This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/20151124C8EE11F0BD2FFA4CC4F9AE02.roa
File:                     20151124C8EE11F0BD2FFA4CC4F9AE02.roa (raw, json)
Hash identifier:          cNqGGRe6NzhSCTXzIASVI8hhiih8GTSivPf6s6Rfquk=
Subject key identifier:   90:DC:A6:B2:01:E1:2E:1E:B7:E5:12:26:4B:F0:D5:24:8D:C5:A8:39
Certificate issuer:       /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial:       28
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/20151124C8EE11F0BD2FFA4CC4F9AE02.roa
Signing time:             Mon 24 Nov 2025 09:47:50 +0000
ROA not before:           Mon 24 Nov 2025 09:47:50 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     9335
IP address blocks:        61.19.240.0/20 maxlen: 20
                          61.19.242.0/24 maxlen: 24
                          61.19.245.0/24 maxlen: 24
                          61.19.246.0/24 maxlen: 24
                          61.19.247.0/24 maxlen: 24
                          61.19.248.0/24 maxlen: 24
                          61.19.249.0/24 maxlen: 24
                          61.19.250.0/24 maxlen: 24
                          61.19.251.0/24 maxlen: 24
                          61.19.252.0/24 maxlen: 24
                          110.78.192.0/20 maxlen: 24
                          110.78.208.0/21 maxlen: 24
                          110.78.216.0/22 maxlen: 24
                          110.78.220.0/22 maxlen: 24
                          110.78.228.0/22 maxlen: 24
                          110.78.252.0/22 maxlen: 24
                          122.154.133.0/24 maxlen: 24
                          122.155.0.0/19 maxlen: 20
                          122.155.0.0/24 maxlen: 24
                          122.155.1.0/24 maxlen: 24
                          122.155.2.0/24 maxlen: 24
                          122.155.3.0/24 maxlen: 24
                          122.155.4.0/24 maxlen: 24
                          122.155.5.0/24 maxlen: 24
                          122.155.6.0/24 maxlen: 24
                          122.155.7.0/24 maxlen: 24
                          122.155.8.0/24 maxlen: 24
                          122.155.9.0/24 maxlen: 24
                          122.155.10.0/24 maxlen: 24
                          122.155.11.0/24 maxlen: 24
                          122.155.12.0/24 maxlen: 24
                          122.155.13.0/24 maxlen: 24
                          122.155.14.0/24 maxlen: 24
                          122.155.16.0/24 maxlen: 24
                          122.155.17.0/24 maxlen: 24
                          122.155.18.0/24 maxlen: 24
                          122.155.19.0/24 maxlen: 24
                          122.155.22.0/24 maxlen: 24
                          122.155.23.0/24 maxlen: 24
                          122.155.28.0/24 maxlen: 24
                          122.155.29.0/24 maxlen: 24
                          122.155.55.0/24 maxlen: 24
                          122.155.144.0/21 maxlen: 21
                          122.155.144.0/24 maxlen: 24
                          122.155.145.0/24 maxlen: 24
                          122.155.146.0/24 maxlen: 24
                          122.155.147.0/24 maxlen: 24
                          122.155.148.0/24 maxlen: 24
                          122.155.149.0/24 maxlen: 24
                          122.155.150.0/24 maxlen: 24
                          122.155.151.0/24 maxlen: 24
                          122.155.160.0/19 maxlen: 19
                          122.155.164.0/24 maxlen: 24
                          122.155.165.0/24 maxlen: 24
                          122.155.166.0/24 maxlen: 24
                          122.155.167.0/24 maxlen: 24
                          122.155.168.0/24 maxlen: 24
                          122.155.169.0/24 maxlen: 24
                          122.155.170.0/24 maxlen: 24
                          122.155.171.0/24 maxlen: 24
                          122.155.172.0/24 maxlen: 24
                          122.155.173.0/24 maxlen: 24
                          122.155.174.0/24 maxlen: 24
                          122.155.175.0/24 maxlen: 24
                          122.155.177.0/24 maxlen: 24
                          122.155.180.0/24 maxlen: 24
                          122.155.191.0/24 maxlen: 24
                          122.155.192.0/24 maxlen: 24
                          122.155.193.0/24 maxlen: 24
                          122.155.194.0/24 maxlen: 24
                          122.155.195.0/24 maxlen: 24
                          122.155.196.0/24 maxlen: 24
                          122.155.197.0/24 maxlen: 24
                          122.155.198.0/24 maxlen: 24
                          122.155.199.0/24 maxlen: 24
                          122.155.200.0/24 maxlen: 24
                          122.155.201.0/24 maxlen: 24
                          122.155.202.0/24 maxlen: 24
                          122.155.203.0/24 maxlen: 24
                          122.155.204.0/24 maxlen: 24
                          122.155.205.0/24 maxlen: 24
                          122.155.206.0/24 maxlen: 24
                          122.155.207.0/24 maxlen: 24
                          122.155.208.0/24 maxlen: 24
                          122.155.209.0/24 maxlen: 24
                          122.155.210.0/24 maxlen: 24
                          122.155.211.0/24 maxlen: 24
                          122.155.212.0/24 maxlen: 24
                          122.155.215.0/24 maxlen: 24
                          122.155.216.0/24 maxlen: 24
                          122.155.220.0/24 maxlen: 24
                          122.155.221.0/24 maxlen: 24
                          122.155.222.0/24 maxlen: 24
                          122.155.223.0/24 maxlen: 24
                          202.3.68.0/24 maxlen: 24
                          202.3.69.0/24 maxlen: 24
                          202.3.70.0/24 maxlen: 24
                          202.3.71.0/24 maxlen: 24
                          202.129.2.0/24 maxlen: 24
                          202.129.50.0/24 maxlen: 24
                          202.139.192.0/22 maxlen: 22
                          202.139.192.0/24 maxlen: 24
                          202.139.193.0/24 maxlen: 24
                          202.139.194.0/24 maxlen: 24
                          202.139.195.0/24 maxlen: 24
                          202.139.196.0/24 maxlen: 24
                          202.139.198.0/24 maxlen: 24
                          202.139.199.0/24 maxlen: 24
                          202.139.223.0/24 maxlen: 24
                          2001:c38:1000::/36 maxlen: 36
                          2001:c38:2000::/36 maxlen: 36
                          2001:c38:2000::/48 maxlen: 48
                          2001:c38:20f8::/48 maxlen: 48
                          2001:c38:3001::/48 maxlen: 48
                          2001:c38:3002::/48 maxlen: 48
                          2001:c38:3003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
        Validity
            Not Before: Nov 24 09:47:50 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692429c5-7fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b2:a7:fa:02:82:79:11:39:b9:14:e8:c0:45:
                    f2:38:8c:de:a3:6e:fb:15:93:04:8f:7f:16:b3:38:
                    d9:e2:3c:96:92:a2:d9:18:15:ac:c6:af:02:61:60:
                    fb:ff:90:68:38:9c:26:78:4e:f0:37:cc:ff:6f:41:
                    24:ac:fe:9c:9a:89:ee:0b:ea:d1:f2:6d:b6:ee:2d:
                    50:7b:98:ea:4b:d6:4d:3d:2c:cf:66:6a:b4:5d:9d:
                    51:40:b1:7b:8e:e0:8e:6f:c9:94:19:5b:df:a8:ea:
                    b6:21:d1:98:4c:d8:9d:4c:30:d8:15:58:7c:91:a1:
                    da:36:e4:cc:a2:f6:18:19:c5:dd:aa:72:e8:26:03:
                    9f:a6:c6:09:41:e6:3f:09:4d:fc:fb:2d:0a:89:21:
                    c9:df:0b:d4:59:e0:2c:43:78:7f:1f:68:f6:26:d2:
                    f9:0d:3e:f6:6d:6d:80:bf:d5:ee:60:7a:38:38:1f:
                    39:f1:a9:8d:08:d7:24:42:69:8e:97:35:4f:a0:fa:
                    04:d5:ce:94:71:83:18:09:cc:3c:88:2c:73:9a:b6:
                    23:98:c9:ea:8e:3f:e7:03:73:96:1c:eb:1c:f3:f8:
                    f5:cb:0c:5a:5a:39:57:5e:0e:95:57:ff:c8:33:45:
                    58:99:b9:34:d9:25:d5:04:1a:63:c3:ac:39:8e:ac:
                    98:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DC:A6:B2:01:E1:2E:1E:B7:E5:12:26:4B:F0:D5:24:8D:C5:A8:39
            X509v3 Authority Key Identifier:
                keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/20151124C8EE11F0BD2FFA4CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.19.240.0/20
                  110.78.192.0/19
                  110.78.228.0/22
                  110.78.252.0/22
                  122.154.133.0/24
                  122.155.0.0/19
                  122.155.55.0/24
                  122.155.144.0/21
                  122.155.160.0-122.155.212.255
                  122.155.215.0-122.155.216.255
                  122.155.220.0/22
                  202.3.68.0/22
                  202.129.2.0/24
                  202.129.50.0/24
                  202.139.192.0-202.139.196.255
                  202.139.198.0/23
                  202.139.223.0/24
                IPv6:
                  2001:c38:1000::-2001:c38:2fff:ffff:ffff:ffff:ffff:ffff
                  2001:c38:3001::-2001:c38:3003:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         4f:61:29:ea:38:a5:87:94:14:54:4a:52:e9:d8:5d:0b:2e:6c:
         60:9a:85:53:c9:56:22:61:eb:4b:43:6c:88:65:e0:37:67:ba:
         da:99:c3:04:54:36:b2:a7:73:34:41:7b:58:45:04:ec:1f:e1:
         8c:34:68:4c:87:0f:22:37:fb:b7:d8:a9:56:cb:83:b7:da:f3:
         fa:57:e6:3a:05:c3:2a:2f:45:1a:e5:6f:3c:6b:86:a0:57:8e:
         71:72:a0:f1:85:ca:d1:5c:75:7c:fb:64:86:35:c5:1f:1f:25:
         b2:fd:81:03:76:b7:60:de:a2:bf:00:0d:83:19:8d:16:e2:58:
         e7:0c:47:63:4f:e7:56:a1:6e:e2:e7:be:cd:59:7e:c3:58:f1:
         3e:3a:a3:1f:fd:24:bc:0a:15:49:43:8a:1a:3c:1e:a8:89:a7:
         5c:2a:38:f1:a0:24:4a:81:5f:5a:25:78:f6:5c:a5:e8:10:f5:
         f7:69:6c:6a:3d:0d:e8:c4:80:8a:18:32:ff:d3:ab:8c:e9:4d:
         15:a6:36:9b:ea:04:d5:a5:74:19:20:65:ec:f9:ca:45:34:cf:
         56:02:2b:a5:4f:e7:6a:d4:9c:f1:d1:1d:b9:22:5f:bd:ad:88:
         a5:f4:45:cd:d1:e0:b4:58:b8:b8:cd:db:26:ba:84:1a:98:e6:
         4e:a8:a2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:52:40 2025 by rpki-client