This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/A6DB1A549BB511EEAAE01C70C4F9AE02.roa
File:                     A6DB1A549BB511EEAAE01C70C4F9AE02.roa (raw, json)
Hash identifier:          qyWw2r/4K++h/y+FWYONqc3F4IP6pfba3UzSaIofnKI=
Subject key identifier:   44:43:60:9E:0E:23:2A:BF:92:62:CB:41:43:53:B9:1B:3F:DD:1A:E2
Certificate issuer:       /CN=A91BF781/serialNumber=2769A4FA92297DCB1DF896DAE6373996FD31806E
Certificate serial:       0189
Authority key identifier: 27:69:A4:FA:92:29:7D:CB:1D:F8:96:DA:E6:37:39:96:FD:31:80:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/A6DB1A549BB511EEAAE01C70C4F9AE02.roa
Signing time:             Mon 01 Dec 2025 02:30:46 +0000
ROA not before:           Mon 01 Dec 2025 02:30:46 +0000
ROA not after:            Mon 30 Mar 2026 00:00:00 +0000
asID:                     61228
IP address blocks:        2401:11a0:60::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl
                          rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF781, serialNumber=2769A4FA92297DCB1DF896DAE6373996FD31806E
        Validity
            Not Before: Dec  1 02:30:46 2025 GMT
            Not After : Mar 30 00:00:00 2026 GMT
        Subject: CN=692cfdd6-44e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:ad:9d:96:98:68:05:10:da:31:d9:73:ed:
                    5c:54:b7:40:77:a9:0c:42:27:fb:3f:8b:91:00:c5:
                    60:1e:8b:9c:83:ef:9b:0c:3c:0a:85:b7:77:85:3b:
                    e1:5c:9f:7b:b3:5d:bc:16:6d:8d:d4:7a:34:0d:c7:
                    08:2f:ed:c0:47:dc:e8:3c:6d:b3:20:33:5d:cd:ed:
                    a4:34:b1:cc:92:22:96:53:97:21:4e:0e:88:03:7f:
                    51:fc:00:58:52:71:00:0b:c0:7b:42:89:3b:4d:d3:
                    45:2a:1d:ce:1e:e6:3d:69:5c:da:dc:81:c7:e7:e2:
                    11:39:75:6b:ee:47:35:a0:d9:0c:1e:ed:30:f3:a1:
                    a5:a7:95:a2:63:e5:3c:4b:e5:13:94:2c:10:58:5e:
                    90:d4:74:64:b8:ec:ca:f7:c0:0b:de:b1:b9:fb:c5:
                    48:7d:0e:89:af:4e:08:b9:6d:3e:aa:2a:45:f0:a2:
                    ee:9d:11:d9:e3:d4:4d:d6:33:99:c8:90:9c:5a:db:
                    61:b7:09:61:d2:15:a0:5b:ba:1a:61:6b:b0:b7:07:
                    c9:23:10:b0:ba:81:2f:02:82:73:4e:12:ee:83:17:
                    1b:1e:da:d7:71:33:1c:ff:bb:5c:d8:10:2f:0c:36:
                    b3:4d:14:6c:b9:2b:89:1f:36:6b:e4:83:4c:5c:2f:
                    d2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:43:60:9E:0E:23:2A:BF:92:62:CB:41:43:53:B9:1B:3F:DD:1A:E2
            X509v3 Authority Key Identifier:
                keyid:27:69:A4:FA:92:29:7D:CB:1D:F8:96:DA:E6:37:39:96:FD:31:80:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/A6DB1A549BB511EEAAE01C70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:11a0:60::/44

    Signature Algorithm: sha256WithRSAEncryption
         5c:ae:8e:2f:c1:3c:52:11:d3:c2:5e:d2:29:c3:cc:57:de:54:
         95:d6:5c:5e:de:f9:51:84:a5:8d:e4:16:3d:01:51:ca:7a:bc:
         5a:07:46:6f:81:cd:22:99:72:c5:b4:b4:35:2d:a1:13:e4:d8:
         7f:b9:70:36:31:7b:1c:97:d8:dd:b5:1d:fb:79:f9:64:7d:1f:
         3b:eb:34:98:3b:71:44:87:f0:87:cc:d9:00:ca:1f:88:93:85:
         4b:71:4d:5e:fd:cd:5c:3a:bc:78:5c:58:d2:76:cf:56:38:92:
         8b:0c:39:51:1e:27:2b:c6:c1:96:18:42:34:36:46:6a:3d:ba:
         b5:2a:21:34:2e:28:61:70:4b:eb:b3:91:cc:91:94:dd:5e:f8:
         e6:4f:ec:4c:77:6b:58:96:0f:09:73:90:72:53:8e:14:40:39:
         53:1e:05:c0:ad:26:42:a2:fd:09:3d:bc:52:47:28:28:e4:9a:
         26:79:c0:5a:d1:25:b2:03:c5:80:df:7b:2a:4d:c2:8d:7d:86:
         71:be:a8:a4:db:57:16:d8:30:91:75:0e:15:ff:c3:29:52:ff:
         8c:f0:6e:2e:b5:3a:01:8b:83:f9:5f:75:2a:f2:f3:93:0a:87:
         13:28:92:2d:6c:44:6d:e9:e2:00:b3:f6:22:d7:90:6b:3e:9e:
         8e:52:79:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:27:30 2025 by rpki-client