This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/08B9DE4CD40B11F0B7778216C4F9AE02.roa
File:                     08B9DE4CD40B11F0B7778216C4F9AE02.roa (raw, json)
Hash identifier:          GNkRLJn8XSANTINmPiJ00h7rw6CLmDGth09g+Ndrvu8=
Subject key identifier:   99:48:A2:E3:A2:3C:39:A2:81:08:CC:DC:16:AF:21:F5:FA:42:1F:41
Certificate issuer:       /CN=A913FA2D/serialNumber=7E4FC7B944DC809A8B1C71FF218CFB995DCC953E
Certificate serial:       07
Authority key identifier: 7E:4F:C7:B9:44:DC:80:9A:8B:1C:71:FF:21:8C:FB:99:5D:CC:95:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/08B9DE4CD40B11F0B7778216C4F9AE02.roa
Signing time:             Mon 08 Dec 2025 07:53:51 +0000
ROA not before:           Mon 08 Dec 2025 07:53:51 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     152685
IP address blocks:        2001:df6:6840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.crl
                          rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FA2D, serialNumber=7E4FC7B944DC809A8B1C71FF218CFB995DCC953E
        Validity
            Not Before: Dec  8 07:53:51 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6936840e-0ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5d:e0:90:4e:cc:d0:11:1a:d4:f0:29:bc:b1:
                    57:a2:58:ca:18:ac:a4:cb:32:39:9e:52:c0:bc:25:
                    79:6c:52:b4:67:f7:09:ff:9c:6e:9e:73:29:b7:f6:
                    4f:19:65:54:73:1a:e7:30:fb:0a:10:c1:fd:6b:74:
                    1b:4e:79:73:ef:6c:aa:3f:87:69:8c:5e:97:a6:32:
                    46:cc:5f:b5:fa:1e:f7:9b:57:bf:a8:4f:f3:fd:12:
                    bc:47:c1:9b:4a:2a:92:86:e9:8b:47:d4:9c:33:d2:
                    9a:41:e0:37:8e:02:c3:24:4f:14:c8:4f:76:2c:ee:
                    cd:d7:b8:67:e1:14:a4:72:94:9d:70:9a:5f:02:24:
                    9f:08:d1:cb:b3:c9:d8:f6:94:02:8f:86:6d:df:e9:
                    8a:53:ee:dd:77:38:97:04:30:84:87:30:fd:ff:3d:
                    f9:1e:d8:8b:c7:e0:4b:d9:31:ba:52:97:94:f6:cf:
                    ab:d3:da:94:96:a4:d9:1a:c5:dd:29:23:2f:05:30:
                    3d:f2:f3:5f:66:d9:03:41:4d:df:6d:53:07:9f:ee:
                    12:4c:e5:4d:ee:ff:1b:da:8e:c3:ec:d7:3c:b3:44:
                    60:66:50:59:fd:32:ab:6d:3f:d8:4f:98:cf:f3:8b:
                    65:56:1d:d4:6b:13:22:03:2d:2b:3b:a9:aa:d2:06:
                    72:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:48:A2:E3:A2:3C:39:A2:81:08:CC:DC:16:AF:21:F5:FA:42:1F:41
            X509v3 Authority Key Identifier:
                keyid:7E:4F:C7:B9:44:DC:80:9A:8B:1C:71:FF:21:8C:FB:99:5D:CC:95:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/08B9DE4CD40B11F0B7778216C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:6840::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:1a:4d:d6:3d:c0:89:54:eb:26:9d:5a:90:de:27:d3:b9:39:
         11:a0:b2:27:27:fd:18:fe:4c:6e:55:3e:72:5d:6d:d1:b9:6f:
         b7:c5:32:1d:9d:44:6e:71:bb:ce:96:60:65:83:6e:97:3e:35:
         46:a2:89:b1:8e:68:e4:78:a1:30:1c:b5:bb:02:e9:94:70:dc:
         ba:f5:4a:7f:76:6b:24:99:72:04:45:8d:f4:08:6e:6e:e9:bc:
         81:71:97:b6:a2:e9:d0:21:d5:76:42:35:64:f7:52:dc:ee:d3:
         78:c8:dc:60:00:97:69:5d:86:b4:0a:7c:f9:d5:39:ca:f1:d0:
         d9:be:78:4b:1d:23:9a:8b:93:8d:29:69:3d:17:78:f2:a3:20:
         83:75:dc:db:71:c4:7f:f0:52:68:8c:4d:3d:89:ae:c0:48:00:
         1f:d1:34:3e:b4:ee:cb:45:97:ad:ec:08:11:35:89:cd:01:cd:
         f9:47:8b:bd:c2:f8:eb:b5:2c:c7:93:78:d3:c9:c9:d0:34:c4:
         6b:23:e7:9a:04:b3:45:5a:c4:7d:d0:ef:73:39:e5:5c:18:86:
         d1:f9:3e:60:59:a6:a6:ac:30:e5:f9:91:2a:b8:e8:cf:72:0a:
         39:3c:ca:fe:11:48:5c:35:29:ea:e2:3d:c6:c8:aa:d4:46:9f:
         b1:a5:21:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:35:49 2025 by rpki-client