This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/7B306A34218D11EC87C96D6DC4F9AE02.roa
File:                     7B306A34218D11EC87C96D6DC4F9AE02.roa (raw, json)
Hash identifier:          xb4FGOu1Mf4Rf3VIrMEf7uT8+tpvnSSDi1qsrPtD9y4=
Subject key identifier:   53:98:17:82:6E:33:5D:F3:28:FC:E6:9E:2D:5C:41:1E:BE:A2:1C:97
Certificate issuer:       /CN=A9136DD6/serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
Certificate serial:       10F1
Authority key identifier: CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/7B306A34218D11EC87C96D6DC4F9AE02.roa
Signing time:             Wed 26 Nov 2025 17:06:33 +0000
ROA not before:           Wed 26 Nov 2025 17:06:33 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     4773
IP address blocks:        118.189.34.0/24 maxlen: 24
                          118.189.44.0/22 maxlen: 22
                          118.189.78.0/24 maxlen: 24
                          118.189.82.0/24 maxlen: 24
                          118.189.176.0/20 maxlen: 20
                          118.189.176.0/22 maxlen: 22
                          118.189.176.0/24 maxlen: 24
                          118.189.177.0/24 maxlen: 24
                          118.189.178.0/24 maxlen: 24
                          118.189.179.0/24 maxlen: 24
                          118.189.180.0/23 maxlen: 24
                          118.189.182.0/23 maxlen: 24
                          118.189.184.0/21 maxlen: 21
                          118.189.184.0/24 maxlen: 24
                          118.189.185.0/24 maxlen: 24
                          118.189.186.0/24 maxlen: 24
                          118.189.187.0/24 maxlen: 24
                          118.189.188.0/24 maxlen: 24
                          118.189.189.0/24 maxlen: 24
                          118.189.190.0/24 maxlen: 24
                          118.189.191.0/24 maxlen: 24
                          118.189.192.0/20 maxlen: 22
                          118.189.192.0/24 maxlen: 24
                          118.189.193.0/24 maxlen: 24
                          118.189.194.0/24 maxlen: 24
                          118.189.195.0/24 maxlen: 24
                          118.189.196.0/24 maxlen: 24
                          118.189.197.0/24 maxlen: 24
                          118.189.198.0/24 maxlen: 24
                          118.189.199.0/24 maxlen: 24
                          118.189.200.0/24 maxlen: 24
                          118.189.201.0/24 maxlen: 24
                          118.189.202.0/24 maxlen: 24
                          118.189.203.0/24 maxlen: 24
                          118.189.204.0/24 maxlen: 24
                          118.189.205.0/24 maxlen: 24
                          118.189.206.0/24 maxlen: 24
                          118.189.207.0/24 maxlen: 24
                          118.189.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl
                          rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4337 (0x10f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136DD6, serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
        Validity
            Not Before: Nov 26 17:06:33 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69273399-ed59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:a3:28:d5:22:7f:49:7c:06:ab:b5:97:fb:
                    5c:d9:af:d1:1f:af:ec:51:ca:e7:d0:b2:ea:f7:05:
                    75:11:3a:c8:93:a7:89:d6:fd:90:2e:03:93:08:22:
                    05:fc:e1:2f:2d:f0:0c:0a:89:38:d3:75:6c:dd:a9:
                    5e:90:3d:e8:5c:71:89:e9:30:e2:65:86:44:6d:08:
                    b8:0a:3f:2a:8f:0b:e6:62:d0:be:a3:b7:15:19:f7:
                    84:f1:26:ec:b9:3e:56:e5:71:46:89:27:27:9c:9d:
                    b5:85:17:5c:e4:9a:90:13:b3:6b:7f:48:46:69:a1:
                    8b:14:a9:60:ff:44:e1:62:82:38:cf:c9:11:51:9e:
                    6c:19:a8:d5:f9:fa:67:ef:6a:c1:1a:ac:76:14:f6:
                    e3:a6:49:cf:67:6c:b4:8e:b0:ed:73:c7:9b:fd:49:
                    d5:82:ba:fc:79:5c:28:a3:0b:f5:20:22:95:04:b9:
                    fb:77:42:47:d9:72:5e:1f:da:4c:7a:37:06:f9:f9:
                    72:9f:43:bd:2d:b2:e1:fb:6d:df:dd:91:76:86:3c:
                    41:f0:7a:6b:b1:4b:b2:68:50:4d:4c:1e:8a:49:4f:
                    3a:c5:4c:75:15:0a:73:67:23:4e:f6:a3:91:06:8c:
                    cf:29:c8:11:f8:60:a3:f8:de:34:08:e1:54:3e:89:
                    47:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:98:17:82:6E:33:5D:F3:28:FC:E6:9E:2D:5C:41:1E:BE:A2:1C:97
            X509v3 Authority Key Identifier:
                keyid:CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/7B306A34218D11EC87C96D6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.189.34.0/24
                  118.189.44.0/22
                  118.189.78.0/24
                  118.189.82.0/24
                  118.189.176.0-118.189.215.255

    Signature Algorithm: sha256WithRSAEncryption
         20:cd:52:0f:60:5f:3b:ee:a9:4f:f9:b9:df:51:c1:be:f2:28:
         f8:a1:24:9a:f0:be:db:76:9f:8e:d4:15:23:48:b6:e9:86:df:
         e0:b2:7b:80:6a:ea:5c:4a:8f:4f:82:3d:80:5c:f8:ef:63:92:
         43:f9:91:57:ac:a0:fd:03:0f:92:95:f9:7c:fa:d2:86:93:68:
         14:86:b2:41:7c:4a:91:25:2e:9e:e7:a4:b5:5b:5e:8e:d9:12:
         70:7f:e7:e2:5a:e5:70:d7:71:b1:93:9c:26:ee:af:74:06:92:
         9a:01:e2:df:a4:92:7e:b6:6a:18:16:f8:34:1b:4a:fd:a4:90:
         12:c3:d3:eb:5f:40:95:e3:ab:ca:55:2f:70:e5:c5:44:fd:a4:
         76:94:79:cd:db:4b:5d:e1:15:12:bd:be:74:52:6f:e2:4e:80:
         c8:b9:d0:da:04:e7:95:df:ba:78:dc:2a:af:58:53:5a:05:76:
         a6:ed:67:1d:8a:5a:71:4b:d1:b4:58:fc:d2:58:32:33:7c:c6:
         67:30:a0:84:b8:63:ec:18:4a:b5:19:6d:c9:f8:62:65:ca:40:
         c6:c3:10:ff:4b:43:98:09:17:59:6b:1e:65:5f:c5:ce:5b:7f:
         1d:06:0d:53:30:fe:4b:61:fc:a7:12:e9:44:da:3c:c9:91:0d:
         cb:db:97:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:54:55 2025 by rpki-client