This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/FE6E6B48749E11E8B07CAE80C4F9AE02.roa
File:                     FE6E6B48749E11E8B07CAE80C4F9AE02.roa (raw, json)
Hash identifier:          aoLs85T25Nbu5rfe8HQr6/uLXCb4GRzjjbTFp9DkWQU=
Subject key identifier:   75:27:10:76:A2:BA:DC:4D:0D:30:0C:CB:EB:7B:83:8E:BA:A6:E7:DD
Certificate issuer:       /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
Certificate serial:       1D21
Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/FE6E6B48749E11E8B07CAE80C4F9AE02.roa
Signing time:             Tue 18 Nov 2025 16:04:33 +0000
ROA not before:           Tue 18 Nov 2025 16:04:33 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     58431
IP address blocks:        2404:6980:31::/48 maxlen: 48
                          2404:6980:32::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl
                          rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7457 (0x1d21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
        Validity
            Not Before: Nov 18 16:04:33 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=691c9910-9b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:02:38:72:06:bd:b7:aa:c8:97:7d:78:fe:
                    d2:4e:26:ca:30:21:6a:ea:ac:bd:96:be:16:b2:c7:
                    6f:f2:98:96:83:7e:fe:6c:0e:e0:8f:49:fa:5a:0e:
                    6d:eb:c4:fe:d1:8c:a2:c9:09:b0:2a:88:51:03:f4:
                    32:a0:54:bb:c5:4d:b1:b0:bf:9b:ed:d1:3c:66:98:
                    7b:c4:f4:b1:9e:a1:8d:99:72:66:6c:85:aa:63:5b:
                    dc:c8:d8:b7:c2:eb:4f:dd:67:f6:a6:ca:66:47:9b:
                    bb:1d:94:a2:bb:76:f1:dd:aa:7c:80:dd:01:48:9a:
                    ee:fc:12:e5:a2:8a:5a:34:90:0f:21:72:41:47:fe:
                    98:d1:fc:d4:b4:ce:5e:09:1c:0c:ae:ba:5e:35:4c:
                    c2:1b:d1:61:15:4f:f3:32:3e:7f:3f:1d:0a:23:56:
                    d1:e7:46:92:99:8e:f1:5b:9e:a5:b4:e1:db:5c:9b:
                    0d:f0:95:dd:ab:ea:16:84:6e:0b:0f:cd:ff:b4:8b:
                    93:14:bc:22:bc:ac:3e:bb:89:ed:b0:2f:87:39:18:
                    ea:c8:c3:cb:77:78:7a:12:86:2f:27:68:56:67:8d:
                    7f:a3:c8:d8:ce:6a:84:39:d3:99:f5:45:b1:2e:a9:
                    af:23:ab:0a:38:71:53:22:98:0d:71:38:49:35:b7:
                    18:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:27:10:76:A2:BA:DC:4D:0D:30:0C:CB:EB:7B:83:8E:BA:A6:E7:DD
            X509v3 Authority Key Identifier:
                keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/FE6E6B48749E11E8B07CAE80C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:6980:31::-2404:6980:32:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         5d:26:d6:75:ef:a1:32:1c:b6:2b:99:ba:95:9f:23:44:b3:f4:
         b8:13:19:91:54:47:ba:d8:59:4d:98:13:9d:3a:84:82:c5:6d:
         0b:be:61:e0:27:cc:e5:dc:28:e6:81:1d:ad:6a:8c:6b:2f:c3:
         18:cc:63:07:19:31:18:f9:14:c8:75:c5:96:96:73:95:c8:0c:
         5d:e9:e8:58:2c:45:ed:94:aa:df:fc:35:bd:de:be:a4:d2:98:
         6f:59:ef:f6:35:a9:07:43:a1:9a:ff:f4:2f:cd:bc:5d:9c:0b:
         3e:5a:ca:32:61:aa:25:2e:ef:06:55:f8:0a:9d:78:21:87:40:
         4f:92:de:03:58:3c:f3:b0:e4:2e:46:1e:41:dc:1e:18:c7:1a:
         b3:83:2b:b1:6f:8e:3f:39:45:22:b4:62:27:f9:5e:bb:1a:f7:
         03:df:4e:1c:66:98:11:2f:7d:78:d7:aa:4f:c4:6c:2d:2f:f8:
         d0:f8:e1:89:36:1d:c9:23:d7:b5:be:ea:76:45:e5:d9:7b:e7:
         2d:ab:4e:45:5f:b3:97:13:5a:6b:ed:f4:2a:e8:77:03:b5:47:
         70:a2:4d:1b:57:5c:a2:5f:e7:b8:9a:e3:44:f7:6f:43:a0:0c:
         fb:86:ac:fa:49:d1:6a:23:5b:2b:d2:08:a0:a2:27:52:0a:46:
         0d:b6:fa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:42:12 2025 by rpki-client