This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/567E4552C91911F0BB194C6DC4F9AE02.roa
File:                     567E4552C91911F0BB194C6DC4F9AE02.roa (raw, json)
Hash identifier:          ckqlJh190Z78TnMGe9Si/aLYThzKpCI7qGyR/k/KtyY=
Subject key identifier:   92:90:B0:31:09:4C:31:74:32:9B:D1:F5:08:02:7B:DA:40:62:F5:2B
Certificate issuer:       /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial:       11
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/567E4552C91911F0BB194C6DC4F9AE02.roa
Signing time:             Mon 24 Nov 2025 09:38:31 +0000
ROA not before:           Mon 24 Nov 2025 09:38:31 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     18197
IP address blocks:        61.7.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
        Validity
            Not Before: Nov 24 09:38:31 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69242797-9ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f6:e1:ab:12:ec:4d:f0:30:78:ae:64:2f:08:
                    55:1f:9f:c2:45:8a:7f:14:2c:33:90:c3:fc:8a:5f:
                    69:30:18:f3:d1:c7:bd:db:e7:9b:c4:d6:25:d6:cb:
                    57:8c:f6:5c:0b:50:ac:75:76:c4:67:52:e2:95:a0:
                    b7:08:3d:e8:40:3f:45:f1:ca:ae:01:7b:8e:6b:fc:
                    e6:94:a2:23:9a:96:ca:37:d8:9f:86:95:60:11:c4:
                    4e:73:79:d8:1e:57:cd:85:6d:aa:6d:03:95:15:a7:
                    77:da:29:17:19:1c:0c:35:2f:06:38:a8:c3:38:38:
                    f8:cc:7f:26:0e:f0:5e:84:8d:44:eb:e3:bd:c3:4e:
                    f4:81:15:24:75:86:6b:db:79:46:9b:06:47:2b:ea:
                    9e:1a:48:29:28:a4:c1:5c:fd:12:d2:0c:04:42:47:
                    2c:46:b1:d4:c8:02:aa:74:ee:5f:7a:41:95:74:6a:
                    74:6a:83:83:43:8b:7e:2f:23:a7:be:eb:5b:e9:29:
                    27:8b:2e:a8:79:47:d9:e7:fc:3c:f6:47:7b:ee:aa:
                    09:38:95:51:a0:54:31:ed:00:07:c5:fa:7c:f6:b3:
                    f7:07:07:5c:d1:4d:a3:de:e2:ad:2c:d7:34:14:3b:
                    38:67:91:c8:84:61:60:35:53:c5:ab:ea:e9:13:4c:
                    ee:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:90:B0:31:09:4C:31:74:32:9B:D1:F5:08:02:7B:DA:40:62:F5:2B
            X509v3 Authority Key Identifier:
                keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/567E4552C91911F0BB194C6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.7.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:b7:d7:aa:05:e9:d5:b6:17:fc:b7:87:e2:8d:ec:1e:59:e4:
         8a:68:d1:64:de:17:c8:00:82:c4:6f:5e:c5:0a:ec:a9:92:71:
         58:7e:5e:d1:58:88:62:48:3f:2e:f6:9a:f7:dd:75:19:e8:bc:
         88:89:cc:15:44:44:ca:26:cf:19:ff:0e:3f:4b:c4:00:54:5e:
         64:a0:68:5c:3f:65:40:44:25:f8:3e:81:7e:e0:0e:0e:66:ec:
         52:16:16:40:5f:09:ea:47:df:0e:c7:0e:5d:0b:95:08:78:b5:
         7b:c0:88:95:27:80:84:f4:91:d9:c0:b8:37:86:5c:2f:86:f9:
         4c:d2:f8:5c:e0:c5:d8:9a:92:2e:f5:65:cb:2b:46:04:73:10:
         2a:c3:51:33:8b:5b:5e:99:1c:85:e4:9e:ed:4f:61:67:fc:2a:
         1c:30:74:24:82:c5:e1:a3:5d:0f:42:f7:0d:ab:93:a4:2b:58:
         2b:a4:f3:56:d8:1c:9a:2d:4b:87:4e:79:ec:62:fc:a0:4d:82:
         e2:07:46:d1:3f:d4:ba:4d:79:73:20:9c:87:5d:f3:fb:48:e0:
         4e:28:1a:a4:21:bf:c3:d8:d1:8e:30:81:f0:32:30:a6:31:da:
         1c:d4:2f:23:5e:cd:2b:6b:d2:a4:95:ad:9c:89:58:b3:f1:1d:
         5c:c7:75:29
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NTk4RDExMC8GA1UEBRMoOUEzQTY3RUREQ0QwOTc3NTMzQTlBMEI4QzQ5RjRDMDEw
MEM4NTM5MTAeFw0yNTExMjQwOTM4MzFaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5MjQyNzk3LTllZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCY9uGrEuxN8DB4rmQvCFUfn8JFin8ULDOQw/yKX2kwGPPRx73b55vE1iXWy1eM
9lwLUKx1dsRnUuKVoLcIPehAP0Xxyq4Be45r/OaUoiOalso32J+GlWARxE5zedge
V82FbaptA5UVp3faKRcZHAw1LwY4qMM4OPjMfyYO8F6EjUTr473DTvSBFSR1hmvb
eUabBkcr6p4aSCkopMFc/RLSDARCRyxGsdTIAqp07l96QZV0anRqg4NDi34vI6e+
61vpKSeLLqh5R9nn/Dz2R3vuqgk4lVGgVDHtAAfF+nz2s/cHB1zRTaPe4q0s1zQU
OzhnkciEYWA1U8Wr6ukTTO6/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUkpCwMQlM
MXQym9H1CAJ72kBi9SswHwYDVR0jBBgwFoAUmjpn7dzQl3UzqaC4xJ9MAQDIU5Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0I4ODUzMUNBQzhF
QzExRjBBMzQ0QUI0NUM0RjlBRTAyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbWpwbjdkelFsM1V6cWFDNHhKOU1BUURJVTVFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTk4RC9CODg1MzFDQUM4RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi81NjdFNDU1MkM5
MTkxMUYwQkIxOTRDNkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAD0HwjANBgkqhkiG9w0BAQsFAAOCAQEAbbfXqgXp1bYX/LeH
4o3sHlnkimjRZN4XyACCxG9exQrsqZJxWH5e0ViIYkg/Lvaa9911Gei8iInMFURE
yibPGf8OP0vEAFReZKBoXD9lQEQl+D6BfuAODmbsUhYWQF8J6kffDscOXQuVCHi1
e8CIlSeAhPSR2cC4N4ZcL4b5TNL4XODF2JqSLvVlyytGBHMQKsNRM4tbXpkcheSe
7U9hZ/wqHDB0JILF4aNdD0L3DauTpCtYK6TzVtgcmi1Lh0557GL8oE2C4gdG0T/U
uk15cyCch13z+0jgTigapCG/w9jRjjCB8DIwpjHaHNQvI17NK2vSpJWtnIlYs/Ed
XMd1KQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:00:05 2025 by rpki-client