This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/99E52804462E11ED90035452C4F9AE02.roa
File:                     99E52804462E11ED90035452C4F9AE02.roa (raw, json)
Hash identifier:          zxfAEewqEIDozNRd2wIy4OCBkhmBpCjLntjcObVaFpE=
Subject key identifier:   43:51:C7:F0:1B:ED:CA:5F:86:6E:16:10:61:FA:85:4E:CD:FA:76:8A
Certificate issuer:       /CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE
Certificate serial:       026B
Authority key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/99E52804462E11ED90035452C4F9AE02.roa
Signing time:             Thu 27 Nov 2025 00:17:49 +0000
ROA not before:           Thu 27 Nov 2025 00:17:49 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     133748
IP address blocks:        206.131.192.0/24 maxlen: 24
                          206.131.193.0/24 maxlen: 24
                          206.131.194.0/24 maxlen: 24
                          206.131.195.0/24 maxlen: 24
                          206.131.196.0/24 maxlen: 24
                          206.131.197.0/24 maxlen: 24
                          206.131.198.0/24 maxlen: 24
                          206.131.199.0/24 maxlen: 24
                          206.131.200.0/24 maxlen: 24
                          206.131.201.0/24 maxlen: 24
                          206.131.202.0/24 maxlen: 24
                          206.131.203.0/24 maxlen: 24
                          206.131.204.0/24 maxlen: 24
                          206.131.205.0/24 maxlen: 24
                          206.131.206.0/24 maxlen: 24
                          206.131.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl
                          rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 619 (0x26b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DC74, serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE
        Validity
            Not Before: Nov 27 00:17:49 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692798ac-daea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ff:9d:28:3e:e3:8f:d8:e1:1a:21:1d:9f:ad:
                    f5:06:ea:83:b6:df:97:02:83:ac:3c:e6:2e:18:e7:
                    f7:7e:af:bb:bd:f1:cb:91:2a:c9:ad:54:4a:44:c3:
                    62:1c:77:d9:3a:76:09:2a:e4:d6:d0:84:ac:eb:d1:
                    6b:a3:70:fd:7d:6a:97:fe:78:97:0b:02:53:7e:a6:
                    da:8e:cc:e9:58:d5:86:cd:31:b1:a8:b0:a8:af:a7:
                    4a:6d:8f:d9:b3:b1:c6:5a:97:f0:18:35:4e:dc:ab:
                    90:d6:2d:77:84:90:94:f2:73:10:db:81:dc:ed:1e:
                    f6:93:61:4e:7d:78:a7:bc:d1:95:53:94:61:03:0c:
                    15:21:fd:02:ee:70:83:b2:24:1b:94:6d:09:73:7e:
                    fc:da:56:7d:8e:be:0d:bf:3f:ed:41:8b:71:76:76:
                    cc:c4:4d:4c:b8:50:b9:cb:a3:3a:da:7c:38:83:72:
                    31:d8:f1:99:8e:85:11:3e:45:a2:e4:69:89:71:ae:
                    91:6a:27:80:a2:1c:53:a3:15:2f:b2:e4:7c:7e:f9:
                    32:e1:fd:1e:a4:71:08:b9:a5:bc:cd:64:06:ab:9c:
                    b8:f7:30:38:a7:24:04:9c:30:d9:2b:47:0c:1f:7e:
                    88:ec:08:50:9b:aa:ea:2f:ef:bf:af:ad:09:83:23:
                    18:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:51:C7:F0:1B:ED:CA:5F:86:6E:16:10:61:FA:85:4E:CD:FA:76:8A
            X509v3 Authority Key Identifier:
                keyid:8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/99E52804462E11ED90035452C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.131.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:6f:bb:d3:53:00:a7:c9:a2:1f:4e:a7:37:70:20:d0:2f:49:
         dc:24:82:03:68:81:12:d4:2f:e4:ff:09:2f:48:f4:fa:58:54:
         35:eb:11:b4:50:76:56:31:00:af:a0:8c:67:35:d0:1f:30:9a:
         81:fc:3f:a3:f0:82:04:89:5b:2e:62:40:c5:3c:b3:01:0b:33:
         22:ca:92:38:fc:48:d4:e9:22:18:95:3c:66:f3:d1:01:0d:e3:
         bf:2c:ff:61:93:d1:c0:72:ae:72:e3:0b:7b:2c:c1:2b:95:df:
         29:9b:dc:74:2b:1c:f3:05:86:45:72:66:70:e4:44:37:4d:30:
         4d:d7:d5:26:22:70:59:10:be:2f:b0:db:16:e9:bd:02:86:db:
         49:ea:31:c1:02:c5:29:15:d5:e4:2d:14:aa:3e:d7:dd:b4:b2:
         09:08:a0:7b:54:cb:f3:88:92:77:a2:a5:e0:a5:66:5a:e8:b6:
         a0:cf:8f:28:49:0a:f7:ad:42:c9:1c:9f:04:5c:30:65:82:c6:
         3c:ff:40:8a:f0:82:aa:5b:6d:a0:d8:ce:0a:c6:2d:4d:f8:9b:
         74:2c:11:c0:86:fe:ae:2c:2e:7d:dc:5a:b6:24:02:31:b7:bc:
         8e:77:21:2b:37:29:c1:c8:b4:36:ef:73:a4:4e:2e:9d:5c:8d:
         bf:ab:5f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:27:44 2025 by rpki-client