This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/8F368BEEF9C411EB9F9E645DC4F9AE02.roa
File:                     8F368BEEF9C411EB9F9E645DC4F9AE02.roa (raw, json)
Hash identifier:          BCeU9uO3b/ub2zjygM6mgzVMfSicIdTTaBeS71Jzvv4=
Subject key identifier:   7D:41:14:F8:C9:F2:61:EB:3E:55:94:32:BE:82:88:89:3B:38:23:75
Certificate issuer:       /CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3
Certificate serial:       3512
Authority key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/8F368BEEF9C411EB9F9E645DC4F9AE02.roa
Signing time:             Sat 06 Dec 2025 14:50:43 +0000
ROA not before:           Sat 06 Dec 2025 14:50:43 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     7532
IP address blocks:        210.208.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl
                          rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13586 (0x3512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A60A9, serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3
        Validity
            Not Before: Dec  6 14:50:43 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=693442c2-e086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:4b:61:7c:f4:0b:2e:a4:5b:4d:13:50:bd:
                    49:4e:89:16:8a:35:ef:68:65:31:0f:03:60:73:07:
                    0f:25:64:c7:8f:1d:12:8e:3a:c7:9b:36:c1:50:6c:
                    fa:cd:7a:2d:72:9c:36:ff:9e:ce:ec:23:6d:06:6a:
                    18:6c:d4:e9:a2:3f:4a:c6:09:79:f3:88:02:7c:6e:
                    92:39:df:f6:5a:8a:5c:05:8f:e2:f7:60:5f:0a:f8:
                    8b:8d:ef:eb:d1:79:04:6d:08:24:6f:5c:d9:a4:ae:
                    31:38:68:94:08:2c:f9:b0:be:7c:13:80:48:53:d0:
                    cf:63:8e:a5:51:d4:c6:7e:f1:95:f9:84:c0:bb:e9:
                    12:d4:7b:c4:ac:2d:38:22:06:c3:f7:d1:c4:4b:be:
                    49:cb:2c:5e:17:41:7c:d6:0d:c0:bd:04:d5:4d:50:
                    d1:b7:80:71:68:05:20:e2:9e:85:0b:5e:53:5d:18:
                    c1:fe:81:56:6c:a5:43:80:aa:24:25:07:23:ec:35:
                    c3:45:59:95:c2:d0:ff:6f:47:5c:a1:34:fe:df:9d:
                    a3:c9:ad:e3:78:1c:7a:42:48:1c:41:5c:60:fc:11:
                    09:8a:93:5c:ab:a4:08:df:f6:1a:10:ee:66:6f:6c:
                    8e:51:bc:27:6b:b8:ed:eb:f2:fe:28:f5:e6:42:19:
                    e0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:41:14:F8:C9:F2:61:EB:3E:55:94:32:BE:82:88:89:3B:38:23:75
            X509v3 Authority Key Identifier:
                keyid:77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/8F368BEEF9C411EB9F9E645DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.208.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:58:b5:5b:c0:fd:fa:c9:d1:15:4f:4c:27:56:f9:bc:db:ac:
         d8:32:12:72:a2:3c:5e:5c:c6:bf:46:be:aa:08:73:b5:36:4e:
         57:09:a8:6d:b4:56:10:95:23:1f:77:66:21:0a:04:cd:29:8c:
         e0:5a:58:e5:4a:5e:34:ca:a6:e8:f4:c1:d3:c0:56:2e:94:df:
         b2:44:aa:a5:aa:27:f8:2a:a2:86:b1:12:2a:01:39:e0:21:0f:
         c3:bd:08:0d:39:65:68:05:3e:a4:fd:3a:ba:75:9d:55:b6:b9:
         b0:60:af:90:83:87:fa:eb:fd:df:2f:7a:42:5e:c0:e5:1e:87:
         3a:8d:fb:05:69:ee:8f:0f:60:79:c3:a3:67:f1:eb:f9:b1:49:
         a0:00:75:f8:1d:6c:29:cb:97:11:34:e9:1b:26:66:9d:d6:bb:
         21:fb:9c:9c:07:90:7d:96:2e:d1:a5:91:87:b3:af:fd:af:d9:
         a1:b0:b9:a4:ae:72:34:a1:e2:df:c0:9f:9c:76:fc:8e:76:85:
         32:e9:e0:8d:5d:55:c5:24:fe:45:f5:1e:a9:d9:da:32:11:99:
         f3:1f:c8:81:76:ce:38:99:03:97:af:f2:cd:70:ff:2f:8e:6e:
         4d:f4:3b:32:92:54:15:07:f2:a5:2a:e2:e4:0f:61:ed:54:fb:
         98:79:6c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:13:55 2025 by rpki-client