This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/E61E258895F611EC88E42C7EC4F9AE02.roa
File:                     E61E258895F611EC88E42C7EC4F9AE02.roa (raw, json)
Hash identifier:          TEe1vP6DRB8YT8k0USYkc2bmS+7dNHehlpCLdcwXNpM=
Subject key identifier:   B3:A7:73:E7:25:77:A8:6E:3B:84:CF:CF:BC:A5:BA:C1:F8:A8:86:FD
Certificate issuer:       /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2
Certificate serial:       0420
Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/E61E258895F611EC88E42C7EC4F9AE02.roa
Signing time:             Mon 24 Nov 2025 23:15:55 +0000
ROA not before:           Mon 24 Nov 2025 23:15:55 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     4775
IP address blocks:        103.146.59.0/24 maxlen: 24
                          202.0.116.0/24 maxlen: 24
                          2001:df2:4d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl
                          rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:52:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1056 (0x420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2
        Validity
            Not Before: Nov 24 23:15:55 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6924e72a-c157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:35:f5:b7:08:a9:09:c6:fb:20:40:85:c2:39:
                    20:23:78:9d:ec:7c:2b:9c:98:ac:f2:89:dc:3a:71:
                    0b:27:ec:c8:d7:f8:b2:b2:96:8d:ab:47:ff:6f:6a:
                    29:12:55:14:7c:59:0b:04:c0:be:b8:9f:c7:3e:4e:
                    fa:9b:66:16:ed:2d:be:79:70:08:c4:95:51:de:c7:
                    b9:7e:89:50:f4:56:05:f7:06:0b:81:fd:99:fe:c6:
                    0f:88:a4:30:1a:9a:c5:76:0b:c2:f5:b2:e4:28:59:
                    49:0f:ce:cd:fa:7e:93:8f:0b:25:f8:4b:87:cf:4c:
                    a9:5b:07:ed:bb:71:eb:ac:14:9d:7e:81:f2:f7:09:
                    54:b1:6f:e5:d4:18:58:1e:e5:29:1b:60:5b:71:b9:
                    00:45:4d:e8:eb:e1:32:cb:49:87:ea:37:2d:f9:8f:
                    af:f0:7d:84:89:55:50:9d:5b:a2:38:b9:8b:b6:b6:
                    c9:f9:d0:f1:c3:40:49:71:1f:19:82:ff:d4:aa:af:
                    b5:78:0d:4e:6c:29:0b:28:82:67:01:51:ea:ca:7f:
                    50:05:88:e2:9c:18:54:cf:4b:70:d5:1f:a1:36:f6:
                    05:81:17:1a:bb:cd:e1:d8:7b:9d:ed:d7:84:e1:af:
                    9a:02:1f:44:f0:cf:7f:21:e3:21:de:6b:5b:88:cc:
                    26:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A7:73:E7:25:77:A8:6E:3B:84:CF:CF:BC:A5:BA:C1:F8:A8:86:FD
            X509v3 Authority Key Identifier:
                keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/E61E258895F611EC88E42C7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.59.0/24
                  202.0.116.0/24
                IPv6:
                  2001:df2:4d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:e7:74:f0:13:61:6b:f3:db:3a:3b:04:c7:ff:25:0e:0c:c1:
         52:f7:c1:1b:49:d3:6c:8c:78:5c:36:f6:da:23:9c:29:74:bb:
         7c:aa:15:6d:89:6f:37:76:2d:6d:e1:09:9f:f9:30:1c:da:e0:
         96:b5:8e:89:b0:87:43:06:c6:10:32:8e:fb:f9:4e:b5:5e:f7:
         92:f8:6b:0d:b0:5c:3b:05:1d:dd:70:f6:09:32:4b:a5:b2:c7:
         1d:46:73:26:80:df:7c:c7:91:11:79:b1:83:bc:a1:0c:0c:4d:
         dc:b1:f7:eb:cf:08:88:f6:1d:2a:96:19:df:72:94:a8:03:bc:
         2e:f8:0a:a5:67:e4:67:97:90:47:84:2c:df:20:1c:2a:f5:bb:
         7e:ec:af:3a:37:21:43:e4:b0:c8:46:a9:82:6d:b4:32:cd:43:
         a8:07:23:11:9c:84:7f:8c:27:3f:4a:21:c7:5d:94:05:e3:51:
         e4:15:2f:9c:9c:d7:c5:2c:9a:cf:f5:c8:11:1e:75:fd:95:37:
         67:32:34:f5:86:c1:8f:e9:95:24:d7:e4:8b:20:a8:c6:02:8e:
         6a:a7:fd:60:3b:b3:a1:5a:b3:2b:58:b2:01:05:bd:8e:8b:d3:
         26:29:8c:c3:f9:74:b9:2f:b4:49:06:8d:06:3a:44:8a:58:db:
         3a:96:92:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:53:14 2025 by rpki-client