This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/A81364AC4B0611EF91534014C4F9AE02.roa
File:                     A81364AC4B0611EF91534014C4F9AE02.roa (raw, json)
Hash identifier:          efnu/0Jtb/6C3HwcOejChV2lA0Y4knvd4d3kMkHw2tg=
Subject key identifier:   03:B9:6B:F4:40:C9:79:16:4F:47:F2:28:1A:79:57:D0:E4:97:E2:FD
Certificate issuer:       /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329
Certificate serial:       0AD8
Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/A81364AC4B0611EF91534014C4F9AE02.roa
Signing time:             Sat 08 Nov 2025 19:10:03 +0000
ROA not before:           Sat 08 Nov 2025 19:10:03 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        27.124.61.0/24 maxlen: 24
                          182.173.70.0/24 maxlen: 24
                          182.173.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl
                          rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2776 (0xad8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329
        Validity
            Not Before: Nov  8 19:10:03 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=690f958b-41db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:80:df:24:88:6d:d3:4e:18:ad:1d:58:d1:31:
                    61:36:88:f4:e8:fd:aa:a6:43:6c:a2:25:75:14:51:
                    7f:e8:cb:94:97:36:be:4e:55:23:1e:ab:f8:64:bc:
                    2d:15:64:ef:73:84:d6:9d:da:6d:2d:e6:0f:41:22:
                    53:45:4c:29:59:b0:44:88:37:54:25:ad:ad:01:cb:
                    78:18:77:9a:50:f7:a5:7d:a1:72:c3:fa:8d:52:62:
                    79:6b:34:28:ca:6d:88:db:3e:a4:66:32:f0:59:7c:
                    91:8c:c4:fc:b7:f4:7d:75:6b:c8:02:e8:2a:a0:c8:
                    d2:04:9a:26:58:9b:23:6a:16:2a:5a:0b:c5:24:cc:
                    0e:c0:e3:68:2e:b7:80:0e:1d:37:96:ad:c1:ff:f5:
                    ce:87:ec:71:99:f4:37:8a:6f:44:5e:84:8d:47:a2:
                    2b:a9:d0:fa:dc:25:53:59:e2:17:e7:24:d3:b1:93:
                    d9:6a:05:d0:3f:53:87:2f:1b:0b:c1:c5:e6:83:f5:
                    7f:c6:90:7f:db:5b:be:c4:3f:2d:6d:a1:39:03:d2:
                    f7:98:c4:6e:38:df:6b:e2:90:87:dc:8e:64:67:fe:
                    b6:e4:79:27:b9:cf:e2:20:b6:56:cc:09:4c:5d:4b:
                    4a:48:66:65:f7:86:d6:cd:76:62:da:26:17:b6:89:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B9:6B:F4:40:C9:79:16:4F:47:F2:28:1A:79:57:D0:E4:97:E2:FD
            X509v3 Authority Key Identifier:
                keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/A81364AC4B0611EF91534014C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.61.0/24
                  182.173.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:d5:62:08:ab:0b:6e:15:99:c6:c1:c2:19:d3:85:97:e6:a5:
         24:62:1e:8f:54:83:98:e8:91:d6:81:f1:30:83:b6:cb:e4:39:
         ec:0d:6e:66:0a:88:b9:fe:f9:31:b9:e5:90:5e:e1:24:10:04:
         3f:50:89:85:db:9e:91:2b:2b:75:3a:c5:a6:fa:01:fb:de:1b:
         ce:05:0a:7e:11:c3:ba:3e:01:83:7d:1d:da:e1:34:22:bd:3a:
         cd:47:dd:0a:5d:ec:a0:7e:38:9c:54:8f:a0:e2:d3:a1:51:96:
         ff:5d:29:1e:4f:bf:35:72:ba:17:f5:0f:2d:c4:fe:48:7e:aa:
         8c:77:aa:69:06:66:b7:3e:3e:e1:14:6b:88:a8:e7:88:27:41:
         06:bb:6b:00:75:aa:56:64:26:38:dd:53:bc:b1:f7:bf:96:32:
         8a:a0:03:4b:db:3e:ef:37:12:ec:ac:9c:90:e4:20:57:f2:f5:
         62:8b:79:ee:f0:8d:3d:f1:37:df:7d:01:0c:e4:87:c9:78:3b:
         36:d1:92:6a:fb:ed:ee:2a:56:4f:f9:c1:4c:a1:1e:f6:7d:3b:
         e4:e0:a0:6f:8b:0c:6c:6b:3a:fe:8c:6d:bc:42:32:9c:6a:b7:
         40:22:df:fa:8d:9a:2a:98:fd:12:3a:26:fa:42:3c:43:f2:65:
         ff:21:42:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:43:22 2025 by rpki-client