This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/EA7554AC82D011EA8BCCCA64C4F9AE02.roa
File:                     EA7554AC82D011EA8BCCCA64C4F9AE02.roa (raw, json)
Hash identifier:          s2nUxCRuLuGEazR6JBSUwlKRD9YIJ5lbB/8C9TPhUEk=
Subject key identifier:   FD:E0:47:21:83:EB:96:4C:99:7F:46:99:17:30:20:8F:F3:58:FC:5E
Certificate issuer:       /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Certificate serial:       0A5C
Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/EA7554AC82D011EA8BCCCA64C4F9AE02.roa
Signing time:             Thu 20 Nov 2025 19:10:11 +0000
ROA not before:           Thu 20 Nov 2025 19:10:11 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     63527
IP address blocks:        63.140.1.0/24 maxlen: 24
                          63.140.2.0/24 maxlen: 24
                          63.140.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl
                          rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2652 (0xa5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917576D, serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
        Validity
            Not Before: Nov 20 19:10:11 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=691f6793-4e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6f:0e:22:4b:98:bf:27:5f:51:a7:cc:a6:40:
                    d2:46:24:f7:d0:e6:97:74:f8:be:f5:11:c6:56:88:
                    3a:93:df:6a:6b:f6:0d:3a:29:bd:4a:97:e5:95:f7:
                    02:dd:18:8e:14:96:16:36:5b:a2:e3:a3:3a:9e:73:
                    bb:2a:22:0f:1c:3f:b1:13:59:bf:b4:0d:35:e8:f7:
                    07:3d:36:35:2c:05:4c:05:83:45:e2:a6:68:2c:47:
                    f5:fb:85:b1:8d:35:02:2e:7d:1a:98:68:66:96:46:
                    c2:d5:b6:52:a8:c3:ba:2f:8c:7c:17:04:d3:62:d3:
                    d8:37:8e:76:b7:3a:ac:cb:bb:1f:d0:32:b5:f9:93:
                    a7:55:51:59:64:63:87:39:63:a8:ac:bb:80:b2:75:
                    85:e0:eb:6d:6f:29:13:0b:19:fe:7a:0e:ff:0e:74:
                    f2:e1:ac:ca:5b:d4:8a:76:0c:ae:7e:fb:d7:8c:3e:
                    53:44:e8:98:2f:0a:c2:47:be:65:5a:9e:4c:28:ef:
                    37:e9:49:b1:3a:f4:aa:65:34:47:87:3b:60:c3:a9:
                    85:72:1f:c5:cc:a2:11:da:09:ec:f8:03:f9:f9:71:
                    2b:a9:2b:bc:89:f4:47:ce:06:bf:8a:80:6f:d2:60:
                    5d:39:d4:0d:09:70:c3:a5:53:ae:44:e3:a9:d6:8e:
                    7c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E0:47:21:83:EB:96:4C:99:7F:46:99:17:30:20:8F:F3:58:FC:5E
            X509v3 Authority Key Identifier:
                keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/EA7554AC82D011EA8BCCCA64C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.1.0-63.140.2.255
                  63.140.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:ff:7c:6e:ee:e9:2c:e0:7f:36:5f:54:9c:f9:29:08:27:68:
         c8:5f:32:c4:91:13:06:e8:e3:13:85:80:c8:5a:c7:c7:c5:cf:
         fc:6f:3b:87:19:c2:b9:1e:81:02:33:71:94:46:49:25:23:24:
         38:3a:8a:91:ac:7b:52:b0:90:3a:0f:d8:43:d6:1e:cb:e4:15:
         38:13:29:15:83:c4:15:ff:4d:b2:23:89:33:ba:6d:63:89:20:
         34:77:5a:48:41:3f:d5:c2:e4:d4:7f:5d:16:30:0b:dd:2b:15:
         ea:e8:cd:9c:89:8c:d1:75:38:98:bc:9a:71:11:81:3c:32:9a:
         d1:d7:ea:2d:87:db:a3:7d:a7:c2:0d:9e:6e:67:b1:53:13:58:
         5f:17:96:64:a1:a9:9d:a4:94:31:de:fb:cb:db:7f:71:5a:62:
         ba:02:9a:24:69:78:5d:e3:6e:29:40:c9:3c:16:70:4f:76:e6:
         ad:d7:9d:ed:0c:95:82:75:5b:69:d3:b8:c7:16:52:b3:c9:81:
         bd:a9:07:c0:73:06:4f:a0:65:fb:f1:ef:c7:46:8a:9e:14:76:
         1f:7a:d8:cd:d5:6a:56:3f:48:dc:63:f6:3a:bb:f9:70:3c:c7:
         31:55:8c:51:72:79:63:ca:05:47:7b:c8:40:05:9d:07:35:68:
         75:f6:22:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:22 2025 by rpki-client