This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/244B9D1874CB11EEB3C0267DC4F9AE02.roa
File:                     244B9D1874CB11EEB3C0267DC4F9AE02.roa (raw, json)
Hash identifier:          D4/4gO/cbJfEP5wlYW+iiyf7YJHeT+1Ir2WyIsZ62e8=
Subject key identifier:   03:FB:C0:9B:59:C2:42:E0:98:C9:7E:24:4D:3F:BB:EE:A9:3C:2D:44
Certificate issuer:       /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial:       08EC
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/244B9D1874CB11EEB3C0267DC4F9AE02.roa
Signing time:             Tue 04 Nov 2025 21:40:34 +0000
ROA not before:           Tue 04 Nov 2025 21:40:34 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     19970
IP address blocks:        61.245.10.0/24 maxlen: 24
                          61.245.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
                          rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 20:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2284 (0x8ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
        Validity
            Not Before: Nov  4 21:40:34 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690a72d1-0901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d8:ba:08:d9:61:14:bd:67:e2:17:71:6d:0c:
                    d1:db:51:82:07:e1:37:02:53:e5:38:e9:8b:62:55:
                    af:9e:e4:75:b6:3b:41:21:08:b5:ef:d6:cf:e7:58:
                    af:0a:56:03:70:56:5a:cc:b8:88:e8:23:90:16:1d:
                    eb:dc:e9:ae:65:a7:ed:99:cc:08:1d:b1:0d:03:af:
                    33:22:7d:6b:35:04:3d:ca:aa:d3:4e:f5:7e:21:b0:
                    3e:cb:3b:a2:a9:c2:d3:99:0c:62:d6:ab:d5:5f:ed:
                    ca:26:90:39:b1:52:b7:be:db:12:7f:e1:7c:20:5a:
                    1e:2f:50:03:62:b1:61:7a:58:e5:16:e0:46:c9:b1:
                    d3:d7:5c:ff:0a:3e:5f:b7:93:69:d6:37:94:96:69:
                    35:e9:b7:13:bd:bf:b8:c9:9c:8a:a1:78:63:fa:b5:
                    0d:3f:0b:18:26:82:d3:11:e1:c8:80:da:86:0a:7f:
                    d2:4b:c4:d9:22:4a:bf:f6:1e:55:04:4e:bf:09:2d:
                    ab:29:01:a3:03:00:83:59:bc:70:76:d0:8f:f5:89:
                    92:fe:6a:6f:5f:e7:25:d0:de:73:a3:0a:1a:f5:6f:
                    68:2b:ec:f6:f0:bd:78:11:27:58:51:1b:d6:76:ec:
                    97:5b:f9:db:3e:95:6d:d7:65:c4:d0:21:14:b8:4e:
                    e9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FB:C0:9B:59:C2:42:E0:98:C9:7E:24:4D:3F:BB:EE:A9:3C:2D:44
            X509v3 Authority Key Identifier:
                keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/244B9D1874CB11EEB3C0267DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.245.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:8e:cb:b6:6d:5e:57:fd:00:32:5a:66:09:9e:17:d9:23:e0:
         b1:04:5f:23:85:50:69:a4:a0:31:06:5b:dd:af:83:10:26:35:
         e6:18:95:68:cf:cb:36:c3:c1:df:0c:72:16:7a:b5:b1:3e:4f:
         73:f3:24:65:27:2a:ac:54:f1:b5:cb:eb:d5:9d:d2:6d:31:7d:
         dc:27:96:8e:f7:73:0a:cb:f0:86:a6:ae:ec:57:8c:9c:48:3c:
         e5:31:5c:f8:c2:ae:4a:d8:ac:b5:3c:f3:12:06:71:fc:3e:a5:
         fb:11:98:ee:c5:67:08:84:30:24:9f:37:db:49:3a:fa:c6:b4:
         41:99:34:30:94:b6:b4:df:00:08:58:94:5e:6d:1d:0b:01:11:
         9a:c0:f7:ca:27:fb:3f:57:6d:17:3f:b0:34:7b:b4:d4:b2:a8:
         88:86:0e:59:e9:cd:9a:61:58:fa:0b:4f:5c:eb:0c:13:90:bf:
         70:cd:ea:e6:b9:4b:a4:bf:b0:00:51:22:d7:24:78:5c:2d:85:
         a2:11:61:86:2e:88:28:20:18:9f:c6:56:5a:e5:c9:aa:c3:14:
         fb:cd:da:89:87:c7:c5:4f:a9:f4:64:86:03:0a:1c:bc:78:3d:
         46:2a:5d:29:88:d4:54:bb:19:b5:a3:a6:cd:ab:8c:d0:76:e1:
         96:e7:44:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:13:29 2025 by rpki-client