This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/24D4F9F0E61B11EBBAE35771C4F9AE02.roa
File:                     24D4F9F0E61B11EBBAE35771C4F9AE02.roa (raw, json)
Hash identifier:          odhqLjFi/gNl1kTD0Ic54V4mME2y8CTdKUAbvxdHwi4=
Subject key identifier:   AF:37:98:09:B7:2D:B5:E1:D6:AD:3A:D0:67:A8:76:66:9F:BF:77:2C
Certificate issuer:       /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Certificate serial:       07FF
Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/24D4F9F0E61B11EBBAE35771C4F9AE02.roa
Signing time:             Tue 18 Nov 2025 20:12:18 +0000
ROA not before:           Tue 18 Nov 2025 20:12:18 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     7545
IP address blocks:        203.4.197.0/24 maxlen: 24
                          203.4.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
                          rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2047 (0x7ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91814E9, serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
        Validity
            Not Before: Nov 18 20:12:18 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=691cd321-98e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:54:f2:a3:d6:3c:41:e3:ef:e7:64:87:d1:2b:
                    83:eb:04:0b:c7:53:6d:19:6f:f6:12:06:e6:9d:d4:
                    b4:4f:d4:62:a5:95:71:54:3d:45:86:02:09:a4:80:
                    0f:ac:ff:1f:c5:94:f9:6b:5a:77:9f:d1:09:3b:2a:
                    7d:63:f8:c0:b6:33:52:3b:37:99:f3:89:77:16:a1:
                    5b:e6:de:15:58:d1:66:6c:86:b6:07:a8:29:11:e9:
                    64:ef:55:39:68:1c:25:ee:bb:85:68:6e:d7:2e:2d:
                    22:5e:9c:ab:78:46:a7:50:48:26:99:cf:67:1c:51:
                    55:11:09:7c:ba:5b:56:e6:b2:b6:21:d2:2c:b0:24:
                    e7:1a:7b:e5:2e:0a:9d:70:d1:10:e5:62:1a:a6:ae:
                    ba:ec:17:20:cb:9f:7c:e5:b1:a2:dd:e9:bb:58:b2:
                    a9:fc:68:1a:64:75:62:03:92:42:9b:94:63:be:53:
                    b1:e5:d7:2e:90:97:8e:bf:3a:03:2e:12:9d:de:51:
                    c1:fd:18:02:07:17:eb:61:27:7c:1d:91:67:33:fe:
                    a1:45:f9:81:77:2f:f2:2f:0e:c9:0b:1f:61:57:03:
                    05:b5:40:08:36:a9:58:14:4d:23:4f:c5:d9:e1:72:
                    b7:60:06:7b:32:f8:77:4b:47:ac:96:fc:2b:6e:e0:
                    3d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:37:98:09:B7:2D:B5:E1:D6:AD:3A:D0:67:A8:76:66:9F:BF:77:2C
            X509v3 Authority Key Identifier:
                keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/24D4F9F0E61B11EBBAE35771C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.4.197.0-203.4.198.255

    Signature Algorithm: sha256WithRSAEncryption
         68:ad:2f:c5:86:ef:46:cb:ba:63:11:13:43:2f:c5:89:42:8a:
         28:29:3d:bb:84:7a:09:0d:29:d7:a7:48:5a:41:ec:8e:d1:da:
         ab:c0:42:fc:40:86:17:93:ed:d8:e0:24:2e:2d:ef:74:57:9b:
         c8:e1:6e:9b:26:eb:19:78:b6:4d:59:43:a3:52:77:23:d3:ed:
         94:76:ad:dc:17:4a:71:ec:e2:4b:0a:cf:d2:56:b5:23:8d:92:
         00:63:45:e2:cf:94:17:dd:0e:5e:74:a1:5e:1c:4a:07:3d:72:
         bf:08:31:48:8b:a3:4e:e9:44:c4:c4:70:87:5c:3a:02:b8:c5:
         a2:36:4b:76:ce:d6:5c:20:1b:fa:6c:80:17:c7:88:80:ac:90:
         6b:b5:b4:06:60:d2:37:aa:ff:1a:9a:b3:ce:c7:76:47:41:80:
         3d:b6:d8:c7:48:8b:35:96:2d:ed:9c:6f:ba:e9:cc:fb:0c:78:
         6b:85:7e:b2:e2:06:f7:18:e3:62:8a:d0:67:91:9b:ba:42:2e:
         0b:f3:cb:8e:68:0e:57:6b:f5:8e:48:27:70:c9:c8:e3:4b:a4:
         19:7e:3b:fd:4a:e7:1f:c3:3b:be:df:53:16:8e:ae:94:85:5b:
         0a:66:29:60:53:b7:20:6c:f2:8b:59:65:af:81:05:21:a6:48:
         3e:ca:c6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:23:10 2025 by rpki-client