This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/B6FD84CE54F611E79DF7E643C4F9AE02.roa
File:                     B6FD84CE54F611E79DF7E643C4F9AE02.roa (raw, json)
Hash identifier:          ZjgD8PMkf3vUCSjewa6ZRQ93PcHYL3xnQiPgdUCYUGo=
Subject key identifier:   5B:A2:A5:52:C6:1F:38:E0:98:00:46:60:05:AE:91:ED:D6:83:81:77
Certificate issuer:       /CN=A91AB063/serialNumber=E7584F959A081A4DD94809353051D235939C391D
Certificate serial:       1BE1
Authority key identifier: E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/B6FD84CE54F611E79DF7E643C4F9AE02.roa
Signing time:             Mon 24 Nov 2025 16:04:32 +0000
ROA not before:           Mon 24 Nov 2025 16:04:32 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     18021
IP address blocks:        202.12.0.0/24 maxlen: 24
                          202.86.96.0/20 maxlen: 24
                          2400:5900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl
                          rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7137 (0x1be1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB063, serialNumber=E7584F959A081A4DD94809353051D235939C391D
        Validity
            Not Before: Nov 24 16:04:32 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69248210-9c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:7f:22:06:89:cc:64:91:78:d5:fb:37:be:
                    80:ea:79:93:d4:46:c3:51:26:b9:a3:14:4d:80:71:
                    36:6b:37:8b:6a:78:5e:99:5a:17:6a:f1:fc:f1:5f:
                    0f:96:f0:a8:c6:98:6c:3c:5e:7f:85:37:6f:e2:98:
                    f2:66:30:35:e1:76:e1:fd:0b:2d:fa:ed:ef:5a:cf:
                    9b:28:81:44:07:3a:f8:89:11:21:5e:c3:94:46:25:
                    19:c0:2e:45:04:2b:75:35:97:96:bd:7a:51:34:8b:
                    a2:cb:b3:e1:14:1e:fd:f9:0e:41:5d:1f:47:9d:94:
                    39:18:b1:d1:d8:9e:42:b1:ab:49:4f:f6:f7:fd:46:
                    59:d0:dc:45:a1:c8:06:a4:fe:1f:4c:6e:2d:f7:26:
                    2a:75:25:fc:3f:e4:20:7c:f2:fb:5a:6f:59:b5:47:
                    71:82:b0:80:ea:6d:a7:01:5b:e3:e9:17:3f:26:8f:
                    69:60:09:c8:4d:05:b1:1f:d5:b6:0d:20:87:a7:4b:
                    c2:16:7d:00:bd:4c:e7:43:ce:26:5a:fd:69:e4:54:
                    26:74:4c:df:98:ea:6f:2c:47:2c:0d:0a:2e:ce:d3:
                    5b:45:1a:84:3b:ef:2c:48:34:03:79:86:e2:fb:f9:
                    ba:51:24:6d:8f:ad:b5:e8:3d:ca:7c:7d:10:4d:fe:
                    06:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A2:A5:52:C6:1F:38:E0:98:00:46:60:05:AE:91:ED:D6:83:81:77
            X509v3 Authority Key Identifier:
                keyid:E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/B6FD84CE54F611E79DF7E643C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.0.0/24
                  202.86.96.0/20
                IPv6:
                  2400:5900::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:71:80:e6:6e:fa:87:70:92:8a:00:05:51:50:d3:aa:7d:df:
         e2:64:e2:a6:e8:2a:56:32:84:f7:b4:31:da:7b:b7:c3:e2:ec:
         5b:13:8d:be:44:7c:0d:4a:37:6b:e4:ed:49:bb:a4:8b:5d:cf:
         05:9b:bc:78:a2:4c:fb:29:12:56:a1:95:3a:54:2c:3a:03:cc:
         1b:ae:62:80:7c:08:38:6f:9a:31:90:b6:17:44:20:46:9e:f0:
         cb:69:1a:1d:1d:45:b0:8d:07:5b:19:0e:f0:51:83:d2:75:f4:
         71:52:08:da:c0:c1:9f:d8:3c:37:bc:c7:18:86:a8:3e:b2:6e:
         19:f1:1e:44:ed:23:ea:71:92:40:68:af:3c:35:10:16:29:b1:
         c4:c7:e0:21:d8:03:c2:be:09:a0:51:7f:41:c7:8d:18:4f:f3:
         99:e4:bf:ef:96:76:d3:0b:b1:e7:e8:4d:61:10:1b:3c:50:22:
         f7:c9:03:29:7b:71:68:f2:c6:a4:10:6d:2b:84:47:fc:e0:bb:
         6d:f9:58:2a:f4:16:f7:33:c2:9b:f1:8b:68:b5:d6:21:d2:4e:
         54:f7:dc:1f:0f:e1:a6:68:c5:f4:37:68:c7:c5:e9:4e:05:ae:
         84:79:37:f9:1e:82:22:62:fd:4d:5b:05:99:b3:f3:95:a7:76:
         7b:4a:fa:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:16:12 2025 by rpki-client