This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/C0655836B3B511EA8BFADC14C4F9AE02.roa
File:                     C0655836B3B511EA8BFADC14C4F9AE02.roa (raw, json)
Hash identifier:          yc5Wpx2pnLB6guboninc18l3eTqDU3/v4bwKPQPqPjM=
Subject key identifier:   AD:80:77:EA:01:DA:AA:14:4E:53:EE:D6:36:DD:85:0C:9F:5F:97:16
Certificate issuer:       /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Certificate serial:       128A
Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/C0655836B3B511EA8BFADC14C4F9AE02.roa
Signing time:             Thu 04 Dec 2025 16:46:53 +0000
ROA not before:           Thu 04 Dec 2025 16:46:53 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     36351
IP address blocks:        2403:a280:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
                          rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4746 (0x128a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
        Validity
            Not Before: Dec  4 16:46:53 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6931bafd-c32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:2c:41:66:bb:30:ca:c1:97:b1:a4:50:e7:
                    2b:92:c3:be:ca:d5:df:db:a4:4a:be:8e:e1:a5:3e:
                    91:9a:77:1f:05:16:9f:62:82:f5:e4:58:ff:78:21:
                    a3:3b:3f:2a:e4:1a:5f:a1:d0:e3:f4:1f:f1:d6:5f:
                    ef:f4:03:95:c6:d9:c5:22:22:af:72:d0:3d:d9:eb:
                    9f:a6:77:d5:0f:48:e8:2b:a0:ee:91:23:8f:12:b7:
                    0a:d4:8f:cb:b7:de:3b:f2:a3:39:51:a0:75:b6:f8:
                    12:ff:39:cd:4b:48:a7:54:6a:c2:2a:8a:e4:cc:27:
                    e9:18:0e:a1:fd:42:4b:a3:15:d8:9d:bd:c6:31:36:
                    5b:74:57:3e:ea:93:d0:6e:86:17:f8:6e:67:24:74:
                    a6:2a:75:ff:db:58:e8:90:81:d0:63:3c:29:76:31:
                    10:58:a7:d4:ad:3d:44:a4:51:6c:5d:0b:b6:6a:7d:
                    77:93:86:49:50:02:70:9e:d4:35:7c:16:b3:bb:27:
                    2d:69:66:8d:89:e9:90:64:f2:01:d0:12:57:d3:32:
                    99:a2:c7:20:ea:e9:f6:be:bd:80:9f:c0:6b:e9:88:
                    7e:dd:f7:f7:e4:7b:43:08:24:5b:89:6b:a5:19:78:
                    ca:e0:92:1a:9b:f3:6c:97:f6:20:3e:b1:7a:23:4e:
                    9d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:80:77:EA:01:DA:AA:14:4E:53:EE:D6:36:DD:85:0C:9F:5F:97:16
            X509v3 Authority Key Identifier:
                keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/C0655836B3B511EA8BFADC14C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:a280:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         82:4a:a1:c9:a5:c7:09:2d:24:3e:26:2a:33:34:d8:94:98:c1:
         2e:81:97:1b:eb:27:68:1e:cd:d5:73:96:10:71:aa:af:81:34:
         5b:1f:c2:55:2c:fa:b5:65:ff:66:a8:58:60:ce:da:80:4b:09:
         d4:6c:d4:7f:77:0f:ef:a0:6e:50:6f:52:c0:1e:66:b7:c1:f0:
         79:b5:7c:e4:87:6e:31:06:b9:6f:9f:a8:cd:65:1a:8e:55:c1:
         20:82:7d:cf:03:82:e1:3b:3c:f5:2f:1f:e4:56:d2:02:5a:a5:
         91:96:4f:e3:db:e5:16:29:15:4e:be:19:ba:45:28:cb:a7:da:
         f3:bf:94:9f:18:33:54:c6:f1:ac:92:20:59:be:11:ad:41:88:
         e3:c6:d2:aa:24:bd:b2:de:86:29:4b:be:49:0e:0b:16:76:68:
         20:e5:98:ca:80:fc:fa:ef:ed:f7:2b:f0:94:63:d9:ed:44:cb:
         64:64:96:93:13:92:a8:e3:ca:bb:51:13:64:1d:fc:ca:37:97:
         45:3a:25:21:95:91:a8:fe:7e:00:02:20:8b:8f:7b:4d:22:4d:
         86:a5:81:24:3b:d8:79:3c:7b:c1:df:41:9d:ef:06:a3:ef:96:
         b7:81:8f:55:ad:e1:28:dd:7b:c9:91:a4:cb:f7:41:4d:f9:d0:
         a6:24:b5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:39:04 2025 by rpki-client