This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/7F4CB00EAAE811EA8412810FC4F9AE02.roa
File:                     7F4CB00EAAE811EA8412810FC4F9AE02.roa (raw, json)
Hash identifier:          PiQ5Nr30+J6cFI8PcO8QaeRngY6br7QeoIsKBt+5WrY=
Subject key identifier:   DC:BA:E1:23:9E:92:C0:02:BF:A9:9B:56:2B:F0:09:58:96:EF:97:D1
Certificate issuer:       /CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7
Certificate serial:       0D27
Authority key identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/7F4CB00EAAE811EA8412810FC4F9AE02.roa
Signing time:             Tue 02 Dec 2025 17:48:21 +0000
ROA not before:           Tue 02 Dec 2025 17:48:21 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     63005
IP address blocks:        27.126.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl
                          rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3367 (0xd27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F91EB, serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7
        Validity
            Not Before: Dec  2 17:48:21 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692f2665-57c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ea:6a:90:35:cc:21:64:12:16:fe:7a:be:ed:
                    6d:0e:fa:90:a6:1d:82:c3:df:df:98:36:2b:b6:92:
                    2d:a6:f8:d2:35:e7:c5:98:00:45:d6:d0:f5:7a:a2:
                    44:b7:1b:d0:95:dd:86:f9:45:d1:ab:e0:d6:b9:4b:
                    7e:89:57:f2:38:13:6b:93:b9:9c:fd:c9:7e:51:11:
                    79:c9:95:d0:07:1c:de:43:6a:8e:22:1b:a8:10:f9:
                    0a:4a:11:a3:ee:39:19:26:7f:48:10:e6:35:f4:a4:
                    96:18:b8:97:29:50:e7:9f:63:08:26:7c:df:d9:7c:
                    39:b3:a3:98:90:08:26:38:b3:11:98:8f:be:3b:1e:
                    7b:2d:8a:0f:2c:8c:e0:ae:d6:e2:06:72:c2:18:97:
                    44:d3:ef:67:02:75:8a:61:7d:f4:7f:37:53:2e:4b:
                    20:bb:4f:43:1b:71:3e:0b:03:ea:8f:a7:fc:68:17:
                    92:c0:3f:8d:25:65:ec:e6:04:2e:22:09:08:c3:22:
                    f3:9f:5a:6f:7b:9c:51:1e:6c:e2:54:bc:26:0d:d2:
                    23:bb:af:03:78:d1:d1:24:90:a6:67:e7:10:3f:88:
                    47:b5:ed:d2:4a:9e:57:a0:d8:75:38:a7:3f:42:d8:
                    f2:d7:89:01:9a:60:fb:f4:80:bc:29:58:ca:55:af:
                    3b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BA:E1:23:9E:92:C0:02:BF:A9:9B:56:2B:F0:09:58:96:EF:97:D1
            X509v3 Authority Key Identifier:
                keyid:9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/7F4CB00EAAE811EA8412810FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.126.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:2b:2a:d0:e8:73:54:12:02:04:10:5f:cc:6c:e9:07:93:9f:
         cc:66:57:da:60:bd:d3:a2:ed:0d:2e:c1:c0:32:0b:62:6b:79:
         bf:a5:01:35:73:b2:a7:bc:7f:e8:4e:a4:d9:13:98:32:b7:9f:
         be:a3:43:d5:9e:70:0d:13:50:42:65:fe:27:99:16:00:78:a2:
         68:0c:8c:e2:fd:89:a2:86:ea:42:15:96:a6:87:f9:43:c8:8e:
         4d:f5:d7:5c:27:64:33:6d:6c:70:34:87:4a:bc:00:d7:b4:8e:
         af:40:38:e9:bc:ae:7c:56:5b:97:43:4c:ee:95:7a:71:84:f0:
         4e:bb:80:0f:ed:98:b1:e4:10:3c:35:7e:13:e0:41:f7:1f:ef:
         6f:4e:71:23:96:d7:57:48:63:ec:47:7d:5c:b2:7e:f8:06:60:
         8f:22:b4:30:64:6c:08:0a:dc:18:07:83:03:de:83:43:23:f5:
         ec:23:61:9e:9f:5b:7f:2d:b2:d1:76:b3:b8:e0:1b:6e:cc:ab:
         7e:63:9f:fd:c6:27:b1:75:58:26:a3:c0:86:e4:0e:ef:7d:d4:
         aa:ca:9a:31:f6:a9:d7:0a:e4:57:98:ee:be:be:99:b9:d5:95:
         78:be:14:db:69:70:a3:b8:99:ac:c1:de:58:4c:58:d7:ae:75:
         7e:4a:a2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:06:02 2025 by rpki-client