This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/1F63E4347ABC11EF9E53E753C4F9AE02.roa
File:                     1F63E4347ABC11EF9E53E753C4F9AE02.roa (raw, json)
Hash identifier:          bXsYiFs/1LAAvnPFWc2oF5LhYtHyhSVuRh2eDok+L9o=
Subject key identifier:   FC:94:73:60:21:3A:D9:F5:E7:DB:19:65:51:E0:D6:F0:22:2B:F1:C4
Certificate issuer:       /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
Certificate serial:       D8
Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/1F63E4347ABC11EF9E53E753C4F9AE02.roa
Signing time:             Tue 11 Nov 2025 03:51:06 +0000
ROA not before:           Tue 11 Nov 2025 03:51:06 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     1221
IP address blocks:        203.62.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl
                          rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
        Validity
            Not Before: Nov 11 03:51:06 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6912b2aa-b75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:97:97:1f:0e:33:20:e5:c8:84:c7:f1:3e:45:
                    bd:8d:33:2c:74:25:44:86:9b:f8:0a:bf:ee:ab:2d:
                    68:ac:66:d5:9f:9e:1f:c8:e1:72:c6:79:b0:73:0c:
                    73:07:c1:d0:c2:26:8e:b0:92:5c:94:a9:80:e3:f8:
                    97:be:c8:12:4e:58:c6:a5:cd:01:63:e4:69:c7:f1:
                    e8:18:3a:c3:ec:a6:b4:9d:a6:83:a0:90:c3:a3:c5:
                    8d:54:c4:2a:05:f1:38:4b:1f:8b:87:df:03:b4:87:
                    57:1b:a6:b8:75:17:de:64:dd:be:95:98:07:7d:63:
                    68:4e:c6:5d:bd:5f:7b:b6:19:d1:2f:e3:0b:24:47:
                    20:c2:c2:cd:8c:f2:86:e4:7e:37:77:5c:c2:0e:6e:
                    a9:ee:dc:bb:0a:f4:8f:55:ac:eb:a7:14:13:14:e7:
                    90:9b:a1:fc:fb:bc:de:51:12:19:3b:7b:52:e5:75:
                    a1:33:bc:da:6f:77:6d:60:de:7a:87:27:35:a1:7f:
                    b7:6c:3e:66:0a:18:d3:85:22:ac:48:9a:cf:ec:a5:
                    b1:ad:8c:15:a5:26:f7:2d:9e:72:7e:83:1f:5c:5e:
                    1a:f7:09:f1:c6:ec:a4:c5:45:40:b0:3e:46:8b:1f:
                    e3:86:c6:0d:b5:fb:4d:66:26:96:b1:f5:7c:8f:32:
                    e5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:94:73:60:21:3A:D9:F5:E7:DB:19:65:51:E0:D6:F0:22:2B:F1:C4
            X509v3 Authority Key Identifier:
                keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/1F63E4347ABC11EF9E53E753C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.62.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:38:d2:02:0a:40:2b:52:51:69:de:25:76:13:ac:21:0c:43:
         39:64:5d:0f:81:61:8b:13:7e:45:84:e6:2f:4b:76:2a:eb:91:
         d8:6b:4b:ef:43:6c:7e:84:08:58:6b:b9:fe:f9:9e:e3:57:be:
         08:ae:ed:7c:b8:f7:a9:4a:d6:66:f6:8a:ad:c2:a0:d0:1f:c4:
         00:88:0d:78:c5:72:21:fd:17:24:2a:91:9d:e8:bf:97:02:1a:
         cd:5f:ca:c5:3e:b0:68:61:7d:5c:5d:0a:c3:cf:76:d6:ea:4a:
         74:a7:87:fd:d8:bd:b6:30:a2:9a:7c:8b:84:fd:f3:ad:7d:e2:
         49:09:47:f7:f3:60:87:b4:e0:02:3a:12:77:28:3d:36:f7:d1:
         9d:a4:4c:b7:fa:ae:d1:22:c8:19:b3:14:e2:f6:e8:33:3d:07:
         33:28:20:b8:fc:ae:f6:98:61:39:8b:0f:c7:99:2b:a2:f7:8f:
         f7:41:bb:f2:40:ad:9e:49:77:cb:94:29:54:af:ae:2f:33:ba:
         09:d8:b2:7f:a8:5b:99:99:af:49:ba:37:c6:65:45:45:61:ac:
         09:17:53:b9:e5:26:53:0d:b7:44:5b:af:8a:7d:48:76:74:00:
         ad:c6:d7:d9:19:57:60:db:ad:41:b2:45:56:6f:03:6b:97:04:
         0d:c5:8e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:54:13 2025 by rpki-client