This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4BF67550A4C911E782854F50C4F9AE02.roa
File:                     4BF67550A4C911E782854F50C4F9AE02.roa (raw, json)
Hash identifier:          9sCJlpZ+MZm9Y8fMj5geVr74KyJJassWJH9YXhrkVAQ=
Subject key identifier:   95:0E:AA:05:7F:1E:0F:1B:29:7E:BA:14:EB:B3:39:8F:2B:30:C4:CB
Certificate issuer:       /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial:       365F
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4BF67550A4C911E782854F50C4F9AE02.roa
Signing time:             Tue 02 Dec 2025 14:41:45 +0000
ROA not before:           Tue 02 Dec 2025 14:41:45 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     135345
IP address blocks:        202.69.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
                          rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:26:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13919 (0x365f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
        Validity
            Not Before: Dec  2 14:41:45 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692efaa9-4590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:83:4e:cd:05:7e:80:db:a7:7e:a6:77:56:78:
                    f6:f8:62:e0:0f:b3:35:03:b2:e1:47:27:8f:55:80:
                    36:26:63:a3:8b:f7:8e:21:8f:7a:8f:e1:df:1f:90:
                    e7:2f:cb:83:c4:10:1d:3c:44:f6:5d:e0:1e:69:07:
                    08:51:14:47:e8:70:9e:97:1a:06:f0:cd:b1:85:4f:
                    09:9f:9b:af:67:f7:c5:31:f6:c8:a1:f3:24:bd:30:
                    f1:49:db:d3:d6:6a:45:a8:53:29:95:f1:0e:f5:5b:
                    cc:d1:35:08:74:df:ea:8f:46:06:99:eb:10:c9:dd:
                    1b:ed:c5:51:a7:6e:8b:50:4e:91:43:5e:ac:58:58:
                    ef:2b:87:55:e6:6c:7f:70:2a:8d:79:f5:32:29:f8:
                    eb:83:78:0b:37:43:a2:dd:2a:ba:45:a4:2c:c5:66:
                    17:64:88:a0:bf:a4:57:90:eb:f9:80:99:87:99:a6:
                    9f:a5:a1:3b:6c:ee:fd:de:3a:ca:09:c2:6f:1c:76:
                    a7:a5:81:cc:d5:32:d3:f4:3a:d7:c2:64:8c:78:48:
                    b5:cb:a0:9c:3f:64:11:f1:14:86:b0:f2:1a:24:13:
                    ee:5d:1d:19:de:a9:0d:c0:8e:4e:53:f5:b8:b0:f4:
                    0f:e9:1c:c3:76:e7:f4:c2:82:25:ba:f0:40:74:34:
                    c7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0E:AA:05:7F:1E:0F:1B:29:7E:BA:14:EB:B3:39:8F:2B:30:C4:CB
            X509v3 Authority Key Identifier:
                keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4BF67550A4C911E782854F50C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.69.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:8a:db:a8:8e:6c:66:93:f9:86:99:61:19:34:bc:5f:45:2b:
         e1:d4:af:4a:32:6b:f4:64:d2:35:cf:4f:b1:86:8d:cd:cc:18:
         ff:34:c4:fb:86:24:55:55:05:2d:df:2a:18:68:6d:38:33:a1:
         b8:fb:77:ec:3d:9e:e3:f3:4e:8b:8d:75:c7:33:61:f1:98:cc:
         8f:8e:98:60:74:06:03:e4:1b:53:6d:ba:ca:d2:f7:c6:a5:7f:
         8a:bc:7a:a9:da:7d:6b:80:aa:55:c1:41:76:c1:a5:1b:45:70:
         fa:a7:ed:55:ff:bc:a4:76:48:e3:0d:b8:6f:12:5a:ca:ab:de:
         e9:dc:28:c3:05:65:b2:f9:28:1a:a1:e5:49:6f:cb:8b:bd:04:
         31:cb:64:9c:ce:a5:7f:7c:a8:ad:9d:4b:8f:29:0d:31:09:da:
         41:93:5f:b1:92:0f:6b:d6:ef:a3:85:ce:39:4b:58:01:08:27:
         94:3f:02:28:63:a5:42:8d:be:0b:f0:b4:b1:5d:41:9e:d6:fb:
         37:4a:56:7c:ec:db:4a:22:16:fb:a3:f8:02:80:42:c6:57:c1:
         41:2e:5f:33:5c:3f:e5:b5:11:c2:b2:12:67:f3:a5:51:ff:30:
         12:7f:ba:f5:0b:6d:71:45:2e:24:c9:56:79:22:c3:55:3d:d1:
         2a:94:08:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:12:22 2025 by rpki-client