This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F065A3D0721311EFA9D7CA3AC4F9AE02.roa
File:                     F065A3D0721311EFA9D7CA3AC4F9AE02.roa (raw, json)
Hash identifier:          6S9VvaLCJSbB/1WyB7UyOGe+MincJdkllSgIc6XQCMY=
Subject key identifier:   B3:A4:CB:BE:0F:40:D0:C1:FA:8F:6A:5D:51:65:24:33:4D:DA:49:DD
Certificate issuer:       /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial:       01BD
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F065A3D0721311EFA9D7CA3AC4F9AE02.roa
Signing time:             Wed 31 Dec 2025 04:24:27 +0000
ROA not before:           Wed 31 Dec 2025 04:24:27 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     140075
IP address blocks:        202.29.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 04:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
        Validity
            Not Before: Dec 31 04:24:27 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6954a57a-48a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:ad:34:8d:2f:c9:74:f6:49:7f:65:82:08:
                    86:6b:4e:76:98:bb:30:43:77:ea:ca:cc:45:88:9f:
                    ea:a4:89:c3:e3:e9:45:89:7b:1f:2a:31:a3:a1:dc:
                    9a:38:1f:66:5f:7c:ee:1b:e9:df:fd:d4:c7:b3:bf:
                    00:ff:0f:8f:18:7a:3c:29:63:84:60:d8:a2:98:d1:
                    54:dd:02:e8:7f:18:68:ed:0e:fb:37:ff:e8:d1:a7:
                    6d:b1:f7:2e:0c:97:3e:38:49:b3:47:3f:ac:2c:ef:
                    c5:47:5e:ae:b6:ca:ab:a6:27:70:e7:39:94:4c:0a:
                    36:1b:98:d8:dd:1a:da:d2:d6:cf:5f:6e:8f:b6:44:
                    2e:e0:45:3f:db:a1:b1:8d:b0:70:f9:0e:20:2a:7a:
                    8c:20:c5:e5:b8:24:c7:a0:62:4b:f4:03:a1:df:02:
                    f7:4b:54:68:f2:82:ad:cd:23:60:3c:33:23:a4:01:
                    76:4e:a4:3d:a4:b3:8f:b3:3f:a1:01:9e:4d:d8:cb:
                    3c:d2:bd:97:7d:d5:50:ff:d0:0c:06:24:0f:48:e1:
                    f5:47:3b:67:19:1e:34:4e:b0:a7:30:ac:2a:f8:6d:
                    66:65:87:dc:e9:a4:82:61:dd:7d:23:87:56:f0:e2:
                    2c:33:1b:de:b3:e8:ea:61:05:fa:7a:84:51:f9:07:
                    d3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A4:CB:BE:0F:40:D0:C1:FA:8F:6A:5D:51:65:24:33:4D:DA:49:DD
            X509v3 Authority Key Identifier:
                keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F065A3D0721311EFA9D7CA3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.29.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:ed:e6:b3:5d:f1:b1:6e:1d:b7:a7:ca:37:36:de:53:b2:83:
         3b:02:4a:7f:6d:de:8d:ab:9f:ba:ee:7b:1e:65:16:ca:7d:5f:
         bf:6c:05:c3:81:19:63:55:f1:8b:99:6f:32:33:8a:65:1e:60:
         aa:ea:3f:ad:a7:dd:63:3b:e3:79:18:68:47:a1:a8:fe:71:17:
         98:6e:37:3b:8a:2f:af:53:2d:b2:f9:4a:b3:74:e1:be:dd:b2:
         d7:89:f0:55:0c:8d:97:60:ed:54:0b:5d:fb:15:99:ae:66:91:
         e7:4a:34:5a:15:96:55:64:55:bf:79:eb:c5:ce:2c:a3:b6:80:
         52:33:dd:13:07:e7:50:e2:13:5a:f8:6d:9f:ed:08:8d:f7:b0:
         6f:6f:11:4f:ba:d0:db:8d:14:a8:c7:95:98:61:37:4b:0d:9b:
         9e:87:08:dd:af:b8:4d:08:d9:24:39:e4:96:4f:bc:90:40:b0:
         03:91:8b:8b:ee:41:63:67:c0:bf:b0:ff:26:ba:88:70:01:e0:
         93:f2:71:25:33:41:32:f2:cc:d2:de:53:fd:6b:bc:36:92:78:
         09:6a:22:8b:f1:89:8e:92:b8:0d:3b:13:b8:6d:5f:92:81:44:
         61:0c:3d:da:36:1a:7c:b1:75:f6:c2:b9:a6:e9:09:4f:2e:64:
         cf:de:6c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 19:34:52 2025 by rpki-client