This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/964213A8C1F811F0B39A8413C4F9AE02.roa
File:                     964213A8C1F811F0B39A8413C4F9AE02.roa (raw, json)
Hash identifier:          Cu19/rrlFbM6VCxj1zv5ajpdHQYOrlXzyMr4Q1S9E3Q=
Subject key identifier:   F6:8C:09:3C:E0:77:D9:EE:7D:C2:48:F4:90:2D:ED:AA:B6:79:D8:95
Certificate issuer:       /CN=A915ACE2/serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Certificate serial:       59
Authority key identifier: DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/964213A8C1F811F0B39A8413C4F9AE02.roa
Signing time:             Sat 15 Nov 2025 07:56:27 +0000
ROA not before:           Sat 15 Nov 2025 07:56:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     38584
IP address blocks:        202.63.192.0/24 maxlen: 24
                          202.63.193.0/24 maxlen: 24
                          202.63.194.0/24 maxlen: 24
                          202.63.195.0/24 maxlen: 24
                          202.63.196.0/24 maxlen: 24
                          202.63.197.0/24 maxlen: 24
                          202.63.198.0/24 maxlen: 24
                          202.63.199.0/24 maxlen: 24
                          202.63.200.0/24 maxlen: 24
                          202.63.201.0/24 maxlen: 24
                          202.63.202.0/24 maxlen: 24
                          202.63.203.0/24 maxlen: 24
                          202.63.204.0/24 maxlen: 24
                          202.63.205.0/24 maxlen: 24
                          202.63.206.0/24 maxlen: 24
                          202.63.207.0/24 maxlen: 24
                          202.63.208.0/24 maxlen: 24
                          202.63.209.0/24 maxlen: 24
                          202.63.210.0/24 maxlen: 24
                          202.63.212.0/24 maxlen: 24
                          202.63.215.0/24 maxlen: 24
                          202.63.216.0/24 maxlen: 24
                          202.63.217.0/24 maxlen: 24
                          202.63.218.0/24 maxlen: 24
                          202.63.219.0/24 maxlen: 24
                          202.63.220.0/24 maxlen: 24
                          202.63.221.0/24 maxlen: 24
                          202.63.222.0/24 maxlen: 24
                          202.63.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
                          rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ACE2, serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
        Validity
            Not Before: Nov 15 07:56:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6918322a-c354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:13:75:43:e3:f7:94:f7:d9:88:d0:73:14:b7:
                    b2:78:84:91:a4:40:b8:93:6f:7d:89:43:a6:17:30:
                    ab:ba:9f:c6:6a:5e:7d:81:b1:0a:55:af:4e:22:fb:
                    ba:b4:1a:5c:40:d1:2d:67:f5:ec:c6:25:07:e8:51:
                    c9:c7:7b:b9:eb:e8:fc:bc:9a:b6:c9:d6:81:26:bb:
                    a7:fb:22:70:02:fb:14:8a:11:72:78:d0:75:aa:c9:
                    6a:fe:9e:f1:a9:41:74:8d:b5:c0:11:98:90:c1:b8:
                    a7:42:ce:7b:d8:c1:40:fb:b6:b2:34:81:54:1d:64:
                    6c:00:99:b5:0f:41:03:3b:a9:cb:e6:a4:de:17:0a:
                    ab:3f:27:c3:7e:3a:81:f6:d1:97:f4:91:d7:3e:94:
                    61:da:bc:aa:0f:a3:c8:02:05:7a:84:b5:f9:e2:cf:
                    db:22:b3:76:4a:a5:e0:1a:de:c6:62:7e:0e:29:84:
                    f5:d2:cf:17:ef:d0:f7:ee:8d:c9:56:4d:b8:6a:35:
                    0b:a1:f1:1d:4c:6d:e2:da:2d:f4:9a:01:63:e8:de:
                    cc:39:f2:b5:22:ff:a0:a3:8e:63:e9:6e:29:f8:64:
                    27:2d:6d:79:26:cc:f8:4b:8c:4d:63:b9:42:51:bb:
                    c1:4a:79:34:87:ec:6e:4e:21:63:e0:ec:c7:0f:57:
                    d2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8C:09:3C:E0:77:D9:EE:7D:C2:48:F4:90:2D:ED:AA:B6:79:D8:95
            X509v3 Authority Key Identifier:
                keyid:DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/964213A8C1F811F0B39A8413C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.63.192.0-202.63.210.255
                  202.63.212.0/24
                  202.63.215.0-202.63.223.255

    Signature Algorithm: sha256WithRSAEncryption
         d7:8f:dd:4c:55:c4:14:9a:36:55:38:b2:9f:1f:da:49:9f:b3:
         c9:67:cf:62:a3:08:02:6c:7a:b3:03:b3:da:27:2b:25:05:af:
         af:98:d8:7b:fb:83:1b:07:d4:38:78:d1:5d:2f:45:1c:82:e6:
         27:42:64:65:ae:1d:a9:a0:31:77:ab:a4:bf:db:9b:b0:fb:77:
         a2:df:a1:e1:55:32:47:29:48:9f:74:ff:f4:fe:92:7b:ba:ff:
         13:c0:9c:4a:d9:89:24:44:a0:8e:25:64:a2:50:1e:70:6a:eb:
         32:26:d3:62:7a:c7:67:67:ae:6c:a2:f5:d4:ba:3c:c4:52:83:
         f5:40:14:b9:d9:88:9a:1b:7c:4f:58:f5:82:f8:22:78:fa:c7:
         59:7d:e7:98:f3:ea:56:21:28:e0:94:21:f0:25:b3:0e:2b:d1:
         5c:aa:05:2a:11:36:80:9e:7b:e7:a8:b1:a8:f2:a7:de:86:0e:
         ee:44:d0:37:73:ba:59:4a:77:64:42:c1:9a:ed:ce:af:c9:1a:
         9d:78:c8:85:81:39:c7:de:06:6e:ff:8a:88:64:24:bb:54:32:
         cc:9a:7c:7f:1f:54:9d:e5:06:94:ec:33:7c:d2:6c:ed:6f:05:
         42:8f:e7:15:1e:5c:fb:c1:c4:c4:9f:5d:45:8a:a7:68:62:1a:
         a4:4b:b3:5d
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QUNFMjExMC8GA1UEBRMoREFFMUNFMEFEQTY3QjQ0NzEzQzYxQjFGQUVDNEY1RDRE
NjdBMTU5RjAeFw0yNTExMTUwNzU2MjdaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5MTgzMjJhLWMzNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDKE3VD4/eU99mI0HMUt7J4hJGkQLiTb32JQ6YXMKu6n8ZqXn2BsQpVr04i+7q0
GlxA0S1n9ezGJQfoUcnHe7nr6Py8mrbJ1oEmu6f7InAC+xSKEXJ40HWqyWr+nvGp
QXSNtcARmJDBuKdCznvYwUD7trI0gVQdZGwAmbUPQQM7qcvmpN4XCqs/J8N+OoH2
0Zf0kdc+lGHavKoPo8gCBXqEtfniz9sis3ZKpeAa3sZifg4phPXSzxfv0PfujclW
TbhqNQuh8R1MbeLaLfSaAWPo3sw58rUi/6CjjmPpbin4ZCctbXkmzPhLjE1juUJR
u8FKeTSH7G5OIWPg7McPV9JXAgMBAAGjggKxMIICrTAdBgNVHQ4EFgQU9owJPOB3
2e59wkj0kC3tqrZ52JUwHwYDVR0jBBgwFoAU2uHOCtpntEcTxhsfrsT11NZ6FZ8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBQ0UyLzUxQ0Q3RkJBNzJD
RTExRjA4NDIxQUE0OEM0RjlBRTAyLzJ1SE9DdHBudEVjVHhoc2Zyc1QxMU5aNkZa
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMnVIT0N0cG50RWNUeGhzZnJzVDExTlo2Rlo4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QUNFMi81MUNEN0ZCQTcyQ0UxMUYwODQyMUFBNDhDNEY5QUUwMi85NjQyMTNBOEMx
RjgxMUYwQjM5QTg0MTNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA7BggrBgEFBQcBBwEB/wQs
MCowKAQCAAEwIjAMAwQGyj/AAwQAyj/SAwQAyj/UMAwDBADKP9cDBAXKP8AwDQYJ
KoZIhvcNAQELBQADggEBANeP3UxVxBSaNlU4sp8f2kmfs8lnz2KjCAJserMDs9on
KyUFr6+Y2Hv7gxsH1Dh40V0vRRyC5idCZGWuHamgMXerpL/bm7D7d6LfoeFVMkcp
SJ90//T+knu6/xPAnErZiSREoI4lZKJQHnBq6zIm02J6x2dnrmyi9dS6PMRSg/VA
FLnZiJobfE9Y9YL4Inj6x1l955jz6lYhKOCUIfAlsw4r0VyqBSoRNoCee+eosajy
p96GDu5E0DdzullKd2RCwZrtzq/JGp14yIWBOcfeBm7/iohkJLtUMsyafH8fVJ3l
BpTsM3zSbO1vBUKP5xUeXPvBxMSfXUWKp2hiGqRLs10=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:14:14 2025 by rpki-client