This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/125EA39CBE0311F0BD65F062C4F9AE02.roa
File:                     125EA39CBE0311F0BD65F062C4F9AE02.roa (raw, json)
Hash identifier:          USmtuTTmRco0BEBl+7v5NzI0IPVnUkLZyU5TqgVNBVA=
Subject key identifier:   0A:F6:98:1C:09:14:65:21:2E:94:FE:13:EB:6F:10:2A:80:4C:B4:4A
Certificate issuer:       /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial:       16CA
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/125EA39CBE0311F0BD65F062C4F9AE02.roa
Signing time:             Mon 10 Nov 2025 07:01:26 +0000
ROA not before:           Mon 10 Nov 2025 07:01:26 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     198949
IP address blocks:        175.111.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
                          rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5834 (0x16ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
        Validity
            Not Before: Nov 10 07:01:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69118dc5-acb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0e:8d:a1:fe:7f:c6:d3:dd:9f:a1:fb:79:3c:
                    87:bd:78:32:da:8d:c4:4c:e1:be:5f:7a:97:1e:52:
                    f4:b6:66:a9:8b:83:41:28:c2:01:b7:0f:7d:12:af:
                    7f:91:a5:09:0b:39:32:6f:c1:c3:ea:a8:67:69:27:
                    42:01:2f:37:eb:3f:de:0d:8c:72:9f:06:35:40:9f:
                    f4:e3:31:2d:67:2a:d5:0f:16:8e:27:c8:27:bc:02:
                    38:26:29:ff:5d:98:36:b5:ef:db:87:d2:ef:95:2a:
                    7b:e1:aa:23:ba:8d:8c:e5:85:3b:be:70:42:f4:b8:
                    45:73:53:67:c0:7d:fb:23:04:35:7e:b3:a8:e2:09:
                    73:61:90:84:74:dd:8d:97:c2:f4:0d:ed:db:50:fd:
                    82:ac:6f:34:74:2e:b6:f2:04:6d:fa:19:0c:9c:f8:
                    e8:d6:a5:bf:96:00:16:3d:53:f0:8c:82:a8:50:b5:
                    58:bc:b4:84:4d:34:cd:43:b9:b7:5d:67:52:8f:32:
                    49:a9:7a:2b:8a:8a:bd:02:41:8c:b3:b7:8c:c5:db:
                    63:d5:20:0a:d3:97:16:29:dc:a2:8e:c2:eb:71:55:
                    85:7f:5d:a2:d3:15:af:33:b8:cb:2d:5e:63:49:ef:
                    dd:da:96:7c:cc:83:e0:5b:02:33:e8:06:2a:b6:ee:
                    df:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F6:98:1C:09:14:65:21:2E:94:FE:13:EB:6F:10:2A:80:4C:B4:4A
            X509v3 Authority Key Identifier:
                keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/125EA39CBE0311F0BD65F062C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:49:d3:52:ed:05:22:09:db:b9:fe:8e:df:23:46:83:ed:af:
         90:18:db:ac:bf:11:c5:e3:dd:5b:60:18:b5:f3:74:29:47:25:
         8e:88:ef:17:ae:82:5f:0d:88:d0:6f:4d:56:d6:d5:69:c5:f6:
         4a:74:a0:3f:c0:9a:c6:f0:20:03:cd:3b:0f:94:df:2f:f5:c0:
         32:bb:d3:ac:f7:c2:98:18:0d:9b:ed:b9:f6:14:7b:a7:f4:80:
         b6:46:ea:23:d4:43:ba:34:4d:83:ee:f3:da:59:db:a1:00:9e:
         ff:54:b5:fa:fc:5d:ac:11:60:df:4a:b2:f0:00:59:24:e2:ff:
         d4:16:2e:a7:d3:51:72:9e:7f:07:38:ee:38:2d:db:6b:2f:dc:
         8a:b6:23:3c:b1:48:81:a7:ee:85:19:42:4c:28:55:08:96:ea:
         d0:e5:29:81:5e:5e:b6:c6:6c:f9:61:f5:20:9a:5c:ce:65:ef:
         cf:c6:c1:a4:b6:2f:91:31:d5:26:3d:21:47:e9:ef:74:6b:c9:
         42:91:37:d5:cf:c9:1b:19:88:08:97:70:52:eb:96:91:25:b0:
         01:0c:a7:81:83:5c:92:1e:03:bf:23:90:8d:13:3b:4c:53:3b:
         8c:e7:27:51:43:9e:ca:6c:ae:e5:8a:09:d7:9b:94:6f:9c:81:
         15:85:c7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:13:32 2025 by rpki-client