This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/6307B34A7CAD11EE9E7B9434C4F9AE02.roa
File:                     6307B34A7CAD11EE9E7B9434C4F9AE02.roa (raw, json)
Hash identifier:          c3SWUfV7Pzswi2wVxw1lSd2ayx+ZUQtxdR0BtT91QSI=
Subject key identifier:   C6:08:60:2F:90:CF:C7:01:DD:F9:BC:D4:57:15:78:94:0B:21:B4:A1
Certificate issuer:       /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Certificate serial:       018F
Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/6307B34A7CAD11EE9E7B9434C4F9AE02.roa
Signing time:             Tue 02 Dec 2025 11:16:48 +0000
ROA not before:           Tue 02 Dec 2025 11:16:48 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     15830
IP address blocks:        2400:9460::/32 maxlen: 32
                          2400:9461::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl
                          rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
        Validity
            Not Before: Dec  2 11:16:48 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=692ecaa0-d308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1d:0c:78:a8:c0:b0:1f:c0:ca:bd:ad:9e:f3:
                    b0:50:69:64:ec:24:b3:e4:fa:b8:ee:a9:f4:b0:a4:
                    1d:30:03:a4:db:95:66:ac:73:ba:c9:28:e9:f3:c9:
                    10:e9:bf:60:fe:83:a9:ed:89:f1:a8:c3:2a:2f:5c:
                    fb:f3:49:12:9c:1b:89:d7:6b:14:41:07:41:22:9b:
                    11:39:f9:3a:14:1b:d4:99:55:61:20:42:9e:cb:2e:
                    9f:aa:4e:eb:c2:bd:6c:e6:cd:61:5d:b7:53:90:82:
                    17:8f:f0:ca:57:8f:93:8d:52:45:d0:b7:4a:4a:ad:
                    25:4b:a4:41:46:53:db:b9:18:d9:e4:5c:34:51:ad:
                    8b:ab:4c:c5:2d:5f:40:79:ce:b6:8f:67:58:23:cf:
                    8f:64:93:72:b0:5d:c9:0a:1d:59:ed:32:c9:58:20:
                    17:fc:bb:97:6e:7b:2f:8b:b2:17:a8:ff:db:b3:6d:
                    65:f3:88:72:ef:25:e3:e5:72:7c:7a:67:98:5c:46:
                    99:48:f8:ae:5b:d4:4e:50:42:e3:b8:c5:7b:a1:ea:
                    d9:2e:b9:be:7c:39:c5:b9:5c:9b:5f:ce:f6:5d:94:
                    e4:34:b8:af:7b:97:2e:ac:cf:cf:93:fd:ea:69:e3:
                    6a:c2:42:b0:80:d5:36:bb:39:ca:93:fa:9f:b0:06:
                    62:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:08:60:2F:90:CF:C7:01:DD:F9:BC:D4:57:15:78:94:0B:21:B4:A1
            X509v3 Authority Key Identifier:
                keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/6307B34A7CAD11EE9E7B9434C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9460::/31

    Signature Algorithm: sha256WithRSAEncryption
         84:c4:ac:e0:02:a2:31:74:b0:de:a2:9f:c9:fe:d3:ba:61:0e:
         6f:eb:91:47:f8:63:e0:d4:48:51:76:9a:78:6b:60:04:5d:3d:
         99:7a:33:f6:db:55:45:2c:15:a0:dd:ad:f2:f7:c7:2d:38:c9:
         c0:af:f2:be:05:fc:6e:4b:49:8f:cd:ca:84:48:9c:36:1a:b8:
         02:ed:86:4b:23:e5:73:e5:f3:91:67:9d:1d:37:f2:50:93:d5:
         38:dd:4e:0b:52:ca:96:c4:65:2f:07:59:b8:3c:89:c7:77:7e:
         95:4a:bc:71:7f:be:38:d8:e5:e3:4d:cd:a1:bd:83:35:8b:7b:
         54:48:f3:cf:b4:1a:59:a4:b4:55:a9:31:b7:54:d5:52:11:2d:
         4c:87:7a:18:dd:67:b8:b0:d8:4a:57:06:e5:d8:1e:e5:60:dd:
         25:d8:12:75:50:8d:cb:fc:4b:45:fe:6d:e4:77:ec:e4:40:59:
         61:c8:bf:63:4e:24:68:0c:87:e2:7d:99:cc:c5:d6:51:86:25:
         5c:32:0b:54:78:4e:e8:51:2d:f7:87:82:01:72:16:30:45:f7:
         46:0e:9b:46:2a:d5:06:8f:df:9a:3f:f7:8d:e3:c3:22:61:06:
         7c:f4:43:69:44:d9:4b:ed:14:8b:91:8c:c4:cc:f3:2d:0f:c9:
         39:3c:57:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:57 2025 by rpki-client