This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/4DACC668D0CD11F0B1E50143C4F9AE02.roa
File:                     4DACC668D0CD11F0B1E50143C4F9AE02.roa (raw, json)
Hash identifier:          MB+r+Os7hTbN09scD5tkwu7u8VbFNM4s1268hWhFhdM=
Subject key identifier:   E5:8E:BD:6F:79:C8:D1:98:A5:EE:A8:EF:2E:14:22:FE:91:B8:C0:41
Certificate issuer:       /CN=A91BA594/serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837
Certificate serial:       0764
Authority key identifier: DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/4DACC668D0CD11F0B1E50143C4F9AE02.roa
Signing time:             Thu 04 Dec 2025 04:54:24 +0000
ROA not before:           Thu 04 Dec 2025 04:54:24 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     9381
IP address blocks:        2404:2100::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl
                          rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 20:40:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1892 (0x764)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA594, serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837
        Validity
            Not Before: Dec  4 04:54:24 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69311400-6357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2e:39:d3:f0:08:75:c6:26:cd:51:48:75:88:
                    03:7d:56:b0:c4:e1:f9:88:a4:8d:d5:b0:43:b9:b9:
                    74:9a:aa:af:f0:1a:64:28:80:86:87:e0:77:5b:29:
                    f3:61:aa:2b:3e:d1:24:32:87:21:45:9f:bf:5c:bb:
                    5f:c3:7f:03:8f:e4:92:1e:e7:b3:c3:b5:80:8e:fb:
                    60:f2:07:57:eb:b9:8b:8a:7d:77:36:41:87:8d:f7:
                    a8:57:d9:e5:c1:b6:d1:df:d4:b1:e5:a6:c5:18:50:
                    e6:79:ff:cb:86:52:8a:19:65:a0:36:81:1f:45:c6:
                    8d:61:4e:09:69:a5:ef:4b:99:5c:91:70:2b:be:08:
                    3e:1d:9b:94:63:b2:85:4f:3a:1e:e6:b1:2e:d1:4d:
                    2a:6e:5b:d6:d2:36:45:3f:a2:06:de:fb:ec:cf:1b:
                    a7:98:a4:2c:30:c9:97:61:a3:29:3e:c8:53:b7:df:
                    f0:e4:fb:8a:f3:55:37:f2:c1:2b:9b:dc:42:c7:2b:
                    05:9e:67:0d:15:1d:1a:a4:f2:56:4d:3a:0b:c8:fa:
                    5f:6d:0e:c3:4f:15:52:56:18:e6:a6:d7:7f:7d:01:
                    ef:7e:ce:6b:af:40:d1:82:ab:43:13:4b:ab:97:30:
                    49:88:eb:aa:e7:a0:a6:f8:39:7c:1d:f4:44:a3:13:
                    02:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8E:BD:6F:79:C8:D1:98:A5:EE:A8:EF:2E:14:22:FE:91:B8:C0:41
            X509v3 Authority Key Identifier:
                keyid:DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/4DACC668D0CD11F0B1E50143C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:2100::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:0f:f1:42:e6:5c:fe:3b:d1:70:3a:8e:bd:67:56:c8:ca:83:
         c4:74:5c:f4:f2:d6:0d:82:0e:91:0f:dd:12:ad:1b:6b:8a:e4:
         b7:85:37:bc:97:6a:14:39:87:e6:29:c3:74:d5:a8:c5:2a:f9:
         f9:30:fd:7b:4b:6f:2a:04:c1:77:06:09:d5:74:25:a7:aa:48:
         60:62:62:8b:c2:8e:1f:66:2c:78:c7:c6:78:69:23:d8:21:fc:
         77:ba:64:23:30:30:55:b1:44:e9:c2:e5:6b:1d:26:25:23:5c:
         ce:b3:ed:15:84:03:14:51:5f:9b:be:99:ff:5e:4f:30:2e:86:
         32:6a:88:63:79:d2:d0:b1:29:2d:ce:ed:ce:14:04:bc:0f:81:
         9c:15:64:87:8b:85:b5:5c:d8:58:6e:03:f4:a3:dd:52:8e:f0:
         2d:de:da:41:1a:a5:df:59:b2:7b:7b:69:63:60:01:49:fd:40:
         c2:c2:60:46:70:e5:f3:03:af:a3:59:b8:00:c6:28:5d:34:82:
         e3:e0:ce:8c:10:ab:04:c2:a9:d8:8a:e7:6f:db:00:4a:c0:a7:
         f2:d4:06:eb:33:88:94:21:a2:e1:ee:83:68:06:0e:5e:7b:99:
         d9:dc:8e:b0:c5:ee:06:7b:65:cc:97:3a:91:8b:e0:38:79:7a:
         40:39:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:18:51 2025 by rpki-client