This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/7B938024B0CD11E58B55FC73C4F9AE02.roa
File:                     7B938024B0CD11E58B55FC73C4F9AE02.roa (raw, json)
Hash identifier:          1K5D/YGkb4vaB5fYueEaz915gxnQJAISZWApLFWpf04=
Subject key identifier:   C5:D3:DF:93:4A:2F:E5:87:C2:26:A1:8B:C6:35:7E:A3:EA:C2:09:27
Certificate issuer:       /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial:       3662
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/7B938024B0CD11E58B55FC73C4F9AE02.roa
Signing time:             Tue 02 Dec 2025 14:41:47 +0000
ROA not before:           Tue 02 Dec 2025 14:41:47 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     18188
IP address blocks:        121.58.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
                          rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:26:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13922 (0x3662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
        Validity
            Not Before: Dec  2 14:41:47 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692efaab-e8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:cc:04:26:6e:13:24:db:40:d5:8a:8e:df:
                    d8:f1:21:73:f0:1b:c7:b8:8d:ae:ec:f2:8a:df:52:
                    b8:9b:f3:04:1e:60:97:e2:d2:71:84:a6:4e:d2:53:
                    ea:69:0b:b5:44:3d:58:e8:03:bf:13:1a:ff:f3:57:
                    b1:56:80:b1:4f:9f:5a:81:55:48:6e:01:3e:89:51:
                    08:34:a6:eb:5f:0a:fb:f8:b1:b0:72:a2:46:7c:7e:
                    4d:c6:54:53:39:20:8a:46:6e:ee:30:cb:ed:fb:88:
                    cb:26:04:2d:99:46:e6:68:a1:f6:14:6e:1a:27:36:
                    71:88:12:af:2c:86:1d:7a:77:fb:de:6c:aa:f4:1b:
                    76:55:fb:db:a4:0d:9e:7c:75:d1:61:e5:7c:cc:26:
                    d3:a6:8d:f9:2b:49:99:e9:3e:8d:a4:2f:25:88:8c:
                    61:9e:72:8f:59:86:74:d2:7a:0c:00:82:d1:c6:8a:
                    0d:d8:4c:a0:6f:31:2f:e8:94:78:ed:d7:16:b6:b3:
                    98:f9:70:62:c6:0e:62:a3:c8:7a:3a:e8:91:a7:8b:
                    68:87:00:8c:57:8f:ab:0b:fd:1a:9f:67:dd:b1:f0:
                    f0:21:bb:87:2c:d3:71:09:e5:12:38:cc:58:00:f9:
                    9d:58:54:d1:4f:e9:c5:18:22:8f:ea:7b:54:e5:e8:
                    56:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D3:DF:93:4A:2F:E5:87:C2:26:A1:8B:C6:35:7E:A3:EA:C2:09:27
            X509v3 Authority Key Identifier:
                keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/7B938024B0CD11E58B55FC73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.58.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:16:86:2c:6c:f3:8d:04:36:87:d7:29:91:cb:a1:8a:ce:c6:
         dc:93:48:fe:81:0a:9b:f5:b0:2b:71:17:84:c2:b7:04:7a:08:
         a2:e1:1f:e4:da:4e:7f:a8:57:db:7b:1f:67:47:d6:ee:d0:f6:
         5b:7a:27:4b:05:75:64:a0:2b:64:a9:a3:65:40:93:50:67:db:
         54:99:3f:80:41:17:ad:1f:cc:be:92:5e:ef:51:cd:b2:82:91:
         07:f6:90:2b:1d:b7:56:72:1b:9c:30:59:c6:84:da:b3:5a:15:
         79:b9:46:9d:49:04:3d:57:1d:0d:0f:ed:87:7a:61:46:e3:70:
         37:ee:0f:3d:8b:9a:b1:ed:6d:6e:fa:a8:70:ad:2f:14:7e:b1:
         3c:cb:27:af:86:12:0e:06:f9:dc:28:78:93:ff:86:48:c1:43:
         83:62:61:c1:7f:39:12:ad:27:ba:ce:fe:8e:6f:09:d0:4d:d7:
         79:11:42:c7:45:e3:96:67:23:29:ea:c7:49:3b:4d:a6:af:c8:
         60:c7:08:73:ba:64:e9:97:ae:b2:b2:48:6c:b3:f6:05:9f:40:
         1b:ee:f7:79:8d:d8:00:78:d0:4a:6a:96:4c:de:e7:6a:94:0b:
         21:6b:c1:34:f3:d8:09:c4:74:52:63:13:03:7d:f5:20:2e:af:
         54:0e:b4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:08:28 2025 by rpki-client