This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/4409B8649D1011F0B28FB758C4F9AE02.roa
File:                     4409B8649D1011F0B28FB758C4F9AE02.roa (raw, json)
Hash identifier:          A/zZSRGjkMwADjlZyW6cF/auyn1kJtFRTWSHvAVO1hc=
Subject key identifier:   F4:46:0F:A0:44:C5:45:B2:6D:5F:BB:F1:94:AA:0A:07:D4:76:9A:20
Certificate issuer:       /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Certificate serial:       18EB
Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/4409B8649D1011F0B28FB758C4F9AE02.roa
Signing time:             Thu 04 Dec 2025 16:15:52 +0000
ROA not before:           Thu 04 Dec 2025 16:15:52 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     153356
IP address blocks:        113.19.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
                          rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6379 (0x18eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
        Validity
            Not Before: Dec  4 16:15:52 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6931b3b8-4da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:86:f7:04:53:f4:90:a8:ee:d0:16:fa:c7:5d:
                    e0:22:f5:5f:8c:c2:4b:cc:53:e6:0d:f1:f3:40:22:
                    0b:41:f0:b6:41:73:59:11:2b:32:fe:bf:31:d8:d1:
                    7c:b7:de:5f:09:57:b5:08:67:c8:8f:e1:ed:52:c6:
                    d1:33:58:f4:54:51:50:3e:1a:ff:f7:9e:73:7e:04:
                    83:0f:7f:5b:ac:34:74:2f:5e:b8:d8:aa:e3:0f:f8:
                    55:3c:c0:f8:b6:da:72:68:bc:e8:8f:7f:b9:16:8f:
                    7e:3a:c1:ef:4c:45:cc:f1:77:7e:5f:a5:67:4b:13:
                    00:87:f5:15:72:05:c1:7e:d7:21:df:83:d2:fb:81:
                    22:f4:53:2b:b5:98:21:f5:8f:95:40:bc:f7:08:ab:
                    0f:0e:85:9f:7b:12:ef:ad:01:84:32:ba:d9:4a:eb:
                    ec:e6:96:35:cb:3f:ba:83:07:ed:ed:ff:42:38:f5:
                    9f:2e:00:62:e5:b1:21:35:f9:ff:7e:78:97:66:87:
                    34:01:17:c1:80:87:42:4f:5e:bd:b8:05:ea:67:4f:
                    19:82:15:c8:e5:6b:7f:26:f7:fa:f6:f1:3b:dc:80:
                    a7:d3:98:96:6c:1a:f0:db:ff:7e:03:07:83:06:ba:
                    95:c4:f9:9f:0d:06:d9:45:32:8f:e1:c1:09:df:6d:
                    b0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:46:0F:A0:44:C5:45:B2:6D:5F:BB:F1:94:AA:0A:07:D4:76:9A:20
            X509v3 Authority Key Identifier:
                keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/4409B8649D1011F0B28FB758C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.19.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:ba:56:ac:5e:24:61:9e:97:7b:66:1b:4d:ba:c5:96:18:19:
         d0:f3:89:ae:10:eb:98:d3:e5:83:83:01:ee:41:19:95:bc:3b:
         8a:d4:d0:d3:81:8e:bf:22:10:f4:e5:0d:68:a0:74:93:f3:1d:
         de:2f:37:f4:8f:81:88:13:a4:22:46:4b:22:cc:84:06:33:09:
         b0:41:63:01:a5:03:be:df:32:e0:00:43:9c:5d:79:9e:df:9d:
         48:ea:bc:2d:c8:5c:40:d2:fd:f9:56:cf:f6:e3:66:3e:46:77:
         1c:aa:96:2f:e5:fb:bb:6f:a9:e5:85:fc:8f:3b:8c:29:de:dd:
         b6:86:54:b2:76:29:f5:b9:dd:3b:34:de:6c:ab:68:c6:3b:f9:
         59:cb:fb:60:5a:12:da:10:c9:e0:34:5b:c7:79:73:8c:af:a3:
         85:51:6e:a9:cf:17:05:5d:df:31:23:ac:10:7b:78:17:1b:19:
         8e:f2:ff:de:ec:0a:42:15:f2:3b:6a:96:f9:7e:2e:a7:38:88:
         e8:c3:36:20:fe:4a:19:25:de:d6:ea:ff:1f:21:b9:66:48:d0:
         14:c4:63:21:cb:89:d9:a0:04:da:78:0e:7d:45:5b:ef:3f:ef:
         b5:12:6e:10:42:be:41:4b:0f:5f:b1:3a:61:2e:76:c8:7f:de:
         31:73:96:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:56:28 2025 by rpki-client