This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/F3425EF0684D11F0B2D5FA37C4F9AE02.roa
File:                     F3425EF0684D11F0B2D5FA37C4F9AE02.roa (raw, json)
Hash identifier:          oF3hl33YzEnFbXahSGkHrmMKyHDy8b9I47xlkhUgWrc=
Subject key identifier:   FD:2F:6D:D4:8B:F3:E9:AF:17:37:4D:EA:9B:A2:D3:68:3B:3C:C7:1E
Certificate issuer:       /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial:       0B71
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/F3425EF0684D11F0B2D5FA37C4F9AE02.roa
Signing time:             Wed 03 Dec 2025 02:20:44 +0000
ROA not before:           Wed 03 Dec 2025 02:20:44 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     213607
IP address blocks:        61.15.96.0/24 maxlen: 24
                          61.15.108.0/24 maxlen: 24
                          203.168.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
                          rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2929 (0xb71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
        Validity
            Not Before: Dec  3 02:20:44 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=692f9e7c-3db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:12:a6:cc:96:eb:e2:1c:bf:aa:8b:ff:c0:78:
                    01:1b:75:a6:57:83:2f:77:69:5c:47:74:de:4f:95:
                    82:04:61:e2:04:e1:73:13:cc:68:c6:db:6e:c6:14:
                    c1:1c:d8:48:46:e5:e6:2e:24:3d:f2:15:eb:7f:27:
                    a2:c0:6c:7d:d4:da:3a:56:37:09:7b:b2:20:fc:8f:
                    4a:ba:9d:8f:e4:82:e0:8d:b9:83:2b:6a:16:d6:8a:
                    6d:47:e1:b7:72:84:b2:48:fc:84:52:c1:13:d4:d0:
                    71:bc:69:7f:0f:b6:5e:90:69:30:0e:30:64:ab:e4:
                    10:d0:25:db:94:ef:5f:96:dd:ff:3a:0e:19:58:63:
                    bc:47:f7:c4:43:17:d6:b6:e7:72:69:0e:f5:4b:ab:
                    71:e9:d2:1b:b9:e9:da:23:83:ce:2a:50:49:39:8d:
                    03:d6:60:24:60:5d:b6:2a:50:01:25:3f:ed:04:cf:
                    d2:97:46:fd:2a:54:c1:65:af:1f:dd:e7:7f:66:08:
                    04:e2:1f:c9:0a:4d:43:f9:54:71:81:0b:a4:44:36:
                    c0:74:77:fa:52:2c:35:a4:ca:b0:e5:63:a6:85:eb:
                    87:81:24:4a:c0:36:6e:fc:e3:33:7f:fe:80:27:63:
                    de:1a:d2:61:3f:bf:13:a2:4d:34:99:be:f8:b7:de:
                    ce:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2F:6D:D4:8B:F3:E9:AF:17:37:4D:EA:9B:A2:D3:68:3B:3C:C7:1E
            X509v3 Authority Key Identifier:
                keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/F3425EF0684D11F0B2D5FA37C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.15.96.0/24
                  61.15.108.0/24
                  203.168.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:5c:be:56:15:f9:3e:90:06:c2:70:c7:4d:bf:6d:de:d8:87:
         0c:e0:78:22:c7:f2:e7:1a:b7:9b:0d:2b:57:dc:75:81:91:2c:
         b9:22:a2:4b:07:7e:c0:be:55:79:37:93:16:40:9d:fb:de:ee:
         84:a9:c3:d2:0a:18:1a:fa:56:3f:6e:1b:b5:b4:70:75:f2:28:
         0b:16:89:11:0f:69:8c:39:71:da:f3:7a:32:aa:0a:82:fe:7b:
         fd:00:f7:14:e2:67:42:ac:67:48:44:1f:92:98:cd:1f:34:48:
         01:13:41:aa:b7:36:b4:b5:ec:e8:b6:15:e4:2d:57:48:5a:11:
         09:82:83:e6:00:19:ef:3e:43:40:ce:93:68:e1:dd:4d:20:11:
         9d:42:4f:2c:af:30:8d:d5:df:a1:4c:e2:d7:2a:86:f2:f0:b0:
         0e:42:c1:3e:d3:ce:68:ff:0b:87:d7:61:6b:a7:8f:00:f3:86:
         b1:cc:03:83:71:c9:2d:e4:2c:e5:42:96:20:19:36:d1:bb:56:
         14:eb:53:b5:9b:de:ff:c4:49:45:86:b3:38:34:5f:47:4a:78:
         69:70:47:58:2a:ac:4c:9e:4f:cf:d2:75:a1:2a:d9:75:8c:7e:
         18:45:3d:c2:f5:ad:8e:21:9c:a2:fe:29:8c:7e:56:10:e6:b1:
         3a:04:00:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:09:28 2025 by rpki-client