This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/3E3F56AE602C11EF82BEF23FC4F9AE02.roa
File:                     3E3F56AE602C11EF82BEF23FC4F9AE02.roa (raw, json)
Hash identifier:          nsVA5vFNM5WH17/D3VLkzQDWh4S3GoS07JcEp1Nx2FI=
Subject key identifier:   83:0D:A8:89:94:CE:0E:DE:3A:F7:7A:3B:33:19:F8:B1:79:9A:2F:4F
Certificate issuer:       /CN=A91A1E13/serialNumber=C3AEAC96EDB28C288DD7A5500B512985F1DA3714
Certificate serial:       06CB
Authority key identifier: C3:AE:AC:96:ED:B2:8C:28:8D:D7:A5:50:0B:51:29:85:F1:DA:37:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w66slu2yjCiN16VQC1EphfHaNxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/3E3F56AE602C11EF82BEF23FC4F9AE02.roa
Signing time:             Tue 02 Dec 2025 21:25:54 +0000
ROA not before:           Tue 02 Dec 2025 21:25:54 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     50605
IP address blocks:        218.251.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w66slu2yjCiN16VQC1EphfHaNxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1739 (0x6cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1E13, serialNumber=C3AEAC96EDB28C288DD7A5500B512985F1DA3714
        Validity
            Not Before: Dec  2 21:25:54 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692f5962-129e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:64:81:f1:03:cd:81:c2:ee:45:c2:c3:8e:
                    42:d0:ff:de:c6:e3:8a:8d:18:fe:3d:99:09:40:ef:
                    e4:20:60:39:ff:cc:44:70:a0:72:37:9d:f0:49:df:
                    db:46:28:71:2f:fd:9a:6b:c1:34:a8:77:d1:b2:9e:
                    d7:15:69:62:54:b5:26:43:b4:dc:1f:56:f6:bc:3b:
                    b5:33:87:d9:fb:40:e9:d2:42:09:96:66:d3:d8:98:
                    a2:c0:90:02:44:c2:5e:90:cf:fa:72:3e:fc:ce:9e:
                    91:22:d9:35:10:bb:8f:52:90:3e:55:29:7d:4b:ed:
                    1f:aa:df:2d:4c:f2:79:97:e4:66:23:2b:94:f0:82:
                    70:f1:59:d8:58:31:01:fc:fd:f2:be:92:d5:ad:81:
                    88:71:90:e3:99:91:4a:3f:94:97:24:12:cd:f9:77:
                    f2:d0:f8:5c:ec:84:43:17:14:aa:f9:d5:35:9f:7b:
                    f1:76:29:7b:6d:20:62:21:76:5a:5b:b2:14:da:02:
                    5f:a0:bc:e7:95:f4:44:f2:e7:87:87:ef:11:d8:94:
                    a9:18:2d:d9:06:01:71:74:1b:80:aa:13:e8:1f:62:
                    68:b0:bb:30:28:06:be:5f:ca:36:1e:6f:82:d1:ee:
                    69:96:a9:e5:2a:75:5a:27:bb:e7:25:2c:c7:da:e2:
                    3c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0D:A8:89:94:CE:0E:DE:3A:F7:7A:3B:33:19:F8:B1:79:9A:2F:4F
            X509v3 Authority Key Identifier:
                keyid:C3:AE:AC:96:ED:B2:8C:28:8D:D7:A5:50:0B:51:29:85:F1:DA:37:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w66slu2yjCiN16VQC1EphfHaNxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/3E3F56AE602C11EF82BEF23FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.251.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:04:7c:27:f1:0a:41:3c:24:d9:64:b3:20:2d:0a:95:bb:86:
         04:91:49:1d:19:d8:ac:3e:42:34:12:a9:58:df:e1:df:94:88:
         99:a5:e9:70:12:89:fc:9b:67:95:33:d4:c4:57:95:e2:ef:93:
         41:7c:a7:d8:58:7d:f9:8e:b0:d5:5b:12:50:73:06:51:e5:41:
         dd:60:7f:e3:58:fa:93:b1:73:d8:1d:a6:f6:ad:10:a0:d4:50:
         0c:89:70:7b:67:f3:b3:c8:a5:0f:76:a1:09:21:74:d2:7e:d4:
         2a:6d:e1:d0:bb:fe:3a:58:7a:86:a2:bb:67:72:55:89:76:95:
         c8:67:eb:e2:85:b8:6b:ea:af:b7:0c:c6:14:37:76:a9:bd:c7:
         12:35:ba:02:d3:d6:e9:57:24:60:1b:fd:c7:24:ae:5d:2a:24:
         7f:38:a5:b3:68:43:cb:c4:df:6a:3c:52:6f:fc:a6:64:13:9d:
         fc:61:52:a2:85:e4:9e:50:0c:ba:4e:a3:fe:47:32:f5:81:b9:
         3d:8a:1b:8b:cc:56:d0:56:2f:b5:a3:f3:22:63:b3:13:7a:ac:
         27:66:05:6c:7a:c2:49:0a:0a:d7:b0:73:44:97:cc:2f:7f:ac:
         f3:d9:04:2d:d5:78:0d:10:b5:9c:0f:f5:6d:1f:57:27:c0:34:
         36:26:c1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:26:28 2025 by rpki-client