This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/4967F6B8533511E8A678701BC4F9AE02.roa
File:                     4967F6B8533511E8A678701BC4F9AE02.roa (raw, json)
Hash identifier:          Y4uBIf1vfChU8VVYcwZ8bVcqkO5Kwuo1KdsaoFD8+I8=
Subject key identifier:   91:92:7C:5E:D8:C9:F1:C8:3B:E1:B7:C8:C1:71:7C:BB:1F:90:D2:F0
Certificate issuer:       /CN=A915A803/serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A
Certificate serial:       1547
Authority key identifier: 3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/4967F6B8533511E8A678701BC4F9AE02.roa
Signing time:             Tue 18 Nov 2025 16:35:19 +0000
ROA not before:           Tue 18 Nov 2025 16:35:19 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     133787
IP address blocks:        203.0.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl
                          rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 16:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5447 (0x1547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A803, serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A
        Validity
            Not Before: Nov 18 16:35:19 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=691ca046-836f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fe:78:92:91:7d:8b:97:34:48:e0:8d:6c:19:
                    eb:f9:f7:c7:00:2f:2a:52:86:a4:a0:fb:19:0d:7b:
                    88:3f:b3:0a:e9:f2:7e:c6:2b:7b:45:53:ed:82:c8:
                    78:ac:69:85:ee:97:d5:6d:d6:ab:12:39:37:dd:a6:
                    d6:b3:60:b0:fc:af:d5:51:b7:06:3c:6f:ee:ba:d2:
                    1f:bb:19:bb:5d:de:8e:c9:3d:bb:53:f2:43:64:35:
                    3d:00:35:b5:b8:de:29:fe:bf:53:18:7e:63:ec:90:
                    b5:17:c6:35:7d:7d:20:d4:8d:91:16:fa:da:c3:dd:
                    c2:da:03:2a:14:88:2d:d8:79:44:47:0f:4e:fa:82:
                    20:8c:13:0d:c9:08:e8:c1:09:12:1e:3a:3a:9c:f2:
                    7d:43:48:37:75:2a:90:b0:ff:d8:ae:be:79:eb:5d:
                    94:2a:b8:ad:6b:56:a6:11:aa:51:29:0d:b2:f7:74:
                    89:5d:fe:0c:a4:00:69:09:0b:e3:2d:1d:a7:ba:0f:
                    b9:3e:f6:df:53:07:a4:2d:48:33:37:d2:ea:92:5d:
                    b5:03:83:78:c8:77:cc:35:be:39:0c:1e:1d:8e:fc:
                    9b:72:37:96:71:41:ed:29:12:c1:82:b2:32:14:8d:
                    ae:b2:13:2d:3b:d6:dd:ba:a3:92:c2:da:18:57:3c:
                    a9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:92:7C:5E:D8:C9:F1:C8:3B:E1:B7:C8:C1:71:7C:BB:1F:90:D2:F0
            X509v3 Authority Key Identifier:
                keyid:3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/4967F6B8533511E8A678701BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.0.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:f8:a7:e0:72:12:17:a3:b0:52:10:a0:42:b0:c3:78:a7:7b:
         5d:99:5d:fc:50:5a:d8:72:51:1e:bd:31:cd:05:de:8e:f3:82:
         4e:7b:40:d9:c0:82:34:40:9e:30:f1:a2:38:7d:ef:5a:3b:c8:
         56:9d:5f:d2:01:c8:b5:00:0c:48:cf:0b:70:98:d4:c7:9a:d4:
         8a:ca:9a:f3:65:5b:d8:db:b8:cb:7a:d2:9b:a4:1a:93:c2:fc:
         34:79:51:9b:46:54:5e:3a:dc:d6:94:b3:3d:88:26:79:0d:9a:
         e1:d5:0e:b4:e2:15:eb:9e:0e:fd:e9:a0:46:c5:ca:c2:14:c8:
         8f:ed:58:28:18:31:63:fc:47:3c:77:ea:54:e1:ac:c9:28:d1:
         a1:2c:09:0d:8b:c0:c7:58:86:a1:82:71:33:b9:c6:83:de:4d:
         d6:eb:7f:20:c3:33:30:25:24:e5:16:6c:97:9f:33:2f:ae:32:
         4f:c9:47:a6:0d:5e:81:4a:22:a9:84:ca:b7:63:fb:f7:7a:81:
         7c:a0:63:4e:04:67:f2:37:55:5c:2d:57:79:db:56:9a:8a:09:
         1a:7d:de:a0:f3:9d:f0:46:a9:d5:50:d9:99:66:e3:8b:13:f1:
         8a:f2:59:32:30:26:07:24:b4:d8:a1:74:95:2c:74:da:a2:e9:
         63:6f:75:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 17:22:59 2025 by rpki-client