This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/EEECC55A8C3611EFA07E612DC4F9AE02.roa
File:                     EEECC55A8C3611EFA07E612DC4F9AE02.roa (raw, json)
Hash identifier:          s4PkEypB4sgHmma3j3J6zrOwEq80iK017MOWUv25Ljg=
Subject key identifier:   01:B7:6D:66:99:9E:1B:5C:FF:2D:14:44:6B:5D:55:85:55:D5:FA:CD
Certificate issuer:       /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Certificate serial:       04D0
Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/EEECC55A8C3611EFA07E612DC4F9AE02.roa
Signing time:             Tue 30 Dec 2025 23:19:55 +0000
ROA not before:           Tue 30 Dec 2025 23:19:55 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     214785
IP address blocks:        204.52.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl
                          rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1232 (0x4d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
        Validity
            Not Before: Dec 30 23:19:55 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69545e1b-5d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:42:16:60:d5:27:43:23:21:95:c8:2a:62:
                    59:d0:5c:ba:b2:25:7c:12:ab:78:e6:66:98:6f:84:
                    50:4e:26:0f:4a:71:cf:c2:0c:90:fb:e6:f1:6b:90:
                    e2:f5:e5:a9:db:4e:95:4d:af:17:09:e5:9c:3f:4c:
                    50:6b:3b:86:43:3b:1d:f2:19:5d:a9:1f:77:25:a7:
                    89:7a:cc:78:df:8b:23:cd:69:d0:23:43:00:0c:41:
                    8b:41:5d:40:05:3e:54:ef:b2:03:3c:b6:36:79:f4:
                    82:1e:de:d5:7f:c8:7e:63:62:5b:81:95:80:1e:72:
                    26:92:cb:bd:34:eb:ae:b0:3c:55:c2:3a:18:7a:00:
                    d6:e3:c3:ad:f7:91:c4:10:35:89:f6:2a:9a:83:70:
                    bc:f5:e0:c4:cf:79:19:9c:66:b6:dd:20:a0:3f:3d:
                    0c:8a:a7:cf:91:5a:7f:ee:af:c9:8f:49:d9:55:cd:
                    54:53:9c:80:6f:58:4c:a7:aa:96:fa:9d:26:a8:2c:
                    1c:f6:b8:fe:f2:90:cb:dd:16:ce:87:a0:ad:0e:b5:
                    5c:de:11:85:1c:20:31:a2:8c:9e:8f:0d:ae:d4:99:
                    0b:7c:74:8f:a1:34:03:63:8a:c2:78:50:44:70:34:
                    61:dc:10:45:47:4d:55:e4:ff:26:89:12:54:9c:69:
                    b7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B7:6D:66:99:9E:1B:5C:FF:2D:14:44:6B:5D:55:85:55:D5:FA:CD
            X509v3 Authority Key Identifier:
                keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/EEECC55A8C3611EFA07E612DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.52.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:f4:5f:22:f9:dd:d9:19:2e:31:a1:f3:d7:58:46:22:1b:b1:
         7f:fd:60:5d:30:ef:d3:97:7d:c1:fe:f3:1c:a5:2a:3b:1d:85:
         2a:4b:c4:96:6e:84:8c:72:d3:a0:64:6f:a8:04:51:33:cc:1c:
         d0:bd:c6:94:24:ef:53:db:0d:15:1a:e3:d3:8e:31:06:fa:c1:
         24:f5:44:85:ff:36:6a:dc:d3:9c:8b:66:c0:ee:13:de:13:f4:
         9f:41:64:56:53:7e:53:db:6e:d8:90:58:2c:89:ed:bd:db:4d:
         87:ed:ed:5a:ad:7a:36:a6:dd:ff:27:6d:73:2a:0f:2e:1f:af:
         f2:dd:2f:f2:7c:36:89:d8:9e:b5:c3:3c:73:f0:17:c7:04:18:
         ef:41:b7:91:55:4a:91:f4:e5:53:7d:58:29:db:81:ac:aa:6d:
         b6:ae:97:56:7f:79:25:55:65:d3:3b:18:be:89:51:8b:e7:81:
         97:be:8d:d5:2d:78:5f:2e:f9:67:77:49:61:53:00:88:1a:9f:
         0a:e4:8d:74:3f:82:31:82:7d:2d:91:2e:78:cc:02:84:29:11:
         ff:57:25:cb:ed:c1:20:a3:48:b1:7f:7d:43:c7:e9:19:5d:28:
         2e:e9:c0:c9:f5:27:f7:4e:47:38:91:0e:e6:9a:db:1e:57:a3:
         a0:6a:83:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:03:42 2026 by rpki-client