This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/9DB343D0DA5A11F08EBD209195D3641D.roa
File:                     9DB343D0DA5A11F08EBD209195D3641D.roa (raw, json)
Hash identifier:          sIQOHGddydH5WNvq1a9DZQM4Tgjc39JsPN94viMuMhk=
Subject key identifier:   4C:E4:68:30:0A:2B:CE:6F:EA:D0:3B:54:A8:5B:94:45:58:5C:FA:54
Certificate issuer:       /CN=A91519CC/serialNumber=49649E94F6CA3DBDC1FFCE99FF1BBCAB8CD0AA5C
Certificate serial:       04
Authority key identifier: 49:64:9E:94:F6:CA:3D:BD:C1:FF:CE:99:FF:1B:BC:AB:8C:D0:AA:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SWSelPbKPb3B_86Z_xu8q4zQqlw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/9DB343D0DA5A11F08EBD209195D3641D.roa
Signing time:             Tue 16 Dec 2025 08:38:38 +0000
ROA not before:           Tue 16 Dec 2025 08:38:38 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154434
IP address blocks:        2001:df6:7340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.crl
                          rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SWSelPbKPb3B_86Z_xu8q4zQqlw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 07:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91519CC, serialNumber=49649E94F6CA3DBDC1FFCE99FF1BBCAB8CD0AA5C
        Validity
            Not Before: Dec 16 08:38:38 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69411a8d-e301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b8:41:2e:f2:8f:1e:fa:44:ba:86:6d:d7:21:
                    55:4d:62:86:29:8d:2e:92:4b:37:d1:9f:c3:f4:b7:
                    b5:ff:87:e0:6f:49:95:41:86:e9:12:53:a2:61:8f:
                    35:c3:38:3d:7b:87:03:3e:cb:e7:35:a6:94:fa:2c:
                    d4:b1:3d:db:81:8c:fa:7f:bc:ad:41:02:3d:07:5d:
                    af:32:2b:53:63:c7:1a:b0:0c:28:4c:b1:1e:db:fc:
                    de:19:d3:f3:76:bf:ed:db:56:b9:22:67:08:69:cc:
                    27:e5:1c:6d:dc:c0:92:22:1c:ba:c5:92:d1:d1:b7:
                    83:fb:ec:cc:0d:fd:a6:6c:c7:23:62:fa:8d:a3:de:
                    69:ce:3f:42:7e:95:63:99:03:19:1a:4f:5f:92:18:
                    7f:a6:d5:2d:27:7a:d2:85:06:d3:5a:df:e3:e6:03:
                    b4:0b:f1:1b:5c:67:1f:84:de:0c:46:bc:da:ad:6f:
                    6d:6b:d2:da:2c:dc:b6:3d:c1:e4:27:55:3f:06:e1:
                    0e:99:0a:03:5c:24:a2:73:1d:04:ef:59:aa:60:ee:
                    1f:74:ac:8c:ae:ad:1f:ba:9f:eb:f0:2a:0c:73:b4:
                    b6:ec:aa:2e:1c:d7:e8:83:82:75:19:64:1f:61:ea:
                    57:30:56:82:30:44:09:07:24:f8:75:51:f6:fc:ac:
                    e5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E4:68:30:0A:2B:CE:6F:EA:D0:3B:54:A8:5B:94:45:58:5C:FA:54
            X509v3 Authority Key Identifier:
                keyid:49:64:9E:94:F6:CA:3D:BD:C1:FF:CE:99:FF:1B:BC:AB:8C:D0:AA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SWSelPbKPb3B_86Z_xu8q4zQqlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/9DB343D0DA5A11F08EBD209195D3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:7340::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:09:dc:65:76:8b:50:5a:a5:c8:cd:84:f6:3a:2d:b5:fd:78:
         c8:86:65:0c:16:a1:dc:aa:d6:4d:df:df:83:d6:79:73:43:0b:
         9d:76:fa:7e:1f:29:f9:40:a8:cb:8a:9e:e1:eb:6b:66:61:b7:
         e0:c7:07:b1:b4:90:a3:55:08:8e:00:62:67:16:75:5a:39:f8:
         cd:e9:e4:93:b7:82:8e:8a:cc:c3:4d:1a:5e:27:ce:38:88:3c:
         41:37:83:69:c0:57:48:1d:58:6a:0d:a9:e7:41:e9:ab:ed:94:
         12:84:ae:70:41:ad:fc:c4:54:8a:b9:19:bf:ee:67:e0:f2:9f:
         f6:de:2a:93:d8:5a:7a:04:bf:48:d6:dc:eb:06:9f:5c:27:2f:
         10:c0:53:b9:68:16:cc:12:62:36:04:2c:27:ce:85:e1:0d:15:
         06:19:6c:c7:05:4c:c6:ad:be:66:71:60:ad:57:4d:73:87:1f:
         4c:1f:8b:42:c8:99:1d:89:8a:98:b7:68:cc:3c:65:ca:5a:71:
         fa:a4:a8:4f:f3:e8:04:d6:c4:42:54:c1:a2:cc:64:94:55:cd:
         f3:f2:9c:3c:bc:15:a6:62:0c:13:fb:c8:f4:22:7d:73:23:d7:
         9e:ff:fe:6c:2b:d7:fd:33:9b:df:ea:9a:90:91:5a:4f:64:62:
         cb:81:40:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:35:49 2025 by rpki-client