This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/05473E9EF28911EAB006D11BC4F9AE02.roa
File:                     05473E9EF28911EAB006D11BC4F9AE02.roa (raw, json)
Hash identifier:          LWfr/eGpKsZfBdNv+WTg0Gn+ekMi8PDH3dFvI2YahRg=
Subject key identifier:   D9:D7:50:20:09:C5:BE:85:7C:55:5E:24:78:B6:CA:4A:2B:13:4A:F3
Certificate issuer:       /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Certificate serial:       2382
Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/05473E9EF28911EAB006D11BC4F9AE02.roa
Signing time:             Thu 04 Dec 2025 15:43:55 +0000
ROA not before:           Thu 04 Dec 2025 15:43:55 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     36351
IP address blocks:        2403:5680::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl
                          rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9090 (0x2382)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
        Validity
            Not Before: Dec  4 15:43:55 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6931ac3b-74e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:03:98:7b:c0:36:d9:9c:24:4f:17:90:9f:
                    75:fc:c7:af:f5:5a:65:7d:e6:fb:86:13:5b:8a:31:
                    d9:89:ab:d2:a2:5b:86:17:0c:23:6e:88:03:d3:ba:
                    28:47:60:a8:36:67:06:5e:63:ca:6a:7f:2e:d2:fe:
                    9c:27:d8:d5:fe:46:05:40:88:99:e8:22:00:f6:78:
                    8e:e6:7f:be:28:79:67:37:d0:4b:03:50:bf:94:b9:
                    b1:cc:2d:4f:9a:89:7a:e0:9b:d5:bd:ec:de:fe:dd:
                    94:ac:97:52:a1:97:01:71:58:40:75:ef:ba:45:dc:
                    51:ef:a9:eb:7f:39:f2:8f:02:83:f1:4e:ae:36:a3:
                    86:1a:4e:c1:e2:92:81:d0:2f:8c:22:c9:d7:40:6f:
                    18:c1:61:48:cc:3d:66:6d:58:bd:9c:7a:21:c7:5d:
                    a8:11:55:b4:03:08:3e:9c:ee:88:fe:53:fc:b6:c0:
                    dd:27:a8:ab:9b:e3:cd:a0:c1:90:c2:b3:f4:ca:62:
                    8a:ef:b0:d8:08:9d:da:fc:fa:de:9a:3f:a4:a9:1f:
                    77:fe:f3:2c:ae:9a:91:f9:a1:5b:bc:aa:9f:c1:f2:
                    70:68:5b:e1:70:66:2b:da:e0:01:c1:ec:43:9d:66:
                    2b:c5:c7:ba:ce:c0:bf:24:a4:95:41:47:7a:f2:be:
                    b7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D7:50:20:09:C5:BE:85:7C:55:5E:24:78:B6:CA:4A:2B:13:4A:F3
            X509v3 Authority Key Identifier:
                keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/05473E9EF28911EAB006D11BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:5680::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:c8:5a:a4:8a:b3:5c:fb:2d:2f:d1:ff:a6:32:a5:5e:56:b3:
         3e:42:d8:76:36:d6:ee:bc:95:14:74:ec:13:6f:03:ba:e6:5e:
         08:98:9c:fe:af:a9:9a:7a:46:07:34:51:b1:35:b6:54:e5:3b:
         ed:b5:b1:12:24:be:62:e1:0e:f6:d9:70:7e:3f:23:71:fe:0e:
         a7:73:b0:2d:64:9a:af:82:cc:ca:46:7d:f3:a0:bd:dd:4f:0d:
         f6:a4:bf:bc:dd:a2:28:83:12:7f:27:77:b4:8b:12:12:b5:23:
         24:2a:f0:35:85:1c:7d:a9:e2:91:b0:78:b6:33:d1:cf:1c:1c:
         ae:61:bb:87:d6:b2:6d:66:30:39:df:c6:5b:e9:05:70:17:1e:
         2f:85:da:84:fe:78:fe:89:87:06:57:66:ab:c8:96:7a:29:e0:
         dc:a5:66:64:72:93:cb:ae:a2:1d:66:07:a4:a4:4e:b4:1d:a5:
         c1:b5:d9:2f:52:29:21:b0:ff:4e:67:d3:02:47:55:68:6e:48:
         eb:3b:a5:6d:68:2f:c3:c5:a9:48:e5:9e:3b:fa:d5:cc:0b:89:
         d5:91:cb:ad:f9:b8:19:7e:28:97:2c:8c:7b:9f:8d:46:e9:54:
         38:5d:4a:e4:6c:f2:f1:68:27:38:a7:45:47:7a:55:43:98:5b:
         28:45:ab:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:04:52 2025 by rpki-client