This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/0A6CBB6E54CD11F0A3E48084C4F9AE02.roa
File:                     0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (raw, json)
Hash identifier:          J4JwOCVNeHLcNgzC2WuOU4UTLpubXvEJF1TWPMAPsrE=
Subject key identifier:   F5:BA:4D:0C:00:9A:89:A9:06:0D:37:AE:AF:90:25:5E:9E:5B:E0:EC
Certificate issuer:       /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial:       E0
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/0A6CBB6E54CD11F0A3E48084C4F9AE02.roa
Signing time:             Fri 05 Dec 2025 03:44:27 +0000
ROA not before:           Fri 05 Dec 2025 03:44:27 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139904
IP address blocks:        160.191.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
                          rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 03:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
        Validity
            Not Before: Dec  5 03:44:27 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6932551b-417a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:f7:1c:67:c7:a9:48:ea:c7:74:d8:e4:22:
                    ad:ff:54:ec:ec:be:13:8a:f2:b4:ec:92:37:44:e8:
                    38:df:28:ae:67:b6:eb:72:1a:f4:0d:f7:38:84:ba:
                    be:43:8c:cf:38:56:cb:c9:7c:b8:3c:45:b2:92:eb:
                    da:c0:30:dd:3e:f7:7e:4a:ae:ee:29:10:f6:03:25:
                    17:67:aa:de:96:f1:b1:05:e3:ed:02:79:46:87:60:
                    d6:5f:8d:21:42:34:82:83:75:25:d0:3e:85:90:90:
                    e7:e8:ff:e3:75:f5:16:b7:92:a2:25:18:8d:49:a2:
                    35:38:97:7f:82:67:e7:c2:28:4c:05:52:b2:83:93:
                    ea:06:45:0d:30:8b:a0:51:17:8c:87:c6:df:7a:13:
                    b6:8a:55:61:50:fe:1e:f2:b3:4c:87:ea:06:41:42:
                    66:22:63:54:c1:29:9d:5f:37:25:f7:d2:e8:9e:3a:
                    23:c1:cd:74:a7:d0:fd:9e:4c:85:8b:3e:36:cb:2d:
                    db:a5:12:04:df:46:0d:79:1d:9f:5e:73:60:c6:ce:
                    ef:44:c9:de:a3:4e:53:f2:3f:de:24:56:71:f5:70:
                    bb:40:86:68:a3:40:21:e0:41:fc:bb:43:87:8d:93:
                    69:fd:1a:d7:83:cb:a4:de:0a:16:09:cd:e7:af:d2:
                    a4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BA:4D:0C:00:9A:89:A9:06:0D:37:AE:AF:90:25:5E:9E:5B:E0:EC
            X509v3 Authority Key Identifier:
                keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/0A6CBB6E54CD11F0A3E48084C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:2d:7a:57:83:bb:49:e6:bb:90:0b:44:5b:95:65:1e:a8:b6:
         9f:3e:a7:cb:8f:64:21:48:9b:d5:c3:01:b4:16:74:8a:95:2d:
         21:b6:98:45:97:c5:55:e2:01:9c:02:7f:e9:5b:f4:cc:7b:95:
         25:dc:3f:aa:88:c4:a9:a4:58:a1:fa:38:bd:33:4e:1c:58:1e:
         2d:8c:99:9d:3f:f7:a5:df:3c:e7:09:2d:4f:c1:83:65:ea:e2:
         b4:27:a2:16:14:a3:3a:82:a7:b8:e1:c7:65:f6:fb:e4:cc:b6:
         30:03:bf:a2:1f:5a:01:d5:32:59:85:1a:0f:5f:a7:3e:0b:9e:
         4b:f8:33:20:60:21:1c:a9:f9:3b:d2:c5:41:b7:cf:18:6c:0f:
         12:00:32:1e:ad:9d:0f:99:6e:ec:cd:ca:5f:4d:a7:af:6b:19:
         20:e8:3f:e6:5f:64:5c:e9:83:54:dd:1a:20:46:ee:97:4c:b0:
         c0:19:25:0a:a3:25:50:39:70:f5:96:f2:f8:00:42:77:83:e3:
         85:ad:d4:13:66:a1:0d:03:e1:23:f3:ba:da:46:d0:a2:d7:5f:
         c3:4b:ab:a2:f2:be:da:0d:fb:d7:56:71:09:f1:7a:54:99:52:
         c6:0a:4f:d2:00:68:4f:08:a7:8c:7b:96:8a:84:36:ae:94:e1:
         a7:6f:b7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:14:55 2025 by rpki-client