This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/55B2771AC91911F0BA7D4C6DC4F9AE02.roa
File:                     55B2771AC91911F0BA7D4C6DC4F9AE02.roa (raw, json)
Hash identifier:          +Lyza8h2/Z4uXs2d+lFs1I7p0cxofH7YS5tzMbCiLyc=
Subject key identifier:   86:17:0C:C8:2A:1A:C8:16:53:DC:16:72:9F:95:FC:83:FE:AF:B9:F2
Certificate issuer:       /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial:       10
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/55B2771AC91911F0BA7D4C6DC4F9AE02.roa
Signing time:             Mon 24 Nov 2025 09:38:30 +0000
ROA not before:           Mon 24 Nov 2025 09:38:30 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     137058
IP address blocks:        61.19.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
        Validity
            Not Before: Nov 24 09:38:30 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69242796-0ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:78:74:87:6f:e8:72:a4:4a:69:24:13:9d:a1:
                    e2:b1:05:9f:04:dd:0b:93:6f:74:60:b3:a7:33:97:
                    bb:e2:6e:af:a7:14:4d:5d:11:75:c5:85:99:ea:b0:
                    e5:8d:67:a7:09:f2:50:e7:09:b0:e9:66:f0:3e:e8:
                    e3:8c:ab:20:20:04:47:3b:86:83:74:b5:5e:58:43:
                    e3:bd:00:88:97:0e:94:27:05:71:fc:71:20:d8:69:
                    74:af:93:4a:3e:b7:04:50:b8:ef:f1:44:a0:e9:19:
                    45:b6:c1:ba:ee:0b:e7:eb:02:11:62:b7:83:8a:8c:
                    40:7b:8b:c7:82:bb:85:85:a7:be:94:87:1a:ee:dd:
                    26:40:4a:41:24:10:7a:3a:73:01:19:e7:89:e1:50:
                    10:cc:f3:37:be:7f:8f:c5:f9:70:6d:03:ff:9e:0f:
                    e4:46:1f:18:17:54:47:9e:18:47:3c:12:d6:de:fc:
                    1b:87:bb:47:4e:62:e1:ac:f5:e2:71:c9:64:02:de:
                    7a:96:5d:5d:84:4e:75:85:17:f6:e9:f6:4c:30:ae:
                    19:d9:ef:05:45:33:0a:2e:b6:b0:ea:44:c3:d5:73:
                    bc:14:66:75:f8:8d:e6:01:c8:a8:38:e9:73:9e:4c:
                    e7:64:fe:3c:ed:2e:fb:93:e4:22:b9:0a:64:37:e4:
                    cb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:17:0C:C8:2A:1A:C8:16:53:DC:16:72:9F:95:FC:83:FE:AF:B9:F2
            X509v3 Authority Key Identifier:
                keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/55B2771AC91911F0BA7D4C6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.19.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:33:4f:e9:26:cd:1e:e4:9b:4b:80:f3:ff:a8:df:59:22:24:
         38:4d:ee:68:c4:5b:bb:85:ed:c9:bb:e6:b6:dd:35:96:f5:68:
         79:59:3d:01:64:ed:5d:1c:d5:16:ea:34:35:a3:43:e8:95:1e:
         79:d3:ac:73:62:0e:59:35:1e:2a:c3:ca:14:2a:71:78:92:94:
         8b:3a:ab:47:44:3e:d0:7c:7d:9a:aa:1a:b0:f6:ba:88:ae:e1:
         0d:08:b0:c7:2a:f2:9e:00:4b:a9:07:33:d8:06:f1:b7:a3:dd:
         a8:16:16:39:2c:cc:03:4c:01:3c:50:df:17:dc:58:54:38:38:
         76:fa:48:84:c0:7a:93:d5:59:c1:81:82:6c:a7:f3:fd:f3:ab:
         c6:0a:c1:91:7e:26:ac:58:9b:ab:ed:36:ad:f4:88:b4:7e:71:
         12:f9:9a:de:14:fd:67:d0:b6:81:21:f4:2d:04:8e:ad:3d:70:
         37:b0:42:22:7d:1c:a4:65:cf:d5:92:aa:b1:41:1e:71:e8:18:
         03:43:1d:82:43:5f:40:82:46:b7:1c:48:51:aa:24:9c:bd:8c:
         20:48:e5:e3:bb:07:c5:46:be:5b:a8:4e:d8:98:2f:55:eb:e7:
         22:cf:8e:57:c1:b2:ca:26:b8:c3:69:10:f6:4c:99:23:a0:b9:
         55:1d:53:58
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NTk4RDExMC8GA1UEBRMoOUEzQTY3RUREQ0QwOTc3NTMzQTlBMEI4QzQ5RjRDMDEw
MEM4NTM5MTAeFw0yNTExMjQwOTM4MzBaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5MjQyNzk2LTBjYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCieHSHb+hypEppJBOdoeKxBZ8E3QuTb3Rgs6czl7vibq+nFE1dEXXFhZnqsOWN
Z6cJ8lDnCbDpZvA+6OOMqyAgBEc7hoN0tV5YQ+O9AIiXDpQnBXH8cSDYaXSvk0o+
twRQuO/xRKDpGUW2wbruC+frAhFit4OKjEB7i8eCu4WFp76Uhxru3SZASkEkEHo6
cwEZ54nhUBDM8ze+f4/F+XBtA/+eD+RGHxgXVEeeGEc8Etbe/BuHu0dOYuGs9eJx
yWQC3nqWXV2ETnWFF/bp9kwwrhnZ7wVFMwoutrDqRMPVc7wUZnX4jeYByKg46XOe
TOdk/jztLvuT5CK5CmQ35MvBAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUhhcMyCoa
yBZT3BZyn5X8g/6vufIwHwYDVR0jBBgwFoAUmjpn7dzQl3UzqaC4xJ9MAQDIU5Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0I4ODUzMUNBQzhF
QzExRjBBMzQ0QUI0NUM0RjlBRTAyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbWpwbjdkelFsM1V6cWFDNHhKOU1BUURJVTVFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTk4RC9CODg1MzFDQUM4RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi81NUIyNzcxQUM5
MTkxMUYwQkE3RDRDNkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAD0TEDANBgkqhkiG9w0BAQsFAAOCAQEAFjNP6SbNHuSbS4Dz
/6jfWSIkOE3uaMRbu4Xtybvmtt01lvVoeVk9AWTtXRzVFuo0NaND6JUeedOsc2IO
WTUeKsPKFCpxeJKUizqrR0Q+0Hx9mqoasPa6iK7hDQiwxyryngBLqQcz2Abxt6Pd
qBYWOSzMA0wBPFDfF9xYVDg4dvpIhMB6k9VZwYGCbKfz/fOrxgrBkX4mrFibq+02
rfSItH5xEvma3hT9Z9C2gSH0LQSOrT1wN7BCIn0cpGXP1ZKqsUEecegYA0MdgkNf
QIJGtxxIUaoknL2MIEjl47sHxUa+W6hO2JgvVevnIs+OV8Gyyia4w2kQ9kyZI6C5
VR1TWA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 04:35:06 2025 by rpki-client