This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/6470410AABD811F08E1F646DC4F9AE02.roa
File:                     6470410AABD811F08E1F646DC4F9AE02.roa (raw, json)
Hash identifier:          dPDIVkMTdtOEZEGNrrSKg00cxdj3q2OK74zNJlVoHRk=
Subject key identifier:   2B:21:B6:48:77:4A:9E:D7:5B:AA:4F:A2:0A:11:85:4E:AE:F4:50:0E
Certificate issuer:       /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Certificate serial:       128B
Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/6470410AABD811F08E1F646DC4F9AE02.roa
Signing time:             Thu 04 Dec 2025 16:46:54 +0000
ROA not before:           Thu 04 Dec 2025 16:46:54 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     400618
IP address blocks:        124.108.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
                          rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 16:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4747 (0x128b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
        Validity
            Not Before: Dec  4 16:46:54 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6931bafe-a8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:b4:08:af:ac:82:b4:04:45:4b:f0:ba:b4:
                    4b:c8:43:c8:24:27:2d:7e:96:71:b1:7e:97:a6:72:
                    65:73:65:a7:f1:11:47:d0:28:a0:32:9c:62:79:8c:
                    10:57:99:55:62:51:01:bb:84:00:25:ca:c6:f8:66:
                    06:29:3c:20:88:bf:60:e5:51:18:5c:94:f3:97:42:
                    e1:e9:9e:ec:3b:75:28:50:76:d8:48:7b:c3:7d:10:
                    64:44:47:fd:94:00:0f:b4:13:a7:8b:87:dc:c3:56:
                    4d:58:6b:29:1d:4d:88:fa:27:83:01:3e:b9:69:a7:
                    71:e9:b6:24:a2:33:1b:e9:c9:65:46:ea:3d:6d:1a:
                    ca:1f:c2:2e:bc:00:fe:c6:e2:ae:c0:47:96:38:df:
                    13:40:fa:b6:8e:2f:e3:39:db:da:35:4a:5e:21:f2:
                    1d:69:7a:e7:9e:98:d7:2e:d9:6e:20:ef:d0:73:c0:
                    ce:ab:e5:da:60:d6:a6:5f:7a:b7:e4:75:69:d6:9e:
                    86:9b:68:cf:39:f6:92:77:c6:b4:99:80:97:73:3b:
                    58:eb:e9:a6:49:91:67:d1:06:01:96:74:61:96:9f:
                    60:b3:c8:21:88:39:2a:3e:33:d4:5c:9b:c1:22:30:
                    43:0d:e5:6e:7e:cb:0e:0b:a2:5a:b9:97:08:7a:00:
                    24:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:21:B6:48:77:4A:9E:D7:5B:AA:4F:A2:0A:11:85:4E:AE:F4:50:0E
            X509v3 Authority Key Identifier:
                keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/6470410AABD811F08E1F646DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.108.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:73:ba:a6:54:2d:b7:5a:ea:9c:a9:d2:57:7b:67:14:77:a4:
         50:e2:5e:3b:96:52:e9:88:dc:3a:6c:eb:5e:ef:b7:6c:3e:62:
         81:6f:52:6f:6a:6a:93:7f:98:62:96:85:b3:62:fb:44:8c:19:
         9a:c6:11:ea:9b:3c:3b:f1:1c:a8:ad:e0:d4:0a:14:cb:c0:6a:
         0b:15:68:b5:64:11:4d:f8:05:c5:c0:7d:b5:ce:dd:7b:67:78:
         9f:ec:ab:6b:a5:6a:41:9a:b8:31:34:0a:15:45:cd:89:a0:8a:
         45:b1:75:e8:0a:e6:a8:7b:f6:4e:ad:e7:c5:df:f4:b8:44:d6:
         0e:3f:5d:52:b0:75:3e:f4:bf:16:76:b1:9f:f6:31:de:ba:f4:
         12:7a:8d:5d:08:a0:00:75:11:21:ec:0b:5d:60:c2:0f:31:b9:
         44:f8:f4:f5:a7:24:96:12:55:f9:76:e6:a0:28:03:0c:d7:dc:
         7f:97:b0:78:e5:84:7d:f4:28:85:c6:e6:66:9d:cc:74:cb:51:
         be:e1:29:31:52:a8:85:e2:65:5c:40:ec:4d:7b:d7:e0:32:ec:
         0f:9d:da:c4:57:89:be:9c:f9:46:06:42:b4:ae:e1:af:ab:f2:
         cd:ca:d8:24:72:1d:24:85:a5:ef:9e:4a:86:0d:45:ee:d0:3a:
         ef:a9:52:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:09:14 2025 by rpki-client