This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/C93C3BD2BF1211F0825A8B67C4F9AE02.roa
File:                     C93C3BD2BF1211F0825A8B67C4F9AE02.roa (raw, json)
Hash identifier:          HtRntKRfaXLAooX4kFwapJHzhkv5FlOJ2XUK109fP9o=
Subject key identifier:   6C:4E:87:33:19:C1:28:D0:61:EB:8F:36:90:84:33:5E:96:2A:6F:F2
Certificate issuer:       /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
Certificate serial:       01D6
Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/C93C3BD2BF1211F0825A8B67C4F9AE02.roa
Signing time:             Sat 13 Dec 2025 03:02:52 +0000
ROA not before:           Sat 13 Dec 2025 03:02:52 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     134146
IP address blocks:        36.50.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl
                          rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:49:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
        Validity
            Not Before: Dec 13 03:02:52 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=693cd75c-bdf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e9:e6:c5:12:04:71:08:44:60:b4:f9:fc:f0:
                    64:2f:7f:96:61:82:0c:52:66:19:8c:54:15:6a:4a:
                    87:a3:03:db:96:5c:41:c6:18:88:93:ec:0d:11:6f:
                    ec:48:0c:b6:d8:b8:62:6c:29:c6:51:a0:40:d2:a6:
                    92:50:cc:10:1c:57:10:67:c0:f4:fa:06:17:51:26:
                    45:ec:69:e3:3a:fe:c1:5e:a7:bc:fd:e0:a1:a5:80:
                    da:e5:c7:12:c3:db:85:d1:e9:da:63:80:4c:30:10:
                    5c:e4:25:c4:48:7d:23:54:f3:01:82:f9:95:1c:fd:
                    d7:d8:8f:50:6c:f3:0e:04:39:8b:ec:32:8e:cf:09:
                    8a:07:7b:0c:22:58:d5:43:b4:a4:8c:e7:31:21:03:
                    44:e0:f1:ed:31:c2:12:13:22:e9:46:19:78:f0:b1:
                    98:33:50:9c:22:5f:5b:7a:7f:71:1e:8b:09:d3:a1:
                    70:7f:52:5b:5f:d6:3e:21:3b:72:b0:3b:7d:fa:de:
                    c1:5d:c4:16:b5:ee:16:70:e7:0e:a1:fa:1d:8e:27:
                    5e:1f:61:b9:47:09:2f:13:8c:b8:b1:3d:7e:7c:19:
                    2a:43:d4:f7:ff:a7:55:dd:c4:d9:94:75:f4:f9:27:
                    33:c7:2a:f6:c2:3f:fd:cf:e3:11:fb:b7:11:33:70:
                    62:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4E:87:33:19:C1:28:D0:61:EB:8F:36:90:84:33:5E:96:2A:6F:F2
            X509v3 Authority Key Identifier:
                keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/C93C3BD2BF1211F0825A8B67C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:9a:b4:e9:d9:b3:2e:a0:e8:a6:d9:7d:e2:d6:b2:d5:5e:d4:
         fa:82:cb:f3:ed:8c:90:d2:4c:47:06:08:8f:08:69:3f:21:a6:
         04:76:ff:8f:7e:47:5f:e4:75:6c:90:75:1a:70:62:5e:fe:89:
         a7:55:a4:a0:30:be:bd:d3:33:42:23:dd:b1:ab:bf:bb:f3:b9:
         b0:5a:ea:d0:5e:10:af:61:37:69:81:54:78:51:7b:01:90:c9:
         6f:f9:70:4f:ee:a7:59:c6:f6:bf:dd:2d:97:b1:a6:2d:6c:ed:
         0e:ce:11:fd:51:b9:17:18:57:1d:50:1e:3e:c6:0e:d6:7f:a8:
         4c:2f:9f:d8:86:9e:db:c5:db:f3:c6:45:81:23:14:0f:e5:e1:
         d2:88:52:53:0c:fe:40:ad:01:14:3f:b9:e2:d3:1e:f3:e3:64:
         92:d7:82:7a:3e:c9:b4:5c:60:70:0a:d1:92:e0:d9:29:a3:ff:
         6b:9a:ef:b1:99:f6:e7:04:63:14:0f:7e:63:e9:7b:ed:80:bb:
         b1:1a:f7:9e:79:97:f8:bb:99:3c:c9:da:e0:2e:93:19:62:6d:
         58:78:bf:8f:5a:59:99:22:58:46:a2:9f:96:4e:8f:02:21:9b:
         c6:26:34:a3:7d:f2:d8:ed:9d:77:c5:52:e6:31:62:ad:d4:11:
         13:9f:2b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:33:00 2025 by rpki-client