This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/21D692500C1E11EFBA32F937C4F9AE02.roa
File:                     21D692500C1E11EFBA32F937C4F9AE02.roa (raw, json)
Hash identifier:          UxGDysL/MPPlpy0I96m8zyqIXcYr7NufRv/5DmeMKi0=
Subject key identifier:   0D:0B:6D:41:BD:82:41:81:9E:F7:A8:FB:0D:0C:CF:2F:BB:AD:B6:83
Certificate issuer:       /CN=A91846F6/serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
Certificate serial:       0148
Authority key identifier: 8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/21D692500C1E11EFBA32F937C4F9AE02.roa
Signing time:             Fri 21 Nov 2025 03:20:48 +0000
ROA not before:           Fri 21 Nov 2025 03:20:48 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     17990
IP address blocks:        2001:df0:a300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl
                          rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 02:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91846F6, serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
        Validity
            Not Before: Nov 21 03:20:48 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=691fda90-4498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:b6:89:47:00:4b:2a:5b:ad:bf:d2:3d:29:
                    ed:bc:90:6a:fb:d7:95:f2:a7:20:a3:c7:9d:15:4c:
                    fc:50:95:0f:78:a4:67:8f:c8:ca:10:d8:6e:a5:e7:
                    e3:4e:aa:0c:87:2b:25:46:e5:0d:86:fb:c3:5a:14:
                    68:30:d6:21:c8:f4:62:10:70:f3:02:73:75:26:e9:
                    cd:70:7c:9e:db:e1:cd:dd:a0:e0:44:91:6b:80:11:
                    f2:34:62:54:27:1b:d3:da:5c:7f:71:a3:c7:41:f6:
                    33:7d:91:fa:3f:fd:2e:7f:24:22:83:70:8b:71:a4:
                    0b:1f:75:9b:25:65:5c:90:5c:1c:c3:58:4d:2c:41:
                    c8:33:bd:40:d6:04:b2:af:3e:1e:54:60:33:30:2e:
                    50:f1:cc:11:37:f8:87:ab:38:46:90:56:af:12:3c:
                    24:e7:0a:8b:d5:dd:be:40:71:68:f3:db:3e:d9:2e:
                    ed:45:53:40:32:f4:b5:2f:d6:f1:87:81:d3:a6:b2:
                    94:c3:50:0e:2c:ff:25:49:21:06:3a:78:ff:fc:fb:
                    98:1f:e5:16:8a:e1:6a:99:cb:c5:a7:2f:87:07:15:
                    f4:0b:40:fb:b3:37:78:bb:1d:c5:a6:5e:18:e4:aa:
                    15:6b:e5:ee:6c:4b:97:86:fc:50:c5:21:51:56:3c:
                    58:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0B:6D:41:BD:82:41:81:9E:F7:A8:FB:0D:0C:CF:2F:BB:AD:B6:83
            X509v3 Authority Key Identifier:
                keyid:8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/21D692500C1E11EFBA32F937C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:a300::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:80:a3:03:46:12:78:ee:0a:d1:2a:e7:0f:10:61:2a:f5:f6:
         d0:c9:c4:b5:ae:e7:fd:7d:f5:b4:a5:0f:0d:8c:81:df:dc:23:
         eb:01:b9:3a:81:a3:1b:07:6d:07:45:71:0d:6c:b6:3c:ec:bb:
         1a:4e:89:1f:5f:ec:3a:d8:70:c2:4c:5e:80:50:24:aa:e2:6d:
         92:01:52:19:5e:0e:59:18:55:55:5e:31:5c:9f:3d:df:e8:5c:
         8b:3c:c5:2d:0a:5a:a0:cc:40:e0:8e:9d:f7:f3:dd:8b:b4:87:
         c0:3c:98:d6:3b:ba:3d:16:94:95:dd:07:e8:9c:ff:d9:f9:79:
         25:c4:92:6a:2f:f7:19:0c:46:65:f6:0a:63:e4:2a:a4:d3:50:
         e3:7a:4c:75:fc:1c:84:d4:f2:d7:55:00:f3:b2:41:49:da:88:
         76:c8:44:da:44:2b:e4:e8:d1:21:e1:1e:d6:ef:6d:0e:4e:a7:
         4a:6c:f1:6f:2a:8f:b4:d8:d2:45:59:16:0e:5f:4d:6c:a1:fb:
         02:cf:c5:1c:dd:ba:ba:01:e6:b1:c1:bb:36:15:55:5f:50:4f:
         43:9a:3d:4c:19:5f:ec:0f:f5:5b:85:f7:35:f6:4d:da:36:9e:
         6c:49:cc:aa:6f:1f:ea:6f:1e:15:0a:08:c5:68:d3:74:19:c9:
         8f:f5:cc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:45:29 2025 by rpki-client