This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/5FBDA400853011EBA1AF1D76C4F9AE02.roa
File:                     5FBDA400853011EBA1AF1D76C4F9AE02.roa (raw, json)
Hash identifier:          16nCreLGuwz9WSYZ6zUdJvfwB+ueTm2S0psMSGdXxrE=
Subject key identifier:   33:BF:1F:1A:EE:41:AC:7B:3B:B4:E4:96:FE:33:B3:73:A9:94:FD:AB
Certificate issuer:       /CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B
Certificate serial:       06B3
Authority key identifier: D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/5FBDA400853011EBA1AF1D76C4F9AE02.roa
Signing time:             Wed 12 Nov 2025 21:12:49 +0000
ROA not before:           Wed 12 Nov 2025 21:12:49 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     1221
IP address blocks:        202.47.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl
                          rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1715 (0x6b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBF76, serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B
        Validity
            Not Before: Nov 12 21:12:49 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6914f851-fa1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f3:e5:2d:64:ce:07:63:35:3c:19:cc:eb:0b:
                    e0:32:27:11:f5:35:06:3b:55:4f:a4:94:a0:2f:b8:
                    df:58:e1:c7:2d:cd:af:05:da:bc:39:50:1d:eb:52:
                    bd:73:23:dd:2c:74:41:90:e7:12:ea:6d:2e:c5:0f:
                    29:37:d5:45:92:cc:a4:13:ff:16:b4:15:10:39:f6:
                    c2:80:47:3d:64:ee:d0:ce:52:40:4f:73:9e:2f:69:
                    77:c4:6f:13:7d:53:b0:cb:b9:4f:a1:b8:3a:63:f5:
                    c0:56:5f:d4:2f:7e:1f:60:b5:e4:59:10:11:09:13:
                    12:3f:59:cb:93:60:f3:03:0d:bb:50:14:e3:de:67:
                    69:eb:be:7a:01:71:3f:65:b5:42:0d:58:2c:66:44:
                    eb:9c:df:8d:9c:05:ad:11:06:28:8e:7e:3b:d3:a5:
                    e7:39:d9:43:a1:18:0b:fc:5b:3c:10:44:21:15:d9:
                    c8:79:5d:b0:64:21:8e:94:bd:fd:3f:a8:d2:70:d6:
                    ae:ee:55:67:11:b8:c6:7b:3d:78:11:94:60:70:22:
                    4c:ee:b5:96:99:11:63:18:e1:6e:5d:68:9f:72:67:
                    e6:51:df:46:07:6c:cb:76:c5:be:29:b0:52:f3:61:
                    24:75:f2:a4:e0:25:03:67:96:14:fe:27:55:55:e5:
                    c2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BF:1F:1A:EE:41:AC:7B:3B:B4:E4:96:FE:33:B3:73:A9:94:FD:AB
            X509v3 Authority Key Identifier:
                keyid:D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/5FBDA400853011EBA1AF1D76C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:ad:3f:ea:d1:7e:8f:4b:e0:e7:42:8d:a7:84:a4:ec:56:e3:
         02:1b:bd:9b:f5:03:6d:dd:ea:cf:f4:3f:16:7f:96:6e:85:1e:
         b7:e5:a8:ef:e9:d8:da:1c:42:0c:db:dd:73:f9:1c:77:66:e7:
         89:26:e6:f5:03:4d:1f:a3:78:0a:d6:7a:5d:3e:30:26:bc:41:
         b5:87:cf:7e:12:79:e9:46:5b:8a:40:b1:81:8f:16:bc:63:74:
         22:dd:c1:cd:5b:00:b3:c8:c8:ee:34:00:75:b4:d6:a2:a0:dd:
         a6:7c:60:d7:67:b3:d4:2d:81:c2:71:fe:ea:26:29:5d:6e:d3:
         45:12:3f:d6:aa:dc:63:e4:0a:d7:81:a9:4e:31:49:46:3a:c3:
         8f:34:53:64:64:01:2a:2f:60:5f:47:1f:8b:d4:af:fd:24:43:
         90:ed:04:bb:8b:65:6e:1c:1c:64:f5:83:9f:aa:0b:35:5e:07:
         ad:ff:a9:c0:0c:20:b8:b3:2a:cf:0f:9b:d2:57:ec:1b:13:bf:
         84:06:86:a0:2e:12:ea:c8:ae:03:04:a8:46:ca:02:e0:6f:13:
         ac:bb:4c:74:bb:5f:8a:94:67:bf:e5:fd:4b:71:93:f2:2f:91:
         da:42:ea:18:bc:5b:5e:e4:f5:27:40:4e:89:98:06:c8:9d:28:
         5f:04:af:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:29:16 2025 by rpki-client