This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/94EC9E22BEF311F0A6F14E84C4F9AE02.roa
File:                     94EC9E22BEF311F0A6F14E84C4F9AE02.roa (raw, json)
Hash identifier:          YVtST4vMUYXukdvRwVNc/YgxZwNEf2C/1tkRXtme8vo=
Subject key identifier:   33:11:C1:B4:9F:F0:2A:E3:81:C7:25:08:CB:50:93:65:6F:84:F4:90
Certificate issuer:       /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Certificate serial:       08B8
Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/94EC9E22BEF311F0A6F14E84C4F9AE02.roa
Signing time:             Tue 11 Nov 2025 11:43:03 +0000
ROA not before:           Tue 11 Nov 2025 11:43:03 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     198504
IP address blocks:        116.0.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
                          rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2232 (0x8b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
        Validity
            Not Before: Nov 11 11:43:03 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69132147-fe08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8f:50:51:00:ab:1f:98:9b:bf:ea:35:3c:60:
                    b7:90:21:f5:6c:a8:c1:46:a2:30:c7:05:80:f4:15:
                    35:40:5f:22:f9:e1:55:c5:db:dc:7f:8b:05:9c:1a:
                    2c:81:50:41:de:61:3b:7f:5b:25:29:09:38:f9:18:
                    45:69:12:e3:2e:44:8d:23:9a:7f:26:c6:00:2c:9b:
                    02:b3:7f:7c:79:30:50:13:51:fa:49:9e:62:b5:cd:
                    86:7a:49:59:8b:c7:d0:7b:5f:58:14:e6:11:9c:7b:
                    02:57:8a:4f:10:30:17:f8:ea:fa:07:35:ca:0c:d5:
                    d6:3d:82:88:d7:04:ac:df:09:fd:10:32:e7:08:a5:
                    1f:8c:4d:f8:0a:8b:16:32:a0:07:e4:b5:a0:1c:d2:
                    67:96:3a:06:a7:7a:9a:05:5d:da:7a:4d:e6:98:11:
                    41:f7:4b:1e:e5:82:53:d9:77:88:85:01:d5:c4:a0:
                    fc:d6:b4:34:c2:cc:e6:c5:4a:49:b8:a0:13:34:09:
                    2e:1d:7c:2a:50:cd:68:44:5e:22:a9:ab:87:3f:6a:
                    b0:17:31:46:05:d4:a0:d2:11:2a:55:70:ed:c2:b9:
                    ad:85:96:52:e8:74:cb:41:4c:d3:65:ce:9b:03:b3:
                    0e:fb:48:b2:e3:5a:26:b2:4d:2a:2b:e2:5d:47:7d:
                    7b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:11:C1:B4:9F:F0:2A:E3:81:C7:25:08:CB:50:93:65:6F:84:F4:90
            X509v3 Authority Key Identifier:
                keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/94EC9E22BEF311F0A6F14E84C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.0.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:36:3c:3e:b6:a4:cb:98:13:76:c3:df:4f:4b:22:95:57:09:
         da:62:7e:84:d5:a2:88:87:db:50:0f:e3:ea:fe:eb:aa:9c:d0:
         b7:c9:c1:31:00:42:fe:3a:10:d1:30:c9:a3:9d:e3:9b:ce:7d:
         c7:5c:a0:fa:53:5b:b7:d6:cb:75:2f:e7:5a:fc:b7:93:06:64:
         5c:f7:0e:9a:bb:46:82:de:25:0d:48:a2:d0:5f:4e:e8:5c:27:
         f6:e0:14:f9:15:7e:14:90:eb:02:54:8f:7b:ae:81:7c:51:6b:
         2a:37:2e:15:8c:62:70:97:da:4d:dd:a0:17:1f:95:7f:3b:5b:
         47:09:b3:b6:0d:94:77:68:d1:3f:63:bc:37:1d:64:b9:a0:88:
         c8:76:66:4b:0e:d0:d8:cb:40:1b:12:3a:fa:d8:2f:aa:e5:36:
         ff:3a:a0:3a:2b:2d:23:5a:ef:2b:9e:d9:58:8e:0c:28:e7:87:
         da:19:cb:38:74:ce:bf:62:6b:12:f2:e6:15:31:b4:fd:24:66:
         c7:ff:68:26:2c:a2:14:9c:9b:c0:49:a3:40:f9:cd:3a:19:98:
         8d:ee:f1:6e:f5:49:0c:c9:2b:48:3a:ed:44:72:75:00:45:78:
         e7:19:ef:0c:62:25:4d:3c:60:e5:d1:cb:62:c3:28:74:a8:95:
         46:73:47:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:06:23 2025 by rpki-client