This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/0D491000A64811EA939A7F67C4F9AE02.roa
File:                     0D491000A64811EA939A7F67C4F9AE02.roa (raw, json)
Hash identifier:          uH7ttnhZsZog6yCfdvOftohsxkCDqtwT+V+qQFjoPac=
Subject key identifier:   F2:20:25:74:DA:17:F1:1E:52:FA:37:D9:BA:E5:1F:2B:71:D0:1D:D5
Certificate issuer:       /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
Certificate serial:       0999
Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/0D491000A64811EA939A7F67C4F9AE02.roa
Signing time:             Sun 16 Nov 2025 19:39:44 +0000
ROA not before:           Sun 16 Nov 2025 19:39:44 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     59268
IP address blocks:        49.128.64.0/24 maxlen: 24
                          49.128.65.0/24 maxlen: 24
                          49.128.66.0/24 maxlen: 24
                          49.128.67.0/24 maxlen: 24
                          49.128.68.0/24 maxlen: 24
                          49.128.69.0/24 maxlen: 24
                          49.128.70.0/24 maxlen: 24
                          49.128.71.0/24 maxlen: 24
                          49.128.72.0/24 maxlen: 24
                          49.128.73.0/24 maxlen: 24
                          49.128.75.0/24 maxlen: 24
                          49.128.76.0/24 maxlen: 24
                          49.128.77.0/24 maxlen: 24
                          49.128.78.0/24 maxlen: 24
                          49.128.79.0/24 maxlen: 24
                          49.128.80.0/24 maxlen: 24
                          49.128.81.0/24 maxlen: 24
                          49.128.82.0/24 maxlen: 24
                          49.128.83.0/24 maxlen: 24
                          49.128.84.0/24 maxlen: 24
                          49.128.85.0/24 maxlen: 24
                          49.128.86.0/24 maxlen: 24
                          49.128.87.0/24 maxlen: 24
                          49.128.88.0/24 maxlen: 24
                          49.128.89.0/24 maxlen: 24
                          49.128.90.0/24 maxlen: 24
                          49.128.91.0/24 maxlen: 24
                          49.128.92.0/24 maxlen: 24
                          49.128.93.0/24 maxlen: 24
                          49.128.94.0/24 maxlen: 24
                          49.128.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl
                          rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2457 (0x999)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
        Validity
            Not Before: Nov 16 19:39:44 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=691a287f-a7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ba:1e:84:58:0f:89:00:02:1d:ac:02:1a:04:
                    19:6c:fa:d1:13:03:4d:12:4a:fc:c3:df:71:72:72:
                    b7:1f:b4:54:13:75:a9:9b:d0:84:9f:4e:2b:62:7f:
                    42:1c:c4:32:01:77:ce:eb:3e:88:f8:57:8d:44:92:
                    bb:84:94:1e:46:8a:81:84:5b:42:fe:9a:f0:1e:3f:
                    6f:d8:0d:c8:8b:6e:ae:35:ab:ab:68:10:bb:ed:8a:
                    5f:48:66:03:8a:47:65:6e:f7:84:57:28:bb:93:5e:
                    79:6f:6f:b6:3e:69:e9:94:21:5a:76:cf:ab:6f:31:
                    45:13:fc:8d:c5:f7:ef:ed:7d:6c:ee:53:57:2b:3b:
                    ae:bc:aa:ca:12:bc:22:6e:54:b5:45:82:35:27:22:
                    4e:58:df:d5:f5:1b:63:5b:d3:23:c5:d1:33:4a:71:
                    7c:69:a6:98:9f:d7:57:76:42:4e:db:cf:b2:fc:b6:
                    24:a7:91:4a:cc:05:71:ee:47:c2:95:5e:87:5c:2c:
                    fd:9f:7e:0b:c0:a1:b4:f9:5a:95:94:df:04:55:dd:
                    a2:3e:80:0d:76:03:eb:79:3a:ec:75:bd:67:6a:87:
                    e2:db:49:d6:56:5b:10:f2:cf:a8:ea:28:17:12:0d:
                    7e:53:22:a6:22:60:9f:85:3e:19:0b:59:84:7c:8a:
                    19:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:20:25:74:DA:17:F1:1E:52:FA:37:D9:BA:E5:1F:2B:71:D0:1D:D5
            X509v3 Authority Key Identifier:
                keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/0D491000A64811EA939A7F67C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.128.64.0-49.128.73.255
                  49.128.75.0-49.128.95.255

    Signature Algorithm: sha256WithRSAEncryption
         8f:a6:7c:d3:b5:f0:59:98:0d:c9:06:2e:d1:ef:b9:97:a0:39:
         a9:57:ba:0e:ea:7d:80:0f:f5:fd:5f:81:52:f0:05:41:2a:30:
         6f:05:7d:fd:bb:e4:e2:bb:93:ee:91:a5:14:ea:65:cf:20:86:
         3b:44:7a:e7:66:85:1a:e5:1b:94:b3:42:5a:80:3b:8b:27:2d:
         bd:ae:19:02:ec:cd:a0:4b:0f:52:b0:b3:c3:ec:cd:68:df:47:
         6f:93:69:22:89:96:95:bc:8e:bb:b6:ff:18:cd:18:8c:a4:95:
         89:dc:67:58:f6:39:b0:98:e4:37:78:36:72:8c:09:2d:55:2e:
         24:94:10:37:a9:f7:66:4a:57:db:11:e3:b3:00:32:94:eb:8f:
         8f:08:69:04:08:1f:06:7e:2b:72:b2:c3:22:c7:88:1b:67:50:
         8c:a4:57:65:28:8f:96:0a:01:54:ef:9b:86:b0:23:b7:21:b6:
         85:d0:d3:80:67:cf:52:14:56:eb:f7:79:e8:85:5a:07:15:16:
         77:68:bf:c1:88:76:48:5e:d9:88:43:bf:78:36:3d:bc:e2:e6:
         f0:dd:a3:f7:ef:4a:61:e9:18:fb:55:e1:8f:c0:c8:75:9f:a6:
         11:f6:7c:85:9c:f3:e2:14:5f:71:d3:67:d6:e3:ba:6a:c4:d9:
         8b:dc:59:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:39:03 2025 by rpki-client