This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/EAEC9066690E11EF9396CC48C4F9AE02.roa
File:                     EAEC9066690E11EF9396CC48C4F9AE02.roa (raw, json)
Hash identifier:          2vWk3DGkjeXEl7FbZy0aavCh6asq08aBokPfmXkrJdc=
Subject key identifier:   80:10:4E:0E:28:F9:68:5F:9A:E7:D6:23:7F:63:4C:B7:DD:EF:FF:AE
Certificate issuer:       /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial:       03D4
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/EAEC9066690E11EF9396CC48C4F9AE02.roa
Signing time:             Tue 02 Dec 2025 23:59:02 +0000
ROA not before:           Tue 02 Dec 2025 23:59:02 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     140662
IP address blocks:        119.63.70.0/24 maxlen: 24
                          119.63.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 23:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980 (0x3d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
        Validity
            Not Before: Dec  2 23:59:02 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692f7d46-87b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9a:ee:28:d9:db:aa:81:cb:91:e0:1d:5e:1f:
                    b6:e2:19:ea:1b:fa:d2:42:79:f2:04:37:ce:38:bc:
                    a2:aa:3a:d2:21:64:9d:ab:56:c1:2e:8b:b3:7f:df:
                    66:e7:76:22:2c:ed:7b:8c:fe:0d:7b:f9:8d:50:90:
                    38:69:74:a4:38:79:3a:10:9b:26:59:98:db:06:59:
                    23:79:84:3d:75:06:5f:52:87:d7:3a:54:d8:6d:d9:
                    9f:d1:69:2f:a8:d0:23:e1:34:a9:39:26:81:ff:9f:
                    f9:f2:02:9a:ac:dd:18:6b:81:ff:2d:45:33:15:da:
                    7e:b6:fb:ce:a0:af:e3:06:1f:8d:47:b6:d1:2a:1b:
                    dc:81:95:a2:d1:96:a9:22:51:00:3b:e5:c1:71:dc:
                    11:31:b8:54:6f:f5:5f:b1:11:0b:04:bb:f9:3f:2a:
                    c5:cd:3d:ad:0d:ec:20:f9:1e:e0:44:34:ee:aa:2d:
                    e3:43:55:ea:1b:39:fb:d9:94:22:51:e1:8a:a9:8b:
                    18:2a:3d:4b:90:d4:63:60:5e:c6:c3:69:e4:1f:b0:
                    23:f5:98:46:cd:50:5d:85:58:f2:fd:59:c8:71:2d:
                    38:4b:39:20:ec:51:aa:e0:28:79:e5:34:d9:3f:70:
                    a6:86:a1:be:ad:37:37:a8:b8:ef:f2:90:b7:df:3f:
                    d4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:10:4E:0E:28:F9:68:5F:9A:E7:D6:23:7F:63:4C:B7:DD:EF:FF:AE
            X509v3 Authority Key Identifier:
                keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/EAEC9066690E11EF9396CC48C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.63.70.0/24
                  119.63.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:37:a1:6b:9b:b5:4e:26:a2:e7:1b:6f:ce:7f:ea:0f:0a:5d:
         69:4c:25:d7:74:58:7e:49:25:d3:9c:e1:22:aa:a3:93:7a:72:
         6f:af:6e:9a:b2:f0:f3:97:1b:f6:aa:cb:ac:42:35:13:00:ff:
         ca:0d:ec:e2:78:d2:bd:98:d5:b2:25:10:a1:ed:40:11:8c:b6:
         e9:a3:ef:d4:2f:e2:57:b9:e2:98:c5:c7:e2:1f:d7:af:3a:10:
         34:e7:12:22:51:e8:d5:d0:4e:ba:b9:bd:b7:ab:c6:2f:4b:22:
         3f:56:bc:93:1d:78:02:43:d6:1b:3b:cf:18:7f:3f:35:5f:32:
         b0:42:d3:13:44:26:23:23:ad:00:cf:9a:1b:5a:e3:f5:25:e6:
         99:d6:a4:92:b2:f2:9e:da:4e:29:04:9e:d4:03:4f:07:51:16:
         27:28:cf:5a:3c:87:3c:d1:2f:4b:a7:19:b6:99:15:e8:92:e6:
         94:32:c1:93:7e:34:60:b0:94:9b:18:0f:6d:35:e7:a2:cc:49:
         b1:44:dd:aa:6e:03:7d:89:94:da:5f:2c:16:8d:68:42:a0:f7:
         ef:84:75:53:60:90:1d:d4:2f:bf:24:bb:e1:2e:5a:f7:b0:66:
         fa:0d:cc:47:66:f5:cf:6a:0f:28:b5:93:10:9a:04:2a:77:83:
         58:a3:5a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 14:45:37 2025 by rpki-client