This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/5A034FE6BD9011EF8EBE9D64C4F9AE02.roa
File:                     5A034FE6BD9011EF8EBE9D64C4F9AE02.roa (raw, json)
Hash identifier:          XMlKN3xoWR211awSFj7o4wXNUVPU6g4tGLZ46VoBBkc=
Subject key identifier:   16:D9:2B:8B:56:B1:CD:12:4F:E1:79:68:59:1D:1B:49:C7:1F:FA:29
Certificate issuer:       /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Certificate serial:       08E4
Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/5A034FE6BD9011EF8EBE9D64C4F9AE02.roa
Signing time:             Tue 02 Dec 2025 21:25:41 +0000
ROA not before:           Tue 02 Dec 2025 21:25:41 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     45411
IP address blocks:        58.87.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl
                          rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2276 (0x8e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
        Validity
            Not Before: Dec  2 21:25:41 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692f5955-6507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:66:1d:91:d8:ff:8e:bb:65:e4:3c:1c:b3:
                    62:1a:5e:3b:2a:85:8d:13:0a:80:b4:e1:e2:8f:c1:
                    b2:f1:0a:98:95:a5:d7:de:d6:62:d8:a5:7c:ad:26:
                    1b:38:7a:45:b9:bb:db:73:85:00:fb:6e:97:ac:16:
                    b6:18:68:e3:93:a7:37:70:e7:4d:9f:1c:71:31:d9:
                    0c:21:42:0c:b7:7d:08:2d:1a:43:2b:46:9b:2c:5a:
                    42:88:6a:9d:f5:6c:79:a8:bd:fc:78:07:d1:53:aa:
                    8a:d7:9a:4c:4e:25:3e:9b:e5:7d:43:2b:2c:7e:62:
                    91:ed:67:66:a4:88:2f:82:37:c6:3c:98:14:38:50:
                    dd:d5:57:43:2a:4b:cf:dd:ec:11:4c:d7:43:97:b5:
                    71:6e:92:a0:ec:33:41:68:78:86:de:9a:66:b9:e2:
                    52:75:7a:58:a8:5d:3b:de:e4:03:d2:b3:6f:d7:a2:
                    6e:b7:df:11:7a:22:47:07:77:83:3e:2b:22:89:3f:
                    34:13:5a:67:15:9f:01:03:4a:f0:b8:33:48:61:90:
                    4d:51:80:02:08:3a:ec:c0:d9:f7:a5:10:88:39:10:
                    d0:c6:64:1d:ea:e2:ca:e7:ef:35:19:24:64:0b:f5:
                    01:13:8f:a8:19:98:a8:ba:01:6b:7d:b6:64:05:0d:
                    8b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D9:2B:8B:56:B1:CD:12:4F:E1:79:68:59:1D:1B:49:C7:1F:FA:29
            X509v3 Authority Key Identifier:
                keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/5A034FE6BD9011EF8EBE9D64C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.87.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:5d:29:a9:68:8d:b6:aa:44:ce:84:13:30:80:9f:1b:5d:60:
         49:5b:19:6e:3b:06:64:20:9b:66:f3:de:65:09:e9:a7:86:3d:
         6e:00:42:e7:30:29:2a:fb:e6:64:dd:52:84:5c:e7:11:ca:81:
         40:4c:98:a9:74:bc:99:3a:26:4f:20:e6:89:31:89:bd:35:47:
         08:e2:1b:14:25:52:e6:71:63:03:18:b9:de:21:05:ae:c9:35:
         4d:f9:dc:86:7f:96:8a:e0:fa:cf:ce:1b:70:e6:a7:2d:95:f0:
         fb:66:5c:f8:21:b2:90:b3:42:6d:dd:e1:12:69:38:1c:80:8b:
         d4:f9:17:ac:a7:60:0f:0f:2b:dd:ac:26:50:59:e2:7a:c5:e9:
         79:ce:4a:4d:a9:0d:d5:57:90:1b:f9:0c:03:39:9e:b2:27:f3:
         e2:20:00:d0:c0:ec:df:e6:f7:d7:e3:81:e9:2b:6f:9c:6a:16:
         ce:bf:90:a3:32:de:95:54:a9:21:fe:8e:b9:e0:6a:9d:50:0b:
         4a:f7:e2:2f:57:84:2c:71:9e:02:30:d3:18:c2:e0:cb:ef:c2:
         7c:9b:c4:72:94:db:dc:7c:33:7d:58:f3:de:9e:ad:6f:58:21:
         a4:e0:f4:2b:40:0f:9c:8b:ff:0c:42:d8:86:90:56:32:6c:12:
         07:46:18:d0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy
NDE3ODMxNzkwHhcNMjUxMjAyMjEyNTQxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTJmNTk1NS02NTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwpBmHZHY/467ZeQ8HLNiGl47KoWNEwqAtOHij8Gy8QqYlaXX3tZi2KV8rSYb
OHpFubvbc4UA+26XrBa2GGjjk6c3cOdNnxxxMdkMIUIMt30ILRpDK0abLFpCiGqd
9Wx5qL38eAfRU6qK15pMTiU+m+V9QyssfmKR7WdmpIgvgjfGPJgUOFDd1VdDKkvP
3ewRTNdDl7VxbpKg7DNBaHiG3ppmueJSdXpYqF073uQD0rNv16Jut98ReiJHB3eD
PisiiT80E1pnFZ8BA0rwuDNIYZBNUYACCDrswNn3pRCIORDQxmQd6uLK5+81GSRk
C/UBE4+oGZiougFrfbZkBQ2L3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFBbZK4tW
sc0ST+F5aFkdG0nHH/opMB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1
RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN
WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REI0RkUvQ0Y0QTEwRUE4NUUxMTFFQkFGQjUxRTg0QzRGOUFFMDIvNUEwMzRGRTZC
RDkwMTFFRjhFQkU5RDY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAE6VwQwDQYJKoZIhvcNAQELBQADggEBAAJdKalojbaqRM6E
EzCAnxtdYElbGW47BmQgm2bz3mUJ6aeGPW4AQucwKSr75mTdUoRc5xHKgUBMmKl0
vJk6Jk8g5okxib01RwjiGxQlUuZxYwMYud4hBa7JNU353IZ/lorg+s/OG3Dmpy2V
8PtmXPghspCzQm3d4RJpOByAi9T5F6ynYA8PK92sJlBZ4nrF6XnOSk2pDdVXkBv5
DAM5nrIn8+IgANDA7N/m99fjgekrb5xqFs6/kKMy3pVUqSH+jrngap1QC0r34i9X
hCxxngIw0xjC4MvvwnybxHKU29x8M31Y896erW9YIaTg9CtAD5yL/wxC2IaQVjJs
EgdGGNA=
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:44:42 2025 by rpki-client