This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/2E0FE566659A11ED8981D533C4F9AE02.roa
File:                     2E0FE566659A11ED8981D533C4F9AE02.roa (raw, json)
Hash identifier:          9mymLiXCRjtr+TlJsGmOLAO7c7q7H4q9/GmJLFOK+K4=
Subject key identifier:   36:4F:F0:F3:A3:CA:87:6C:1E:0A:23:8A:9B:65:11:BA:5B:C4:49:4F
Certificate issuer:       /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Certificate serial:       02A0
Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/2E0FE566659A11ED8981D533C4F9AE02.roa
Signing time:             Wed 05 Nov 2025 01:45:53 +0000
ROA not before:           Wed 05 Nov 2025 01:45:53 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     209242
IP address blocks:        203.19.222.0/24 maxlen: 24
                          203.89.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
                          rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672 (0x2a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748
        Validity
            Not Before: Nov  5 01:45:53 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=690aac51-39f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:62:ea:9b:16:1e:fd:8a:15:05:73:80:32:bf:
                    4a:41:de:1a:cb:ec:41:1f:77:99:c6:5a:10:83:fd:
                    cc:21:ed:47:a8:ec:39:e5:cd:e0:34:38:bb:3e:ad:
                    42:45:09:db:bf:56:30:e0:03:be:b1:0c:06:e9:40:
                    88:10:29:3d:3b:f8:c9:a2:59:d3:1c:14:51:75:fd:
                    fe:86:d5:c4:e0:66:c8:b0:20:3c:d9:62:1f:eb:ab:
                    11:68:e0:17:01:a2:0b:32:32:7e:cb:61:b6:2f:e8:
                    c4:16:71:7e:25:31:e3:46:9e:84:d8:6e:0a:06:11:
                    f8:57:18:1d:47:ca:ff:bc:d8:08:f4:25:bf:d3:d0:
                    7e:d4:b2:fc:3d:a3:38:2d:4d:dd:9a:09:92:7e:15:
                    18:1c:89:f3:0b:46:73:8c:84:50:62:10:ba:69:15:
                    4d:59:b4:61:f0:14:51:87:64:40:0a:17:27:af:e6:
                    ab:e3:66:ec:9e:31:8e:f6:0b:05:c6:62:39:f0:b1:
                    ec:bc:c9:17:25:cc:db:12:6c:ef:e2:8f:f6:36:e4:
                    5e:c4:c6:ba:4b:7d:74:b5:fa:9e:73:6e:83:98:91:
                    c3:1c:d1:3c:5d:c3:8f:19:7e:eb:f9:ee:c1:88:94:
                    50:e3:eb:f4:0d:18:4e:33:6e:6c:9b:eb:b8:03:29:
                    e2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4F:F0:F3:A3:CA:87:6C:1E:0A:23:8A:9B:65:11:BA:5B:C4:49:4F
            X509v3 Authority Key Identifier:
                keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/2E0FE566659A11ED8981D533C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.19.222.0/24
                  203.89.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:68:da:57:83:14:d8:7d:85:25:be:99:9e:89:b1:04:b9:f7:
         60:6b:90:f8:8b:53:57:88:68:cb:b8:4c:ca:d8:6a:8b:58:f2:
         7c:55:59:ad:a3:6a:a5:31:30:2d:7e:03:be:38:b5:9d:8d:93:
         90:db:3d:d4:e2:f6:23:4d:39:b7:84:73:02:46:58:1a:e4:80:
         e7:14:be:5c:ec:75:b4:8c:18:a9:d3:5d:9d:f0:fc:79:60:3a:
         2d:d9:a9:a8:81:52:34:79:92:1f:ae:ee:35:68:e0:02:00:18:
         af:69:00:36:0a:f6:cc:76:be:8e:39:4b:0c:de:84:fe:98:10:
         11:53:52:5c:60:4d:69:2f:18:10:1e:07:87:09:3c:2d:ff:58:
         04:8a:6a:9b:ab:64:69:c5:ea:02:79:41:f5:8d:5d:9e:49:d9:
         63:cc:4b:2d:06:d7:cb:e2:17:a2:b1:5b:f3:fb:13:4c:9c:c0:
         e1:74:05:ee:6f:6c:92:3f:df:ef:6a:ec:08:88:3d:98:46:cc:
         db:af:e5:5f:66:66:ce:8b:4c:40:ea:c0:87:9a:c6:c3:2b:60:
         20:60:aa:fb:3d:64:00:61:19:44:96:a5:6c:86:a9:79:e5:17:
         06:b6:2b:1c:f5:83:dc:bb:0f:4d:83:69:d5:96:4f:8f:64:86:
         15:79:67:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:14:45 2025 by rpki-client