This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/24992E62E0FC11F0B50D6A7D5F6F56BC.roa
File:                     24992E62E0FC11F0B50D6A7D5F6F56BC.roa (raw, json)
Hash identifier:          xFgB7EH2QxxLlf3n0UJ+DMqo3db1de33t4nREaUSocw=
Subject key identifier:   D1:FD:A8:0F:CE:20:E1:82:1B:B2:23:E3:6F:73:E4:A4:4F:88:A7:BC
Certificate issuer:       /CN=A91AB1C2/serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437
Certificate serial:       05
Authority key identifier: 5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/24992E62E0FC11F0B50D6A7D5F6F56BC.roa
Signing time:             Wed 24 Dec 2025 19:10:00 +0000
ROA not before:           Wed 24 Dec 2025 19:10:00 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154450
IP address blocks:        2402:4220::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl
                          rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 07:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB1C2, serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437
        Validity
            Not Before: Dec 24 19:10:00 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=694c3a88-42ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:60:07:9d:ea:1a:c6:b9:fa:36:91:ba:d6:ec:
                    6a:ed:0b:26:83:f1:bb:35:6e:b2:95:bd:34:2d:2d:
                    89:a4:1b:f7:ca:36:a7:c3:d4:53:c8:78:61:91:c6:
                    e3:dd:8a:f8:a6:ea:a1:7f:fe:db:ac:a0:f5:7d:9e:
                    23:c1:5a:45:f3:83:06:ad:8e:ac:ef:68:eb:42:4e:
                    de:38:f6:3f:f2:4d:94:85:d0:7d:21:f3:dc:b0:66:
                    2f:6b:f5:45:dc:3e:93:8e:1a:6d:e9:4f:12:62:d2:
                    65:9d:d1:86:05:26:f0:d6:7c:f2:e2:3a:e4:7e:c9:
                    57:32:16:d6:1b:9a:31:a8:f2:9e:cf:15:03:18:ac:
                    0f:f5:6f:84:5a:f6:7f:c1:da:c8:da:c3:ab:e4:80:
                    32:70:4f:dc:cc:a5:1a:b1:ec:a6:cb:81:fe:ee:ca:
                    1b:31:5c:bd:95:9e:2b:46:02:69:8c:90:9c:15:a4:
                    39:39:5b:18:d7:c5:92:ca:5a:c2:d2:c7:16:6e:60:
                    55:90:39:ed:30:b5:f9:58:1b:33:dc:19:ce:26:26:
                    c3:01:b0:b3:f8:66:72:9c:ad:84:7d:ee:d6:ec:e3:
                    73:fc:53:92:38:c0:1c:dc:d3:8c:98:bb:46:f1:37:
                    ab:ab:04:67:dd:4f:e4:37:4d:9e:89:7a:0d:36:19:
                    d9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FD:A8:0F:CE:20:E1:82:1B:B2:23:E3:6F:73:E4:A4:4F:88:A7:BC
            X509v3 Authority Key Identifier:
                keyid:5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/24992E62E0FC11F0B50D6A7D5F6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4220::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:ab:39:b5:f6:59:b4:a2:44:21:7b:69:7c:97:a1:5d:97:5c:
         da:dd:aa:b2:80:a5:90:dc:58:30:a5:c3:e3:01:5e:8d:f0:59:
         18:75:7c:af:4c:48:9e:47:bd:33:9d:93:8b:48:a1:54:b9:07:
         d0:f0:90:eb:8f:6f:4f:76:86:1a:75:db:a6:3b:5d:1b:95:b8:
         15:2c:17:cc:83:3e:63:73:01:db:33:02:43:f2:df:e7:1a:63:
         de:6f:a5:fa:64:30:96:f7:20:75:fa:88:29:8b:a6:e6:30:46:
         da:41:c5:5c:04:f0:8c:6b:aa:3a:70:5d:19:89:f8:2b:c2:60:
         87:75:e6:70:41:29:70:9a:2b:a7:b6:97:5e:60:93:0a:1a:87:
         2f:48:75:3e:5b:44:22:11:52:9a:28:c1:6a:8a:cb:aa:a8:be:
         25:f1:67:4e:46:58:de:ea:97:c9:67:79:39:22:fd:2e:99:40:
         ef:a3:9c:1c:55:0a:73:7f:70:1d:fd:4a:d7:cf:96:05:f1:73:
         d0:5c:05:93:dd:0d:be:5c:c9:5f:1a:9b:d0:21:08:fb:d6:0e:
         c6:45:a7:b1:17:ae:6d:71:57:11:c7:1a:b7:c4:51:8d:ed:8a:
         dd:2b:79:98:18:86:f3:6b:b4:35:eb:58:70:ff:a1:26:6c:79:
         1a:b5:ef:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:37 2026 by rpki-client