This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F3F10BE8767711F0B3CA7E1CC4F9AE02.roa
File:                     F3F10BE8767711F0B3CA7E1CC4F9AE02.roa (raw, json)
Hash identifier:          gvtexKAsgZg9Fa/idUiZD2Vr3NuvBIofJquJM2A5la4=
Subject key identifier:   C9:C6:E2:66:3C:F4:71:3E:69:3F:03:E6:05:74:18:29:C7:BF:00:6A
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2A5F
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F3F10BE8767711F0B3CA7E1CC4F9AE02.roa
Signing time:             Wed 12 Nov 2025 10:29:53 +0000
ROA not before:           Wed 12 Nov 2025 10:29:53 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     7029
IP address blocks:        43.254.12.0/22 maxlen: 24
                          115.167.68.0/22 maxlen: 22
                          115.167.108.0/22 maxlen: 24
                          115.167.126.0/24 maxlen: 24
                          115.167.127.0/24 maxlen: 24
                          175.110.68.0/22 maxlen: 24
                          175.110.76.0/22 maxlen: 22
                          175.110.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10847 (0x2a5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Nov 12 10:29:53 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=691461a1-739a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0f:85:d7:e7:cb:71:1c:14:11:2d:2c:97:51:
                    e7:39:43:8c:fa:fa:82:2a:9d:c9:38:92:17:19:cf:
                    3e:b9:01:c0:f3:79:fd:bd:cc:52:c8:2e:61:6c:59:
                    fb:4c:7c:5c:03:4a:a4:aa:51:c4:99:ea:b4:66:cc:
                    e9:21:34:13:3c:2e:27:6a:3c:0e:fe:8d:3b:de:2a:
                    c5:84:8b:c2:1d:7a:51:7b:bc:95:32:70:c5:30:28:
                    cf:eb:af:59:08:de:58:b4:18:3c:bb:f2:07:14:09:
                    83:94:2a:07:7c:48:e8:8d:05:93:7b:8e:c3:f6:15:
                    61:7f:be:3d:86:c3:d5:1a:64:5e:cf:cb:21:ad:8d:
                    4f:27:0d:ae:0c:89:7b:3d:7c:67:1d:7d:da:34:43:
                    09:92:a4:33:38:f5:41:c5:40:a8:a9:6c:ea:c4:d4:
                    8b:ed:29:6f:34:8e:c5:38:9c:67:83:bb:86:eb:ef:
                    1b:71:90:f4:c8:7f:ea:92:d8:fe:dc:df:39:8e:79:
                    51:23:95:07:70:d2:53:f6:e0:54:40:77:d8:08:ea:
                    76:2f:c1:0a:d9:b9:bc:92:35:6a:11:e2:ca:0f:a4:
                    e1:25:0d:ba:4f:5f:88:7e:b0:83:10:89:bc:e3:20:
                    d4:15:0f:4a:cf:77:e6:b9:86:5f:64:c1:07:8c:33:
                    f1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C6:E2:66:3C:F4:71:3E:69:3F:03:E6:05:74:18:29:C7:BF:00:6A
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F3F10BE8767711F0B3CA7E1CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.12.0/22
                  115.167.68.0/22
                  115.167.108.0/22
                  115.167.126.0/23
                  175.110.68.0/22
                  175.110.76.0/22
                  175.110.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:ec:52:27:bf:dc:3b:21:5a:4a:4a:82:2a:4a:cc:92:e0:c3:
         ae:7d:d9:fc:09:d2:fd:41:a1:12:c6:98:79:04:fb:6e:eb:bc:
         04:a0:f6:9a:15:f9:f0:a3:c6:21:66:bb:e9:d7:9c:0f:19:a4:
         16:1c:90:d0:89:4b:0f:3a:6a:42:54:37:c3:7e:92:4d:5f:e6:
         87:f8:84:12:ff:a9:b4:26:ac:4d:b8:8f:fb:79:36:a4:17:41:
         9c:33:12:bf:5c:b1:34:3f:2d:45:dd:38:23:0a:44:b1:bb:dc:
         88:c4:11:ef:c6:aa:20:ab:ed:0f:b6:5e:6d:26:ac:52:a8:88:
         b6:0f:83:93:56:66:42:8b:3a:ee:21:f0:f7:bd:76:67:ba:ce:
         f5:7b:43:15:b9:3a:ff:d3:f0:96:d6:a4:4f:64:95:ff:1f:82:
         09:e5:ad:a7:02:44:75:f8:52:82:bb:9b:4d:8c:f3:ec:ab:7d:
         89:dd:d5:9d:ba:73:34:a2:32:a5:93:7a:9e:9e:3f:de:77:09:
         95:c7:17:c3:68:8c:f2:06:90:cd:6c:1d:cf:a0:2e:d0:49:8d:
         25:6f:31:3d:63:e5:9a:4b:2e:68:2d:29:46:46:53:a7:95:83:
         5c:6c:80:cb:8f:a5:d9:cc:96:9e:66:e6:5e:0a:32:15:b8:5a:
         01:99:77:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:29:18 2025 by rpki-client