This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/2FDA4F26E20711EF9B64614EC4F9AE02.roa
File:                     2FDA4F26E20711EF9B64614EC4F9AE02.roa (raw, json)
Hash identifier:          46HPj9/aVPYDWikrpiKeLjIAgPfeI7qV8Myh5jS+VwI=
Subject key identifier:   89:11:BC:46:E6:08:03:F4:0E:D6:57:22:F4:80:D1:DF:60:AA:96:1F
Certificate issuer:       /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Certificate serial:       0AD4
Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/2FDA4F26E20711EF9B64614EC4F9AE02.roa
Signing time:             Thu 20 Nov 2025 19:10:16 +0000
ROA not before:           Thu 20 Nov 2025 19:10:16 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     4809
IP address blocks:        183.91.48.0/21 maxlen: 21
                          183.91.48.0/24 maxlen: 24
                          183.91.49.0/24 maxlen: 24
                          183.91.50.0/24 maxlen: 24
                          183.91.51.0/24 maxlen: 24
                          183.91.52.0/24 maxlen: 24
                          183.91.54.0/24 maxlen: 24
                          183.91.55.0/24 maxlen: 24
                          183.91.60.0/24 maxlen: 24
                          183.91.61.0/24 maxlen: 24
                          183.91.62.0/24 maxlen: 24
                          183.91.63.0/24 maxlen: 24
                          202.55.0.0/19 maxlen: 19
                          202.55.0.0/24 maxlen: 24
                          202.55.1.0/24 maxlen: 24
                          202.55.3.0/24 maxlen: 24
                          202.55.4.0/24 maxlen: 24
                          202.55.5.0/24 maxlen: 24
                          202.55.6.0/24 maxlen: 24
                          202.55.7.0/24 maxlen: 24
                          202.55.8.0/21 maxlen: 21
                          202.55.8.0/24 maxlen: 24
                          202.55.9.0/24 maxlen: 24
                          202.55.10.0/24 maxlen: 24
                          202.55.11.0/24 maxlen: 24
                          202.55.12.0/24 maxlen: 24
                          202.55.13.0/24 maxlen: 24
                          202.55.14.0/24 maxlen: 24
                          202.55.15.0/24 maxlen: 24
                          202.55.16.0/24 maxlen: 24
                          202.55.17.0/24 maxlen: 24
                          202.55.18.0/24 maxlen: 24
                          202.55.19.0/24 maxlen: 24
                          202.55.20.0/24 maxlen: 24
                          202.55.21.0/24 maxlen: 24
                          202.55.22.0/24 maxlen: 24
                          202.55.23.0/24 maxlen: 24
                          202.55.24.0/24 maxlen: 24
                          202.55.25.0/24 maxlen: 24
                          202.55.26.0/24 maxlen: 24
                          202.55.27.0/24 maxlen: 24
                          202.55.28.0/24 maxlen: 24
                          202.55.29.0/24 maxlen: 24
                          202.55.30.0/24 maxlen: 24
                          202.55.31.0/24 maxlen: 24
                          2400:9380:9000::/40 maxlen: 48
                          2400:9380:9100::/40 maxlen: 48
                          2400:9380:9200::/40 maxlen: 48
                          2400:9380:9300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
                          rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2772 (0xad4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
        Validity
            Not Before: Nov 20 19:10:16 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=691f6798-d06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:6a:39:cf:ac:aa:10:fd:1f:2c:6c:9e:e2:
                    67:19:04:f4:75:c1:46:eb:db:58:51:e8:b8:2b:eb:
                    69:9d:40:eb:4a:ef:f0:df:b3:e0:3a:2b:35:d5:d8:
                    55:2f:be:2e:a4:49:58:9c:97:8f:55:64:e4:b2:d8:
                    db:53:85:2b:40:47:92:bf:b7:40:80:7d:db:49:86:
                    c0:69:71:46:71:6f:d8:77:b1:7f:bf:b0:f8:74:0b:
                    2c:fb:87:4c:3d:33:db:5b:6d:cb:6b:f9:7a:54:0a:
                    59:3e:48:66:00:ba:b2:eb:f0:72:84:d4:3c:5b:6c:
                    f9:d9:66:06:73:29:6d:c4:38:50:bb:eb:66:8c:ab:
                    96:99:a5:7c:67:8d:d6:9c:18:a5:52:a9:24:6c:5b:
                    ed:71:5b:eb:98:ca:6b:73:6e:19:94:02:1f:1d:7f:
                    21:76:d5:fd:7b:bb:d0:33:3e:ba:31:cc:c3:0f:19:
                    f9:dc:33:c1:37:26:8a:64:2e:ed:1d:7d:1a:f8:11:
                    23:a0:d8:ca:b8:4b:e3:5a:be:2c:3f:c7:b0:94:df:
                    fa:0f:71:71:b0:59:38:39:c9:b1:a3:2c:26:6e:68:
                    4a:27:4e:bb:5e:61:de:5b:ad:90:88:54:6f:17:d0:
                    74:1e:55:f4:e0:03:1d:57:c2:4b:53:31:50:d9:af:
                    62:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:11:BC:46:E6:08:03:F4:0E:D6:57:22:F4:80:D1:DF:60:AA:96:1F
            X509v3 Authority Key Identifier:
                keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/2FDA4F26E20711EF9B64614EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.91.48.0/21
                  183.91.60.0/22
                  202.55.0.0/19
                IPv6:
                  2400:9380:9000::/38

    Signature Algorithm: sha256WithRSAEncryption
         66:7c:52:0e:76:c2:0f:6c:98:21:47:2d:28:4b:cc:68:60:63:
         15:81:a4:78:69:ea:f8:c3:26:61:0a:33:19:87:29:91:89:b3:
         fa:6f:c0:46:a1:10:6f:c6:54:b6:70:35:d2:26:d3:2f:41:37:
         60:8a:6d:66:30:24:54:33:7c:b8:34:52:7b:cf:2d:05:79:ff:
         bb:d6:6b:d3:6d:12:c4:e8:cc:16:64:6a:15:a8:4c:06:40:97:
         3b:55:5b:8c:ef:0b:80:00:97:17:3b:e6:8f:f2:d6:4a:b2:66:
         69:1b:2f:4c:dd:42:5b:cc:db:ea:35:2e:8e:84:34:eb:49:02:
         83:a7:dd:e8:0d:de:12:0b:44:49:bb:b2:6e:cd:6a:fa:b2:db:
         83:bf:ca:ee:d5:4d:f9:8b:57:b6:4f:58:14:ad:54:14:09:c2:
         94:96:72:4a:00:09:48:31:23:d4:a8:d7:bb:3b:e4:2b:75:8f:
         02:de:0a:7b:69:35:1e:09:23:dc:14:72:d3:97:eb:7d:b4:bb:
         33:3d:8c:9d:ad:8a:6f:da:cb:2a:72:41:9d:9d:27:ea:b4:79:
         73:57:f2:85:2d:d9:9d:ea:9c:6b:0c:d3:92:54:58:21:2e:c1:
         98:b0:95:ac:4d:2b:1c:e9:80:51:08:a7:48:db:6a:85:9a:46:
         fc:38:23:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:24:33 2025 by rpki-client