This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/4E6E940C612211EB8166284BC4F9AE02.roa
File:                     4E6E940C612211EB8166284BC4F9AE02.roa (raw, json)
Hash identifier:          a5J9PDQVvcHeLKxKb14WDmG3jv/OMTIc+XWYxdwGt6o=
Subject key identifier:   77:5F:5B:1B:F8:EA:19:7B:19:A4:14:85:B7:AC:18:AE:CA:1F:C8:33
Certificate issuer:       /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial:       0AA8
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/4E6E940C612211EB8166284BC4F9AE02.roa
Signing time:             Sat 08 Nov 2025 19:40:21 +0000
ROA not before:           Sat 08 Nov 2025 19:40:21 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     17829
IP address blocks:        119.15.72.0/24 maxlen: 24
                          119.15.73.0/24 maxlen: 24
                          119.15.74.0/24 maxlen: 24
                          119.15.75.0/24 maxlen: 24
                          119.15.76.0/24 maxlen: 24
                          119.15.77.0/24 maxlen: 24
                          119.15.78.0/24 maxlen: 24
                          119.15.79.0/24 maxlen: 24
                          125.253.52.0/23 maxlen: 23
                          203.32.82.0/24 maxlen: 24
                          203.33.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
                          rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2728 (0xaa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
        Validity
            Not Before: Nov  8 19:40:21 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690f9ca4-e9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ed:3f:5a:2d:e7:b8:73:08:cc:af:68:b9:10:
                    9f:27:28:76:96:50:ec:e6:fb:b4:16:4e:c1:fc:f9:
                    4a:7a:12:b4:bc:cc:fe:94:72:87:1f:d5:59:8a:b3:
                    7d:e6:46:8a:6e:b8:3f:80:7b:5e:d6:ab:59:9e:c7:
                    fd:74:b4:55:65:4e:0a:63:51:7b:db:49:89:06:0e:
                    f1:af:47:c6:f1:f4:8b:e2:69:b2:86:7e:8a:0a:66:
                    ac:27:53:d4:83:f6:e7:52:26:26:60:c3:4d:04:43:
                    e9:b5:f7:78:06:b1:f1:d0:20:f4:9b:1d:30:82:d1:
                    19:c2:8d:d0:41:e6:21:97:c4:b6:f4:11:89:96:47:
                    7f:ba:7f:87:75:05:71:c1:99:82:a8:a6:d3:33:08:
                    63:5e:fa:dd:02:81:da:2b:69:36:8b:82:2b:d5:fe:
                    4e:d6:00:20:31:32:98:56:51:71:cf:e1:99:29:77:
                    dd:c3:e2:ce:7c:6c:67:ba:7f:c5:dc:f7:95:d1:f4:
                    66:fa:51:17:8e:fd:02:93:0e:da:10:ee:0d:b0:0b:
                    4a:f0:f2:1d:38:72:1e:e4:13:21:e1:00:f3:86:45:
                    8a:70:df:d3:eb:a0:63:b7:7d:97:b8:0d:5e:cb:b2:
                    09:d5:a7:97:d0:bc:04:88:2c:0c:66:c0:52:10:1e:
                    38:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5F:5B:1B:F8:EA:19:7B:19:A4:14:85:B7:AC:18:AE:CA:1F:C8:33
            X509v3 Authority Key Identifier:
                keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/4E6E940C612211EB8166284BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.72.0/21
                  125.253.52.0/23
                  203.32.82.0/24
                  203.33.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:3e:a7:d7:fa:15:5b:50:d0:2a:a3:06:cc:33:be:69:68:a6:
         f6:39:8e:eb:c2:89:b7:17:42:b4:73:fd:46:67:1d:eb:3a:f0:
         22:15:d4:88:a3:b3:6e:49:6f:2e:c2:92:1c:34:72:12:94:a2:
         18:76:f0:a7:3c:fa:42:df:e7:44:33:a5:fc:01:c1:96:2b:ac:
         d7:00:78:de:10:5e:64:09:89:75:09:c3:d5:a1:3c:9e:2a:c2:
         b0:f2:8b:28:fb:93:47:9d:86:dd:4a:3d:ab:96:af:e1:59:ce:
         d6:b5:f3:b1:e7:c2:57:6b:7e:89:fd:11:e8:10:94:01:20:6e:
         5a:45:c4:d7:05:fd:f3:33:e3:ef:99:51:1b:31:78:77:48:27:
         30:a6:e0:0c:82:d0:ce:1b:cc:02:fa:4b:3e:f7:9d:98:dc:94:
         c2:85:4b:b6:d7:b1:f4:48:e0:b0:89:7f:da:ff:96:52:47:7a:
         06:8f:9a:5c:5c:63:43:9a:a5:82:fd:4e:29:35:66:4d:e4:62:
         a3:9f:7a:e5:be:10:3c:9a:c6:e1:ae:7d:ed:16:14:d6:22:f1:
         d3:70:fc:cd:3a:52:4a:db:19:5c:da:01:95:5b:99:3e:43:d9:
         d2:d4:45:3a:28:98:30:74:b2:8a:f0:92:d5:38:84:69:f9:ae:
         16:93:85:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:17:44 2025 by rpki-client