This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/94BE094C7D0B11F0BC79D46DC4F9AE02.roa
File:                     94BE094C7D0B11F0BC79D46DC4F9AE02.roa (raw, json)
Hash identifier:          7OyWzhEYc1OoBkrdP9NnWA0PjS6KslbL/GgGS4z8wV0=
Subject key identifier:   ED:CA:D2:3D:2D:D7:87:FB:C6:EA:AD:65:74:21:BB:D0:2F:CA:F6:4E
Certificate issuer:       /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial:       0221
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/94BE094C7D0B11F0BC79D46DC4F9AE02.roa
Signing time:             Mon 03 Nov 2025 03:48:05 +0000
ROA not before:           Mon 03 Nov 2025 03:48:05 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     150805
IP address blocks:        2402:be0:fefc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
                          rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
        Validity
            Not Before: Nov  3 03:48:05 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690825f4-2985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:a9:83:bc:5f:d1:e4:37:ba:b4:84:c2:b7:
                    c8:2e:86:92:52:53:51:7e:9c:17:b2:1c:98:a0:87:
                    7b:7c:9c:a9:36:8e:5e:45:ea:05:63:ff:26:d1:b4:
                    4c:f0:20:7a:da:48:ae:94:75:2a:7e:51:55:88:16:
                    6a:99:31:5a:96:21:0d:34:a9:0a:4a:b7:97:f2:e3:
                    29:55:6d:55:f6:cf:49:c3:b9:e4:bd:1f:8a:91:71:
                    ef:58:b8:5c:c5:14:b0:77:06:ba:8b:12:87:50:ba:
                    80:d7:d5:7a:1e:cd:f7:91:30:25:28:63:7d:b0:50:
                    15:de:6a:2c:6c:20:73:56:30:e5:d0:14:65:7f:70:
                    d7:e3:43:12:df:f9:0b:07:68:bf:99:15:37:c9:aa:
                    db:4d:36:a9:17:91:c3:53:57:a8:83:8f:af:0a:aa:
                    0e:8f:3e:f6:75:74:48:c7:23:a6:2b:3b:09:29:68:
                    9c:1c:fb:c1:3d:d7:63:cc:55:da:37:f8:bc:7d:32:
                    46:d0:59:0f:65:c9:9b:31:68:76:69:24:be:9a:f2:
                    32:49:5e:6f:f3:2a:ce:b2:d6:2e:ec:eb:0e:a6:88:
                    00:a9:b6:ba:a0:87:cc:1c:86:0a:52:a9:91:22:71:
                    ae:5c:4d:96:95:bd:3c:36:0e:77:51:e3:39:00:44:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CA:D2:3D:2D:D7:87:FB:C6:EA:AD:65:74:21:BB:D0:2F:CA:F6:4E
            X509v3 Authority Key Identifier:
                keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/94BE094C7D0B11F0BC79D46DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:be0:fefc::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:1e:a3:ef:d0:98:0e:43:1d:96:49:00:8d:99:63:b4:b8:c3:
         94:bf:6e:9d:11:42:7b:59:21:b4:96:0e:d4:fc:e5:ea:dc:06:
         06:a2:b7:ae:56:5f:10:d7:82:5d:27:e0:4d:6f:17:02:fb:23:
         0a:58:bf:cc:fc:97:c0:54:d0:2e:f5:2f:1e:a3:aa:79:3e:68:
         c7:59:3a:cd:35:51:a8:b6:ef:22:20:75:41:56:54:7b:ec:f0:
         09:a5:1b:3e:71:65:72:bd:34:39:7e:ce:e9:1d:4d:77:08:6f:
         1b:8f:64:69:07:71:fe:83:07:88:bc:13:16:b1:b2:08:f3:60:
         28:34:f6:bb:6a:bc:e7:50:5f:0f:4e:a8:b3:a1:73:30:62:43:
         58:d0:d6:ee:cc:1b:66:d9:b9:c1:b8:fd:24:55:73:41:ce:f9:
         8e:7b:50:7e:da:e2:d4:3f:10:6f:1e:0f:6e:c2:8f:55:c0:bd:
         42:f0:84:98:33:b5:67:58:a2:b6:4c:b7:af:d6:50:d1:da:e8:
         58:d0:e8:d5:22:ca:83:14:13:9a:e2:b7:40:36:44:c9:3a:cd:
         d2:24:af:08:25:f5:c3:32:40:30:51:0c:49:4c:82:b2:2e:4d:
         e6:0a:9e:16:2a:52:4b:2e:25:e9:73:7c:ae:5f:77:b2:dd:db:
         2e:d9:86:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:48:09 2025 by rpki-client