This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/4B52A44814DF11EEAB46A86DC4F9AE02.roa
File:                     4B52A44814DF11EEAB46A86DC4F9AE02.roa (raw, json)
Hash identifier:          NhB+p7+dqD+nB5j++Sxl/yETjDp4HDYVk+7B5ROENtY=
Subject key identifier:   B1:DB:D6:F2:68:94:A8:A5:19:DD:96:D9:2E:A8:E2:D4:0F:6E:36:0A
Certificate issuer:       /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
Certificate serial:       1E82
Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/4B52A44814DF11EEAB46A86DC4F9AE02.roa
Signing time:             Fri 12 Dec 2025 16:13:27 +0000
ROA not before:           Fri 12 Dec 2025 16:13:27 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     59091
IP address blocks:        163.138.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 15:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7810 (0x1e82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B1A, serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
        Validity
            Not Before: Dec 12 16:13:27 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=693c3f27-adaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d1:93:4d:f4:ea:32:ff:0f:6f:b6:a5:e3:57:
                    23:90:56:11:2f:0d:a7:7f:dd:41:d0:12:09:37:1e:
                    9e:a0:0e:55:a8:98:4f:39:ca:9f:1d:21:bb:6b:08:
                    b6:a0:fa:b2:3c:1a:bf:b8:54:25:b7:e3:56:53:6a:
                    a8:53:c3:dd:ed:20:7c:31:0d:9b:9d:bc:17:57:17:
                    33:27:28:a6:cb:73:36:01:c3:df:af:35:76:e9:75:
                    16:de:8a:a7:c4:af:9e:ff:a6:64:27:b6:44:7a:c9:
                    0d:af:24:dd:89:99:ed:ee:15:7f:0a:e5:18:c7:4b:
                    be:89:60:90:c0:65:c5:10:6f:34:48:b0:e0:6e:88:
                    b0:81:bc:ee:07:1c:70:c5:87:40:91:3c:79:ee:90:
                    e8:d6:09:b4:c4:41:65:d4:c8:76:0d:af:eb:5e:bd:
                    4b:93:ed:1e:bc:47:ce:e8:e0:0b:25:73:98:83:ce:
                    54:f7:f4:0e:ff:82:1a:19:c0:5c:73:32:f7:cb:e8:
                    b1:f2:92:fd:82:65:1c:d3:7a:39:f4:7d:29:27:b4:
                    82:cb:ae:5d:f0:1f:f2:cf:d0:fe:11:a9:04:35:58:
                    c6:e2:b1:d9:93:f6:f5:dd:36:bb:db:65:b7:b3:b1:
                    37:c0:e9:f3:b4:bb:3f:a6:51:9d:c6:96:89:dc:e0:
                    b2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DB:D6:F2:68:94:A8:A5:19:DD:96:D9:2E:A8:E2:D4:0F:6E:36:0A
            X509v3 Authority Key Identifier:
                keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/4B52A44814DF11EEAB46A86DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.138.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:83:7a:55:a1:86:a3:91:d1:1d:65:39:a9:28:1b:45:40:b0:
         52:53:c0:54:d8:87:c1:2f:63:5e:d0:4f:26:89:dc:3d:d0:66:
         79:de:66:4c:d5:d3:4a:0a:15:40:d4:89:a9:0c:2c:9a:4c:29:
         44:f8:49:7f:d2:9c:3e:10:f8:e1:7a:75:ea:e1:28:ad:a9:5b:
         3d:b0:84:c3:2f:4a:e2:51:bf:f8:9c:c0:88:0d:c2:ba:15:da:
         3c:8f:58:17:dc:77:6c:15:39:06:51:ee:3c:c3:82:33:76:30:
         b9:3f:b7:d6:9e:c1:fa:16:94:1f:2b:a3:2a:18:0f:bd:bf:90:
         c3:17:43:64:c9:83:dd:e2:d8:2d:3b:c3:03:83:87:e1:5e:be:
         b5:a4:99:a8:c1:52:6c:af:6e:25:eb:18:08:cc:fe:2d:1f:07:
         f4:3c:0c:4c:7e:43:d7:e3:bb:2a:23:8d:d6:a1:b9:0b:78:78:
         19:50:b5:0c:97:30:4d:30:16:fd:f6:3b:bb:4d:1a:6f:a1:6f:
         c9:48:f7:17:95:16:72:c4:64:12:69:bd:eb:4a:bc:5b:3a:f1:
         91:37:5c:c4:72:da:b6:73:89:84:8f:b5:06:68:4c:ec:3a:95:
         bc:da:9f:68:ef:ab:96:2b:f6:8c:41:c0:e0:e4:38:0a:12:03:
         57:91:b8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:35:26 2025 by rpki-client