This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/6EAE50E8EBFA11EEA937307AC4F9AE02.roa
File:                     6EAE50E8EBFA11EEA937307AC4F9AE02.roa (raw, json)
Hash identifier:          J7aNLa3ERRvlZqfhEJCcY2ky3Snav79C7z3716SOcQY=
Subject key identifier:   CA:35:5D:C2:04:54:2D:C4:48:8F:2D:51:8B:47:D8:A6:FB:82:0D:D6
Certificate issuer:       /CN=A913318E/serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
Certificate serial:       0145
Authority key identifier: 50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/6EAE50E8EBFA11EEA937307AC4F9AE02.roa
Signing time:             Sun 07 Dec 2025 03:12:40 +0000
ROA not before:           Sun 07 Dec 2025 03:12:40 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     142636
IP address blocks:        36.50.59.0/24 maxlen: 24
                          36.50.59.0/25 maxlen: 25
                          36.50.59.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl
                          rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 03:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913318E, serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
        Validity
            Not Before: Dec  7 03:12:40 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6934f0a8-9b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:cc:85:f6:15:df:d6:76:28:f9:ce:4c:1f:
                    23:55:b3:43:07:6d:30:5b:d8:73:c3:1a:5a:8b:9b:
                    1a:05:b2:66:39:67:60:24:bb:dd:4d:c8:3a:d5:78:
                    4e:76:5f:c4:42:75:67:68:47:47:ea:87:0d:bf:4f:
                    d2:fb:ab:96:bf:a7:bd:6a:1a:f8:d1:67:54:3d:05:
                    93:12:29:32:d4:ee:be:48:05:84:c5:c5:33:e2:cb:
                    a8:19:bf:42:69:03:d0:5d:58:2f:16:25:f9:5d:9f:
                    b0:ef:d5:04:52:49:f1:5c:57:4c:36:22:38:a8:8b:
                    b0:24:c0:0c:c7:08:6e:66:ee:f6:2a:77:42:6b:1f:
                    81:b5:a5:ad:e0:18:64:1d:ba:2c:ca:38:c1:7e:96:
                    bd:f1:83:4c:81:a8:dd:72:07:71:40:25:fd:a3:9f:
                    46:f5:06:4e:a8:be:41:ff:8e:e5:94:5c:e5:59:02:
                    06:a6:7d:51:56:6f:a0:d6:fd:be:28:d3:ae:c1:34:
                    46:51:74:ff:23:9d:fd:05:4c:f2:fd:32:45:ed:d3:
                    20:15:57:8a:79:b1:ed:20:27:67:8d:d4:16:4e:38:
                    d2:1e:b2:2b:05:38:17:28:ab:24:7a:9f:46:65:33:
                    92:4c:8c:00:23:5e:4a:3c:06:35:90:54:01:b9:3d:
                    9a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:35:5D:C2:04:54:2D:C4:48:8F:2D:51:8B:47:D8:A6:FB:82:0D:D6
            X509v3 Authority Key Identifier:
                keyid:50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/6EAE50E8EBFA11EEA937307AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:d7:1d:9e:12:b0:7e:ec:de:d0:9d:91:81:05:0f:3e:4f:17:
         90:dd:8d:ca:a5:3d:62:fb:2f:06:83:af:c3:15:9f:35:ca:9f:
         11:50:24:89:63:cd:1e:f3:fa:5c:a7:a4:61:6e:e0:52:03:1b:
         80:8b:6e:61:92:28:91:d4:9b:45:3f:0b:19:e0:cc:7d:32:32:
         3c:99:1b:e0:db:ca:8e:b1:56:f1:83:5b:b5:e8:ef:8c:ff:80:
         2f:3d:a1:ac:e8:34:e2:46:28:31:02:a4:83:5f:50:6b:64:8e:
         8a:40:a0:82:d8:c5:b8:a9:e0:f4:52:10:a8:2e:ce:4c:d3:76:
         a4:1c:3d:a2:bc:bb:f8:27:75:cc:36:c4:cb:13:90:ea:11:5c:
         f4:38:fc:0d:68:c4:5d:84:dd:c0:b6:61:9e:b9:76:58:77:c7:
         f5:74:bb:11:63:f6:91:ab:80:e9:9d:9c:6e:12:7d:e4:01:f5:
         60:e8:e9:df:a0:ec:fa:11:d8:58:88:18:7d:bd:03:00:21:2b:
         99:f2:9f:1c:7a:52:00:99:54:30:39:d1:35:54:ba:02:6e:a7:
         a3:c3:95:e2:26:1b:8a:21:f5:f3:95:28:67:37:f3:69:e2:32:
         12:1d:50:77:08:fe:e2:38:01:b0:34:92:01:7c:25:a5:da:7e:
         34:0b:e4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:25:52 2025 by rpki-client