This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/16C04B8680FB11ED9B35954DC4F9AE02.roa
File:                     16C04B8680FB11ED9B35954DC4F9AE02.roa (raw, json)
Hash identifier:          U41iJcZS8b8CmnXpeo9J3iAIuFouKFGIcbrF8o12XKM=
Subject key identifier:   AC:9C:A5:A6:10:48:12:57:F6:FC:09:A9:4B:9E:55:E0:22:1D:79:BD
Certificate issuer:       /CN=A919EA40/serialNumber=8A297E0356F0F7BF54DEF56B25A1FB1EAF84843D
Certificate serial:       022B
Authority key identifier: 8A:29:7E:03:56:F0:F7:BF:54:DE:F5:6B:25:A1:FB:1E:AF:84:84:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iil-A1bw979U3vVrJaH7Hq-EhD0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/16C04B8680FB11ED9B35954DC4F9AE02.roa
Signing time:             Thu 27 Nov 2025 00:47:30 +0000
ROA not before:           Thu 27 Nov 2025 00:47:30 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     58611
IP address blocks:        2001:df1:6ac0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.crl
                          rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iil-A1bw979U3vVrJaH7Hq-EhD0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EA40, serialNumber=8A297E0356F0F7BF54DEF56B25A1FB1EAF84843D
        Validity
            Not Before: Nov 27 00:47:30 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69279fa2-f9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:90:38:c0:7f:f3:57:62:ac:9c:ca:40:3a:bd:
                    31:68:8a:5e:7a:1f:c8:52:23:3c:78:ab:e5:e6:36:
                    97:fc:05:20:96:92:bb:eb:71:c1:60:c4:4a:b4:e0:
                    3e:df:19:e3:cd:e1:ae:76:ff:e7:86:74:e6:8c:9d:
                    9f:42:c8:43:22:af:ce:86:29:e0:a3:d2:71:db:cb:
                    a3:77:bc:63:68:bd:47:50:c3:d7:11:6a:55:99:89:
                    5f:9f:a7:0a:fa:0f:d5:dc:2a:a3:e9:33:6c:42:32:
                    e8:d8:d8:fc:fe:63:ab:7b:fc:24:b8:dc:67:a9:6f:
                    e8:17:29:26:3f:26:1f:46:29:08:28:4f:c9:3f:41:
                    0c:39:27:0f:07:94:dc:9e:cc:b4:32:f6:f0:8c:77:
                    25:0e:eb:b3:e9:9e:fa:be:2f:b8:5d:c6:13:b6:d4:
                    53:d9:fe:38:66:03:ea:ae:80:fb:b7:71:9f:2c:d0:
                    f1:0b:8c:75:00:ab:e7:4a:74:a2:f6:08:fd:98:f7:
                    f0:9e:7c:1d:ed:97:66:b1:e9:e2:48:dd:d2:c9:bf:
                    96:a4:50:0e:bf:f2:cb:6d:45:e6:1e:49:a2:da:b1:
                    06:3f:b3:eb:fa:9e:c0:4d:9b:01:85:63:d0:e4:02:
                    37:07:f8:9f:44:d0:25:8c:f6:2f:55:9d:26:28:16:
                    55:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9C:A5:A6:10:48:12:57:F6:FC:09:A9:4B:9E:55:E0:22:1D:79:BD
            X509v3 Authority Key Identifier:
                keyid:8A:29:7E:03:56:F0:F7:BF:54:DE:F5:6B:25:A1:FB:1E:AF:84:84:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iil-A1bw979U3vVrJaH7Hq-EhD0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/16C04B8680FB11ED9B35954DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:6ac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:82:96:a8:b0:e7:f3:50:78:a7:f8:67:5c:0e:19:35:7d:32:
         70:dc:64:5c:a0:a9:4c:7c:e8:b1:c7:2c:1c:36:e4:98:9a:0f:
         c7:3d:17:a0:98:ed:2d:e0:2d:90:44:67:90:f9:7c:d2:39:6b:
         b2:65:de:f2:47:92:c7:38:c9:3e:e3:f6:a1:2f:90:50:32:94:
         e9:f4:b8:1a:61:aa:46:c1:f3:27:05:b9:38:8c:ad:d4:bf:b5:
         ac:b8:35:16:4d:2c:f3:eb:88:16:3a:f6:7f:b7:58:bd:c2:40:
         b6:51:ef:5c:1b:8f:47:55:54:89:51:53:5a:76:97:83:98:96:
         e4:dd:13:cc:9e:0f:3d:20:6b:6f:10:2b:c3:bf:4d:e6:fc:de:
         5c:d9:16:c2:70:3d:0c:93:df:c4:03:9f:ab:16:a8:24:cc:6f:
         0b:8e:9a:6c:a4:df:6c:78:5c:5e:4d:61:7c:13:3e:27:10:51:
         c6:cc:13:9b:f6:c8:8b:38:94:8d:80:55:4a:b8:fd:d3:db:5a:
         fc:93:53:b3:03:cf:48:40:fa:26:92:17:91:41:e9:b0:dd:19:
         98:2b:94:38:48:67:84:6d:70:79:b3:09:0c:4e:0f:2f:34:99:
         c4:59:80:eb:b9:76:fd:84:bb:8f:87:b9:d1:6a:e6:8b:84:0a:
         c6:04:a6:ce
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVBNDAxMTAvBgNVBAUTKDhBMjk3RTAzNTZGMEY3QkY1NERFRjU2QjI1QTFGQjFF
QUY4NDg0M0QwHhcNMjUxMTI3MDA0NzMwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI3OWZhMi1mOWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA95A4wH/zV2KsnMpAOr0xaIpeeh/IUiM8eKvl5jaX/AUglpK763HBYMRKtOA+
3xnjzeGudv/nhnTmjJ2fQshDIq/Ohingo9Jx28ujd7xjaL1HUMPXEWpVmYlfn6cK
+g/V3Cqj6TNsQjLo2Nj8/mOre/wkuNxnqW/oFykmPyYfRikIKE/JP0EMOScPB5Tc
nsy0MvbwjHclDuuz6Z76vi+4XcYTttRT2f44ZgPqroD7t3GfLNDxC4x1AKvnSnSi
9gj9mPfwnnwd7ZdmseniSN3Syb+WpFAOv/LLbUXmHkmi2rEGP7Pr+p7ATZsBhWPQ
5AI3B/ifRNAljPYvVZ0mKBZVkQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKycpaYQ
SBJX9vwJqUueVeAiHXm9MB8GA1UdIwQYMBaAFIopfgNW8Pe/VN71ayWh+x6vhIQ9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUE0MC81MjkyM0Y0NDgw
RjAxMUVEQUFFNDhGN0JDNEY5QUUwMi9paWwtQTFidzk3OVUzdlZySmFIN0hxLUVo
RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lpbC1BMWJ3OTc5VTN2VnJKYUg3SHEtRWhEMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUVBNDAvNTI5MjNGNDQ4MEYwMTFFREFBRTQ4RjdCQzRGOUFFMDIvMTZDMDRCODY4
MEZCMTFFRDlCMzU5NTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ3xasAwDQYJKoZIhvcNAQELBQADggEBALWClqiw5/NQ
eKf4Z1wOGTV9MnDcZFygqUx86LHHLBw25JiaD8c9F6CY7S3gLZBEZ5D5fNI5a7Jl
3vJHksc4yT7j9qEvkFAylOn0uBphqkbB8ycFuTiMrdS/tay4NRZNLPPriBY69n+3
WL3CQLZR71wbj0dVVIlRU1p2l4OYluTdE8yeDz0ga28QK8O/Teb83lzZFsJwPQyT
38QDn6sWqCTMbwuOmmyk32x4XF5NYXwTPicQUcbME5v2yIs4lI2AVUq4/dPbWvyT
U7MDz0hA+iaSF5FB6bDdGZgrlDhIZ4RtcHmzCQxODy80mcRZgOu5dv2Eu4+HudFq
5ouECsYEps4=
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:17:27 2025 by rpki-client