This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/B4B581DEDFDB11F0B149F2E3536F56BC.roa
File:                     B4B581DEDFDB11F0B149F2E3536F56BC.roa (raw, json)
Hash identifier:          g8h4AuAjSU2htCTyorJM2XPUCNXDA6cYYOZOcIV/cZY=
Subject key identifier:   C4:E2:22:87:07:34:57:53:4E:71:16:50:E7:FB:58:81:5D:0B:7E:18
Certificate issuer:       /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
Certificate serial:       0225
Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/B4B581DEDFDB11F0B149F2E3536F56BC.roa
Signing time:             Tue 23 Dec 2025 08:45:17 +0000
ROA not before:           Tue 23 Dec 2025 08:45:17 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     54994
IP address blocks:        2403:1cc0:1005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl
                          rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 01:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
        Validity
            Not Before: Dec 23 08:45:17 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=694a569d-aa15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e2:71:9f:c4:60:1e:51:f9:a8:43:fc:e2:5d:
                    68:69:07:19:23:84:3d:76:a6:90:c4:66:d0:56:c8:
                    d3:f3:ae:39:f7:03:74:3c:e6:ad:e4:67:af:5f:3d:
                    db:96:35:ac:0e:b0:30:c3:c9:39:d0:75:83:2f:82:
                    db:34:40:b4:61:d8:7f:b6:53:9f:14:b5:e0:a9:38:
                    3d:24:e6:f7:68:81:95:51:64:ba:d2:bd:f2:3f:99:
                    f0:3f:67:2e:69:97:31:c6:36:af:2a:a1:da:86:ca:
                    7c:27:4d:7a:49:a1:bc:5f:3e:f8:c0:a6:0c:f5:de:
                    47:5c:31:b2:95:6a:e7:d4:46:3a:b9:9a:37:54:9a:
                    75:9e:fd:d8:d7:3e:ab:67:67:52:20:bd:e5:79:64:
                    12:6c:2f:1a:78:4c:6a:37:02:34:87:73:04:8a:20:
                    e7:b5:cd:89:21:4b:3b:76:1e:30:1a:7b:36:46:3e:
                    37:5f:c9:71:ab:97:d2:1a:d6:bd:4d:11:23:1a:1f:
                    bd:6d:bf:5c:9b:43:00:5d:f0:30:0b:87:92:11:08:
                    59:d4:4f:d5:96:cd:f0:9b:8f:26:bd:6e:7f:e1:e5:
                    73:9e:e8:b5:db:ea:59:8a:6b:40:e8:1f:c3:cd:b3:
                    fb:d4:4b:a6:15:3a:10:67:98:70:cd:61:0b:7b:9c:
                    bf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E2:22:87:07:34:57:53:4E:71:16:50:E7:FB:58:81:5D:0B:7E:18
            X509v3 Authority Key Identifier:
                keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/B4B581DEDFDB11F0B149F2E3536F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:1cc0:1005::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:f7:07:9a:33:4e:ef:27:b6:51:20:34:58:cd:4f:b8:6e:23:
         f0:55:06:bf:3a:ce:3d:2c:1c:ed:6a:20:75:cc:88:f5:7a:af:
         55:3d:92:82:13:d6:1d:7d:17:aa:d8:5c:e0:58:85:a4:28:4a:
         07:89:55:e7:62:5a:cf:09:a4:25:b2:b9:8b:96:87:75:a2:40:
         70:19:72:ac:db:ee:ed:1d:7c:45:3d:a2:cd:46:2f:b5:24:fb:
         70:8e:72:c0:a8:a5:7b:a3:d7:fb:f3:b4:fa:36:e6:3c:0b:24:
         6c:d1:f1:c0:17:73:f4:8a:ae:39:5e:c6:2a:90:b4:a7:d0:cb:
         af:db:58:e4:8e:44:71:52:85:9b:3b:d5:74:00:cb:6d:79:00:
         61:fa:61:8c:c5:54:44:4d:a3:9d:5b:2f:3c:c3:9c:26:2d:b0:
         68:e0:6d:c8:c7:03:45:42:3b:aa:ae:71:3f:ca:b1:dc:7e:24:
         6a:4e:da:19:3f:ca:d8:b2:5d:ba:21:2f:3d:21:9a:e4:ec:45:
         df:f7:58:7b:2e:6c:b3:b6:d6:c2:9e:13:f3:e0:ac:43:de:d5:
         0d:32:c0:53:61:ba:13:79:30:eb:98:be:83:c2:0c:73:fe:be:
         74:73:fc:61:83:ab:ee:95:51:a6:66:e4:2b:bc:e8:32:bd:71:
         23:2e:53:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 16:25:47 2025 by rpki-client