This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/B364F656C0AD11EEACCA627AC4F9AE02.roa
File:                     B364F656C0AD11EEACCA627AC4F9AE02.roa (raw, json)
Hash identifier:          JABgVO7prSck9fbCln3+qySnrKsMtx5IICa3wzwukPI=
Subject key identifier:   55:E7:7B:1E:DB:D1:49:E0:BC:C6:3B:92:03:75:35:4F:BB:C7:DC:F2
Certificate issuer:       /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Certificate serial:       0AD6
Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/B364F656C0AD11EEACCA627AC4F9AE02.roa
Signing time:             Thu 20 Nov 2025 19:10:19 +0000
ROA not before:           Thu 20 Nov 2025 19:10:19 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     64079
IP address blocks:        61.29.244.0/22 maxlen: 24
                          61.29.254.0/23 maxlen: 23
                          61.29.254.0/24 maxlen: 24
                          103.211.192.0/24 maxlen: 24
                          103.211.193.0/24 maxlen: 24
                          146.196.78.0/23 maxlen: 24
                          2400:9380:9265::/48 maxlen: 48
                          2400:9380:f000::/40 maxlen: 40
                          2400:9380:f100::/40 maxlen: 40
                          2400:9380:f200::/40 maxlen: 40
                          2400:9380:f300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
                          rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2774 (0xad6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
        Validity
            Not Before: Nov 20 19:10:19 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=691f679a-dfb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c7:02:e3:21:3c:a7:c8:56:6c:27:cc:a4:2a:
                    25:35:4c:6c:31:50:02:29:48:b0:f6:8b:2e:70:fa:
                    93:43:06:9e:85:7b:9f:48:29:a7:e2:9a:79:ae:f6:
                    d2:20:31:1d:0b:e3:cc:42:d7:da:54:ca:6d:66:0e:
                    75:11:ae:d0:49:eb:44:67:3b:30:1d:86:bd:2e:b8:
                    47:fe:18:c0:c6:d7:f7:3e:4f:a0:cd:3c:62:a8:8d:
                    e5:fe:b3:f7:c3:d3:50:3d:e5:e2:4b:0e:b2:7d:0f:
                    43:d7:97:99:26:df:ea:7d:55:53:89:33:85:9d:07:
                    57:b0:74:92:90:23:74:d4:76:6c:74:50:89:bd:98:
                    7f:51:7b:f1:44:67:ba:27:c3:9c:af:bf:dd:71:f1:
                    9e:86:4e:c6:c3:67:f8:d9:49:cc:2e:b3:f8:79:22:
                    86:70:96:63:c7:64:4d:8e:b9:9e:58:13:f1:95:9b:
                    37:73:e5:c2:2d:9f:ab:2f:5e:31:f7:55:8d:82:cd:
                    33:03:22:83:29:c3:3c:65:a2:2d:18:da:ff:b8:29:
                    1f:f0:40:8b:4f:33:cd:2d:18:37:c1:1f:a4:09:9b:
                    ba:b9:9d:3a:57:54:9a:72:fa:84:3d:99:12:7d:f4:
                    d1:7c:77:2e:82:3c:6f:b8:63:f0:f5:2b:35:21:65:
                    5f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E7:7B:1E:DB:D1:49:E0:BC:C6:3B:92:03:75:35:4F:BB:C7:DC:F2
            X509v3 Authority Key Identifier:
                keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/B364F656C0AD11EEACCA627AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.29.244.0/22
                  61.29.254.0/23
                  103.211.192.0/23
                  146.196.78.0/23
                IPv6:
                  2400:9380:9265::/48
                  2400:9380:f000::/38

    Signature Algorithm: sha256WithRSAEncryption
         24:ae:0a:0b:f2:a7:10:50:37:06:4c:df:a9:40:d3:7d:54:56:
         16:b7:d3:48:6b:1f:d8:22:14:f8:38:87:33:20:ff:c2:51:13:
         35:06:13:db:f5:6a:20:fa:28:f5:7d:00:b1:5b:fe:7a:2c:93:
         4c:61:f4:d5:67:a8:96:43:30:e2:c1:64:dc:d2:fe:fe:70:be:
         9f:25:9d:68:8e:5f:48:6e:9d:94:50:00:9d:15:2b:00:ac:a2:
         89:6e:bf:af:01:2a:30:08:5f:01:fe:2e:44:ac:bc:f2:54:ba:
         95:27:19:53:1e:4a:1e:94:c8:85:07:c1:71:7a:a8:4c:dc:60:
         56:63:7d:df:47:b2:f1:b6:e9:bc:92:57:33:48:a4:05:ed:ec:
         9f:5b:39:2a:e6:08:1a:68:ba:9b:b4:96:28:46:8a:5f:4a:cf:
         be:e2:b5:ab:ba:ce:46:01:d0:29:0f:97:f9:e1:ff:4e:e4:20:
         de:9d:59:ce:3e:b2:9a:42:a6:3c:e7:d9:4f:c6:23:b5:03:60:
         23:70:91:88:fa:10:b4:f7:c5:e1:ba:7b:9c:83:32:91:82:c5:
         78:88:a4:e7:e5:8b:e8:64:0b:0a:af:37:31:8b:01:ae:5a:86:
         70:2f:41:c3:18:8d:d6:c9:9f:79:80:64:fe:ba:2e:f5:82:72:
         bd:a8:ac:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:40:24 2025 by rpki-client