This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/EF885538C28B11EBBF310469C4F9AE02.roa
File:                     EF885538C28B11EBBF310469C4F9AE02.roa (raw, json)
Hash identifier:          zCtYWfWmMHrxhAWz295ThSf+06H/coZnMyFAor81eJY=
Subject key identifier:   B6:E4:C5:33:20:EC:D1:0C:4A:1C:E4:21:65:BD:D2:2F:4E:6F:3D:B7
Certificate issuer:       /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Certificate serial:       18EF
Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/EF885538C28B11EBBF310469C4F9AE02.roa
Signing time:             Thu 04 Dec 2025 16:15:55 +0000
ROA not before:           Thu 04 Dec 2025 16:15:55 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     56207
IP address blocks:        2403:4c0:7000::/36 maxlen: 36
                          2403:4c0:7800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
                          rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6383 (0x18ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
        Validity
            Not Before: Dec  4 16:15:55 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6931b3bb-51cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8f:a9:70:41:8a:d7:98:a1:0d:de:54:4e:27:
                    6b:0c:82:52:06:20:b6:c4:6b:39:bc:2f:08:bb:8a:
                    23:d8:ec:4d:35:87:36:8d:15:17:3c:55:c5:11:76:
                    d6:ba:d2:c4:bd:48:26:a3:06:7e:86:23:74:20:9e:
                    12:0d:bd:04:ef:69:d1:3e:5c:91:64:f0:83:87:c8:
                    e6:82:fe:be:3c:85:98:36:e1:9d:31:7b:85:e4:d3:
                    19:9f:a8:80:35:bc:a6:8e:e2:e4:53:72:a4:6c:2a:
                    bc:e2:51:42:57:c1:f2:ec:2b:b9:29:3d:04:bb:22:
                    fc:03:b7:6f:d3:7a:35:81:8f:f7:07:1d:30:3f:70:
                    40:40:17:26:21:26:8d:bc:07:df:ef:0a:0c:4e:1c:
                    a3:2d:8b:70:a6:3a:de:a5:50:63:af:55:82:a2:6c:
                    3d:3a:54:59:70:d5:84:b0:83:6f:b1:63:f8:10:4e:
                    08:e6:71:f8:f8:ae:96:29:36:13:f2:fb:27:a4:2b:
                    09:78:7a:16:fc:14:0d:6b:09:43:1d:1f:dc:70:53:
                    b9:30:4c:88:be:d5:ba:c3:d1:43:46:7f:7d:0e:c9:
                    f5:e8:59:2b:9e:6e:f1:32:ea:49:47:4d:0e:3e:d4:
                    68:b8:f8:32:5a:19:87:92:6c:5d:64:70:db:de:29:
                    8d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E4:C5:33:20:EC:D1:0C:4A:1C:E4:21:65:BD:D2:2F:4E:6F:3D:B7
            X509v3 Authority Key Identifier:
                keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/EF885538C28B11EBBF310469C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:4c0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:9e:6e:41:a2:10:9c:85:9d:6d:82:6b:9b:38:f8:57:7f:85:
         18:2f:1b:a4:dc:35:ae:63:0d:62:28:95:f8:cd:39:28:25:ea:
         78:f8:8c:ce:9c:db:6f:a0:c1:53:4e:ac:57:35:45:0b:35:be:
         0e:c8:de:29:53:18:42:3b:94:64:29:20:02:aa:57:08:c7:1d:
         cd:43:f7:92:3c:e3:92:26:36:38:7f:f9:c8:39:c6:18:e6:28:
         86:2b:90:75:01:2e:bc:a9:98:f9:a9:9a:96:ec:58:1a:1d:c7:
         1c:80:78:35:42:0d:68:e3:31:07:58:3c:e0:f5:38:47:4c:e9:
         c4:5f:2e:38:8d:4c:3a:4e:74:a2:3b:89:1c:6b:22:81:97:8c:
         97:7a:f4:15:3e:ad:64:b3:5e:6e:1f:50:cf:c9:c9:05:e2:69:
         d3:f1:87:4a:ff:c6:da:bc:fe:90:69:8f:99:4a:9f:08:d0:0b:
         dc:e6:56:b3:8e:64:ae:7b:2a:5b:70:3f:26:21:03:99:73:b8:
         f6:31:ac:29:d2:d1:4a:e1:17:c8:83:ea:98:54:28:4a:1d:f2:
         e0:2f:43:17:35:1e:de:c7:78:95:18:86:a1:1a:ca:30:46:7c:
         4c:73:bb:ee:70:a2:47:46:cc:43:7e:c7:40:08:51:05:1a:5f:
         77:74:74:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:16 2025 by rpki-client