This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/7035C2E6CF7111F0A638EC6BC4F9AE02.roa
File:                     7035C2E6CF7111F0A638EC6BC4F9AE02.roa (raw, json)
Hash identifier:          t33RheNvT6AZs0YGzltpL3HsFmPDCdK8QLo3GUeUtsI=
Subject key identifier:   22:BF:42:CF:8D:1D:A3:E2:46:4D:9A:19:BF:93:F4:8A:2E:55:40:74
Certificate issuer:       /CN=A9184569/serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
Certificate serial:       0CBC
Authority key identifier: BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/7035C2E6CF7111F0A638EC6BC4F9AE02.roa
Signing time:             Tue 02 Dec 2025 11:24:17 +0000
ROA not before:           Tue 02 Dec 2025 11:24:17 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     138614
IP address blocks:        2404:67c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl
                          rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 17:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3260 (0xcbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184569, serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
        Validity
            Not Before: Dec  2 11:24:17 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=692ecc61-436b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b5:fa:04:f4:fe:6e:c7:dd:8b:fc:89:7d:ae:
                    5f:26:b7:80:b1:68:08:8b:fe:97:77:6b:b2:bb:f7:
                    56:f9:8c:85:c7:6d:b8:1e:84:e3:04:06:10:0a:ea:
                    91:57:a0:67:7d:c6:29:fd:39:24:e5:42:5f:4d:8a:
                    5e:57:06:87:3e:6a:43:56:14:a4:de:43:e0:df:9c:
                    18:51:9c:18:47:37:a4:f5:f5:4a:a1:cf:43:fc:4d:
                    94:13:6f:52:b4:be:8e:81:fe:fb:a2:2c:2e:88:d2:
                    fe:98:32:17:14:52:45:73:b5:0f:01:73:92:09:2e:
                    ee:f0:83:4a:3b:0f:75:21:35:b4:9a:97:c9:5f:f2:
                    01:16:41:ed:fe:c2:52:3d:d9:e3:a3:9c:eb:c8:df:
                    95:26:f2:51:5c:8a:9c:1e:9c:98:cb:df:10:6a:10:
                    b9:3c:15:79:a2:0f:a4:a4:c8:48:b0:55:67:96:e1:
                    32:94:52:e1:f3:a7:3a:f9:2f:31:47:80:ca:1a:9f:
                    30:b9:00:ad:30:36:d8:38:59:38:38:41:97:c6:af:
                    f4:08:7a:23:6e:7e:04:73:ba:4b:a2:95:07:c9:a0:
                    d3:31:14:c8:10:24:78:20:15:7d:96:26:74:c4:ee:
                    83:e5:88:b8:bf:82:4c:6a:73:c6:1e:4c:e5:25:bd:
                    f2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BF:42:CF:8D:1D:A3:E2:46:4D:9A:19:BF:93:F4:8A:2E:55:40:74
            X509v3 Authority Key Identifier:
                keyid:BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/7035C2E6CF7111F0A638EC6BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:67c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:e6:07:a2:2f:b6:d0:c2:cd:ef:f1:2f:26:2e:ed:79:de:d7:
         03:a6:fc:57:ae:e1:cb:dd:2f:5f:c5:ed:95:54:44:61:38:91:
         5f:58:69:99:e4:a5:74:d7:9f:09:51:b3:3a:d6:d3:7e:bf:bf:
         e7:78:db:73:b8:9e:ac:64:02:cb:7c:92:a2:23:60:79:ff:57:
         79:ba:7e:08:7c:b3:4f:f1:28:98:76:07:14:59:d8:f8:d6:f5:
         5b:fd:84:09:83:29:23:d3:36:f2:c4:9f:61:90:85:dc:90:56:
         4c:73:8f:47:a6:bc:e5:53:fe:82:86:1b:d0:d1:00:9c:c6:5c:
         0e:7b:23:9b:1b:76:fd:78:4b:72:8f:e6:5b:07:ed:0e:40:b0:
         72:22:0e:26:83:3c:3f:02:79:11:d8:40:9c:8e:6b:c6:33:ad:
         3e:25:89:26:51:2c:4e:45:71:7a:da:44:3e:17:80:bf:99:e3:
         67:76:f3:01:4d:95:97:dc:e2:73:ff:1b:a9:6c:d9:f9:bb:fd:
         17:21:c9:d7:66:2e:15:a1:b7:9b:38:75:b4:5e:55:ea:1b:ef:
         fe:9a:0e:17:a8:e1:07:83:7c:1b:0b:52:96:5d:fc:0a:c8:bd:
         df:af:28:6c:d6:75:b5:e9:8b:8a:8d:73:b1:a1:ba:6e:3a:cd:
         c2:f4:28:99
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICDLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ1NjkxMTAvBgNVBAUTKEJDMzBCOEE0QkREMUNFMjhGN0IyRjk5OTM0MkY1MUNF
MUZEQjg2RTYwHhcNMjUxMjAyMTEyNDE3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OTJlY2M2MS00MzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1LX6BPT+bsfdi/yJfa5fJreAsWgIi/6Xd2uyu/dW+YyFx224HoTjBAYQCuqR
V6BnfcYp/Tkk5UJfTYpeVwaHPmpDVhSk3kPg35wYUZwYRzek9fVKoc9D/E2UE29S
tL6Ogf77oiwuiNL+mDIXFFJFc7UPAXOSCS7u8INKOw91ITW0mpfJX/IBFkHt/sJS
Pdnjo5zryN+VJvJRXIqcHpyYy98QahC5PBV5og+kpMhIsFVnluEylFLh86c6+S8x
R4DKGp8wuQCtMDbYOFk4OEGXxq/0CHojbn4Ec7pLopUHyaDTMRTIECR4IBV9liZ0
xO6D5Yi4v4JManPGHkzlJb3y2QIDAQABo4ICljCCApIwHQYDVR0OBBYEFCK/Qs+N
HaPiRk2aGb+T9IouVUB0MB8GA1UdIwQYMBaAFLwwuKS90c4o97L5mTQvUc4f24bm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDU2OS9GRTg5OUQ1RTA4
NjQxMUVBQjdENEVDODJDNEY5QUUwMi92REM0cEwzUnppajNzdm1aTkM5UnpoX2Jo
dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZEQzRwTDNSemlqM3N2bVpOQzlSemhfYmh1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQ1NjkvRkU4OTlENUUwODY0MTFFQUI3RDRFQzgyQzRGOUFFMDIvNzAzNUMyRTZD
RjcxMTFGMEE2MzhFQzZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkBGfAMA0GCSqGSIb3DQEBCwUAA4IBAQC45geiL7bQws3v
8S8mLu153tcDpvxXruHL3S9fxe2VVERhOJFfWGmZ5KV0158JUbM61tN+v7/neNtz
uJ6sZALLfJKiI2B5/1d5un4IfLNP8SiYdgcUWdj41vVb/YQJgykj0zbyxJ9hkIXc
kFZMc49HprzlU/6ChhvQ0QCcxlwOeyObG3b9eEtyj+ZbB+0OQLByIg4mgzw/AnkR
2ECcjmvGM60+JYkmUSxORXF62kQ+F4C/meNndvMBTZWX3OJz/xupbNn5u/0XIcnX
Zi4VobebOHW0XlXqG+/+mg4XqOEHg3wbC1KWXfwKyL3fryhs1nW16YuKjXOxobpu
Os3C9CiZ
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:08:20 2025 by rpki-client