0756
Authority key identifier: 22:85:07:EF:F8:1A:A2:8E:49:1E:32:6F:BD:1D:C3:B3:C9:08:72:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/D6F76118231C11EF84144357C4F9AE02.roa
Signing time:             Fri 28 Nov 2025 18:22:29 +0000
ROA not before:           Fri 28 Nov 2025 18:22:29 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     134723
IP address blocks:        2403:680::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl
                          rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 17:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1878 (0x756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C475, serialNumber=228507EFF81AA28E491E326FBD1DC3B3C90872B8
        Validity
            Not Before: Nov 28 18:22:29 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6929e865-2324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:93:7b:81:26:45:98:83:c4:6d:ba:4e:a6:eb:
                    20:48:03:72:a1:0d:e1:30:e0:4a:b8:d5:8d:47:d1:
                    85:4d:ce:15:4c:3f:96:c1:7b:ce:54:7a:ec:12:8d:
                    c7:02:2c:90:2b:4f:0c:2a:5a:e6:0b:51:a4:83:94:
                    ff:d8:5a:ca:49:c0:49:f7:68:bc:98:8f:ad:e6:ea:
                    59:ab:0f:dd:53:b8:89:65:1a:16:34:6f:b1:e7:82:
                    05:3b:8c:ab:2e:c2:e6:d7:70:78:03:bf:b3:6a:bf:
                    9d:a6:0a:31:eb:49:29:b8:05:63:52:08:74:b3:bc:
                    72:61:b4:99:51:17:ff:74:98:28:51:e3:e1:f2:45:
                    98:90:bf:8b:23:c7:5f:61:14:13:c7:aa:00:28:90:
                    74:d4:47:49:59:00:2d:24:25:1e:67:aa:be:b6:10:
                    b9:54:40:80:43:f4:62:7b:c0:5d:30:75:d6:c0:1a:
                    87:81:86:41:d7:e2:71:7e:ac:b3:15:bf:58:f4:a7:
                    30:e1:31:d5:4a:0c:f7:90:97:95:6c:fd:f2:40:9d:
                    d7:6e:a1:e1:f9:63:b9:14:b4:43:ce:45:41:9e:64:
                    ad:fe:5a:8f:dd:c9:90:f5:14:2a:f2:a0:fa:8d:d8:
                    70:18:38:14:3a:ed:40:82:e9:88:41:71:f3:c1:56:
                    58:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5A:EC:23:5F:44:91:BF:0A:F2:74:9F:E1:71:E2:A8:82:A4:F1:14
            X509v3 Authority Key Identifier:
                keyid:22:85:07:EF:F8:1A:A2:8E:49:1E:32:6F:BD:1D:C3:B3:C9:08:72:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/D6F76118231C11EF84144357C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:680::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:7e:16:2d:d5:f0:31:4e:0b:d4:fc:1e:88:68:c5:68:cd:c5:
         5c:29:7c:b2:e6:03:3a:cc:84:fa:75:12:06:1e:d1:9f:9c:e5:
         d9:df:6f:0c:bf:9c:f9:6f:4c:9e:67:9d:a1:de:b7:da:65:7d:
         33:24:9c:76:05:49:b2:b9:54:f1:cf:af:28:f4:b0:bd:9e:c7:
         41:1a:a0:ce:aa:22:30:eb:ad:94:f1:27:21:80:08:41:ca:02:
         5d:31:18:1f:83:31:34:18:af:08:de:b1:bb:80:7a:f4:1d:a2:
         9a:92:20:01:d9:dd:37:70:1a:11:c2:ce:a3:fe:c8:49:5e:31:
         d4:eb:32:59:15:9f:a2:61:58:73:cf:95:43:ec:59:b8:bf:db:
         70:ec:3f:f1:26:bb:3d:1b:82:53:57:19:f0:73:d6:6f:97:81:
         2d:14:c0:95:08:83:71:04:59:e0:9a:f6:fa:af:9d:81:ac:6c:
         bf:05:b3:cb:f9:bb:4e:93:01:5d:32:36:66:e6:2f:ec:09:ff:
         19:70:36:29:4e:71:b6:23:93:1b:cf:47:e2:7f:ff:f2:be:81:
         48:ef:8a:f3:fd:ec:b5:e3:d6:53:d1:82:2f:3f:17:dd:60:fd:
         f9:37:b2:7f:5b:0b:03:fc:47:19:5e:13:bc:a2:b1:d6:f0:06:
         54:04:7b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:46 2025 by rpki-client