This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/8F32CF70B52911F0A8B8B043C4F9AE02.roa
File:                     8F32CF70B52911F0A8B8B043C4F9AE02.roa (raw, json)
Hash identifier:          AuZYVHQZgukMvQbSIT5eZVhwVaF0IcOcC6ubQHkO3ww=
Subject key identifier:   E2:03:DC:4E:D1:92:DA:C5:F1:8E:7D:E8:13:AA:13:85:E5:74:1A:A3
Certificate issuer:       /CN=A9192A47/serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
Certificate serial:       B4
Authority key identifier: A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/8F32CF70B52911F0A8B8B043C4F9AE02.roa
Signing time:             Wed 19 Nov 2025 04:22:59 +0000
ROA not before:           Wed 19 Nov 2025 04:22:59 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     15695
IP address blocks:        2404:e00:853::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
        Validity
            Not Before: Nov 19 04:22:59 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=691d4623-651b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d0:b1:90:0c:79:65:43:bc:02:49:c6:d4:ea:
                    0b:51:88:2c:cc:5d:ea:43:44:d5:b1:62:0b:29:92:
                    2d:ba:bd:8c:8b:16:6b:ed:36:bc:b7:86:5c:39:ba:
                    fa:95:87:8c:ac:6d:76:0e:f3:7d:57:22:63:82:1d:
                    04:cd:21:ef:c9:97:f9:45:82:6c:ad:44:63:7a:a4:
                    3d:76:5b:82:31:1f:36:64:bf:6e:0c:d0:74:9d:36:
                    e3:46:f4:af:8d:a0:1f:2d:39:e0:a0:4d:e2:9c:32:
                    f5:e3:d9:1c:5a:d4:49:98:65:44:87:c4:49:b9:d8:
                    6d:e6:a1:f6:75:a0:55:11:90:96:37:03:e1:c8:0f:
                    a1:96:31:b8:2b:8c:0e:a9:83:c3:bb:35:e7:4c:77:
                    84:32:a0:4c:9d:f6:04:26:f5:be:66:ea:28:87:20:
                    f6:f9:28:65:e7:8d:46:fe:75:f3:a7:e8:95:5d:48:
                    cf:e2:65:7c:ae:0d:d6:19:51:40:24:9c:86:e5:b7:
                    12:4d:b9:2c:ac:ed:f2:fa:09:ff:f6:c1:09:00:f3:
                    67:8a:5d:d2:65:e6:59:c8:fe:66:c6:36:79:92:82:
                    ba:e9:45:d7:fd:96:75:a8:3a:ed:ab:cd:1a:e6:77:
                    17:91:ec:98:0c:2b:35:6c:34:fe:0d:3b:24:8e:9d:
                    41:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:03:DC:4E:D1:92:DA:C5:F1:8E:7D:E8:13:AA:13:85:E5:74:1A:A3
            X509v3 Authority Key Identifier:
                keyid:A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/8F32CF70B52911F0A8B8B043C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:e00:853::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:40:76:35:61:e5:27:ea:8e:d3:c6:ae:da:e2:07:13:d1:52:
         9d:33:79:80:1a:5f:fc:96:17:cb:f2:19:5e:af:96:fd:99:5c:
         67:5b:c3:8b:d1:0c:68:37:bf:e4:22:0b:60:4b:d0:9d:a0:4c:
         c6:bc:ed:fa:e9:a4:01:83:72:03:e2:81:ba:fa:ab:3c:39:c3:
         35:cc:e7:67:66:28:9e:ad:cb:22:74:9a:2f:29:4a:e3:20:44:
         ce:3c:3d:8f:c7:2e:5f:d2:a1:f2:ea:1e:a1:0c:7a:52:65:82:
         3c:1d:30:b4:e1:db:c7:f3:89:22:6b:c5:2c:7a:21:04:fc:b7:
         f3:df:46:05:85:c7:e1:56:d5:c5:d2:4e:56:b1:9f:a5:00:cf:
         87:81:7d:d0:d3:de:bf:d1:a1:5a:30:13:ad:77:a3:2b:e9:5b:
         22:d4:b6:f1:bb:f0:1c:66:3a:42:dc:86:89:f9:7b:83:de:aa:
         19:50:68:43:3c:15:52:49:66:8c:63:63:74:bc:e1:fd:85:c0:
         e9:17:a0:f3:7c:dd:e5:6f:6c:48:84:1e:72:9e:fc:e2:cf:26:
         55:ea:b0:d1:6e:1a:d5:dc:1f:01:d1:a9:30:79:04:32:74:69:
         d4:72:1a:87:0a:0e:02:58:3e:fe:6e:36:ff:62:0d:a7:bf:6b:
         69:4c:c1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:46:48 2025 by rpki-client