This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/95737270643711EFBCD1344AC4F9AE02.roa
File:                     95737270643711EFBCD1344AC4F9AE02.roa (raw, json)
Hash identifier:          1Bz9COXjLNAhKPWsXADzGRMHjeGcdVBDGhNMe07ozjE=
Subject key identifier:   51:C9:CE:8E:B3:B6:59:94:11:D8:72:24:6C:55:6B:EC:C6:1E:37:31
Certificate issuer:       /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
Certificate serial:       F4
Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/95737270643711EFBCD1344AC4F9AE02.roa
Signing time:             Wed 03 Dec 2025 04:02:57 +0000
ROA not before:           Wed 03 Dec 2025 04:02:57 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     139058
IP address blocks:        2001:df4:34c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl
                          rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:21:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91850AD, serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
        Validity
            Not Before: Dec  3 04:02:57 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=692fb670-8708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:c7:3a:f5:a7:40:93:fe:86:93:72:0e:c1:
                    c0:97:09:ff:bd:29:f7:da:64:9a:94:2b:70:a5:67:
                    26:c4:78:ab:15:94:5a:1e:fd:74:bf:79:1e:49:40:
                    51:22:88:78:54:38:de:44:4f:37:9f:69:ac:2c:9c:
                    9a:bb:af:71:3d:e6:ff:31:3a:83:e5:c8:9f:2b:84:
                    c9:5c:d2:f9:24:af:35:26:de:e9:39:53:87:3e:a7:
                    f1:67:64:4f:bb:b7:88:dc:ce:08:17:3d:2e:01:ac:
                    14:04:89:a2:91:c8:09:2f:e5:23:6f:4c:d6:96:ec:
                    ef:28:cd:79:e1:d1:4c:fe:ba:7f:1b:90:78:59:17:
                    11:4f:44:ae:32:72:67:ee:6c:d6:bc:ad:a4:5e:2f:
                    55:fa:ce:31:67:a3:eb:07:75:77:7b:1a:c4:96:d2:
                    01:64:41:ec:48:a3:ff:fd:0e:f5:67:18:95:90:50:
                    8e:69:03:55:8a:20:45:5c:6e:22:5d:b6:37:8c:ea:
                    6e:6e:2e:09:6d:e6:f4:ed:56:ec:b6:78:8e:22:dc:
                    2e:ac:05:20:4b:23:6d:e8:ec:ab:a9:58:9b:01:59:
                    87:d5:0b:6e:73:71:4d:d3:5a:24:35:f3:40:7f:61:
                    e4:f8:19:27:32:1d:c7:6f:a8:c7:3b:6e:75:cf:8a:
                    c3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C9:CE:8E:B3:B6:59:94:11:D8:72:24:6C:55:6B:EC:C6:1E:37:31
            X509v3 Authority Key Identifier:
                keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/95737270643711EFBCD1344AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:34c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:0a:9f:fd:3b:85:e7:d0:38:b9:94:8d:3e:d3:6e:0a:2c:8f:
         6a:d0:30:5f:a7:3a:05:ef:3d:06:46:21:89:c1:db:61:ba:1e:
         93:04:f6:2e:81:ce:1e:4e:92:c1:2d:05:92:35:4e:e2:2b:5f:
         90:7b:ca:fa:67:06:f9:ee:07:fe:2a:18:8f:18:0a:a2:80:fd:
         6e:23:0e:fc:49:36:44:f1:da:ec:8a:9c:b4:a7:b4:80:ca:61:
         b0:95:a9:0e:30:a6:89:2f:7a:4c:c0:72:5c:14:b5:e7:f2:9d:
         02:f2:a2:67:97:0c:24:ae:5f:85:2c:34:2d:de:f1:29:25:33:
         9f:47:7b:57:7a:9e:e8:b7:70:3b:c6:0f:8b:a9:6b:ed:62:36:
         24:6f:68:01:16:49:55:73:74:00:86:8f:33:fb:52:10:f5:da:
         4e:3b:2c:56:a8:84:cf:48:fe:63:37:6b:20:d4:4d:06:e3:6d:
         b5:60:39:46:4b:95:50:2f:78:8a:3d:a2:9c:ef:ba:e6:ec:6a:
         c5:af:42:f1:ee:b5:9e:5a:73:3f:13:36:4f:df:ac:05:81:ac:
         cd:33:6b:9b:23:94:5a:40:14:47:f7:0f:65:2a:2b:df:b4:54:
         4b:28:65:84:44:06:d5:b3:7c:b9:43:74:46:5e:9c:52:3a:36:
         a1:ce:45:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:44:59 2025 by rpki-client