This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9E1FAF62C91A11F08AC0C673C4F9AE02.roa
File:                     9E1FAF62C91A11F08AC0C673C4F9AE02.roa (raw, json)
Hash identifier:          EYJuj7Ys2yn/Y3ogPFCOzhRA1x4eMfO+KUjbme3Rfpk=
Subject key identifier:   5B:BA:95:96:23:7A:F1:05:45:FB:3F:DB:83:5E:1B:E4:36:37:8D:61
Certificate issuer:       /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial:       1D
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9E1FAF62C91A11F08AC0C673C4F9AE02.roa
Signing time:             Mon 24 Nov 2025 09:47:41 +0000
ROA not before:           Mon 24 Nov 2025 09:47:41 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     140618
IP address blocks:        122.154.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
        Validity
            Not Before: Nov 24 09:47:41 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692429bd-499a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b5:41:49:2b:98:ac:46:bb:69:7a:65:ef:cf:
                    6b:b6:7d:2b:f9:33:a7:37:61:67:0e:9e:87:1f:ca:
                    e4:3e:42:3f:17:70:28:71:a3:45:d3:79:c1:b2:40:
                    bd:9e:a7:4f:92:e5:2a:a2:76:31:04:96:b5:e1:05:
                    a4:09:ea:e7:42:40:c6:b0:fb:ba:f8:7d:48:b3:b0:
                    52:4a:29:73:4d:a5:04:39:27:aa:9d:34:e8:97:94:
                    93:e5:a5:21:9a:7b:c3:fb:df:9b:b1:c8:09:60:ad:
                    04:b0:24:f7:36:dd:37:8a:88:c2:dc:55:64:ac:9b:
                    98:16:4f:6f:e3:b3:59:c7:54:7f:d4:e7:b9:eb:15:
                    8d:f0:d1:a1:2d:f6:0e:5e:3d:e4:16:d4:43:aa:bd:
                    04:57:04:c7:03:5d:a9:71:f1:c6:a6:dc:72:60:b6:
                    79:e9:57:5a:b3:2b:8e:76:60:f9:db:35:db:26:73:
                    ee:3c:35:79:eb:8e:12:fe:04:3b:d8:b3:d3:a4:01:
                    28:6f:01:e1:5c:de:36:6e:76:61:61:2f:ba:91:d5:
                    f2:c3:01:a4:68:fe:53:7b:20:bf:2c:98:bd:fc:47:
                    18:ea:8e:17:74:8f:3c:a6:f5:ec:d1:b6:74:37:4f:
                    9c:c9:85:34:3e:da:b8:b2:80:74:04:3e:d7:7b:f5:
                    39:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BA:95:96:23:7A:F1:05:45:FB:3F:DB:83:5E:1B:E4:36:37:8D:61
            X509v3 Authority Key Identifier:
                keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9E1FAF62C91A11F08AC0C673C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.154.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:d9:32:36:c2:f1:5c:4a:03:15:cf:65:a6:52:21:a1:99:7a:
         95:f7:2b:61:30:09:80:f0:ba:71:fa:e9:b3:f8:3a:6f:d9:b8:
         59:3f:71:98:41:1a:d9:b2:60:c5:11:f9:49:f5:2b:4b:dc:b9:
         c9:9a:c0:f2:18:89:82:fe:32:1d:6b:3b:64:28:21:75:ee:b4:
         16:e5:d0:f3:d0:e0:2e:4b:df:21:ec:95:23:1b:1d:81:f3:13:
         3c:01:30:aa:28:1c:2f:34:81:f7:1c:bc:0f:70:57:5c:09:75:
         61:26:f1:4e:0d:09:65:4e:c8:a0:95:f3:da:6d:17:a1:a4:b4:
         32:91:8b:f2:a7:60:71:6e:0a:e9:07:af:e7:b2:e0:8d:e3:6f:
         d7:8d:43:d4:3e:ca:4f:c8:0e:49:d2:f7:76:f2:98:ee:5a:80:
         09:35:f1:ca:16:71:cd:cf:80:dd:eb:13:81:1b:6c:fb:4c:34:
         63:18:ea:91:38:60:dd:f8:14:af:93:aa:0e:5b:74:f5:16:42:
         3f:a3:6e:70:70:e4:30:d9:d4:a1:b8:37:f5:d1:dd:92:27:08:
         da:36:3e:89:f6:22:8f:25:7a:4d:bd:ed:1a:85:c7:aa:65:db:
         a4:58:f1:15:60:46:46:16:34:39:cf:db:82:17:d5:e4:e7:fd:
         44:ef:ac:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:58:48 2025 by rpki-client