This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/B2F27AFAC92411F09F068126C4F9AE02.roa
File:                     B2F27AFAC92411F09F068126C4F9AE02.roa (raw, json)
Hash identifier:          DtE4Gub6HXNOtAF1R9QWTavpwFvcacPl8V38z7ZHdcg=
Subject key identifier:   F4:3A:7F:BD:B5:C6:76:49:C5:5E:E5:92:F4:00:BB:26:C2:6A:06:1B
Certificate issuer:       /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial:       42
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/B2F27AFAC92411F09F068126C4F9AE02.roa
Signing time:             Mon 24 Nov 2025 10:59:51 +0000
ROA not before:           Mon 24 Nov 2025 10:59:51 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     24042
IP address blocks:        61.19.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
        Validity
            Not Before: Nov 24 10:59:51 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69243aa6-226e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:eb:27:4c:7d:ab:27:04:30:25:c3:a7:f3:a6:
                    5f:c0:23:de:78:f8:d6:7e:60:bf:17:ce:3e:8b:1c:
                    d4:3b:4a:3d:a9:52:7c:c4:4f:b2:60:50:f1:78:15:
                    46:7a:6d:43:62:8a:25:03:bf:4b:b3:84:54:59:9b:
                    a3:c0:0e:60:cf:e2:8f:b9:18:32:ea:bb:14:11:e6:
                    23:fa:b7:69:9c:6f:ad:ad:0c:e7:cf:44:45:91:92:
                    74:84:92:7d:83:62:6c:37:03:28:91:d8:6b:d8:c2:
                    06:84:47:69:67:4e:59:f7:df:39:eb:90:44:72:f1:
                    d6:a1:34:5a:42:73:32:1d:55:67:3b:d0:be:cc:40:
                    32:fe:4c:56:9a:8a:c5:98:b2:27:96:e8:29:ee:9c:
                    05:84:cb:b1:93:d6:a7:ae:0b:17:d9:02:21:3d:e8:
                    ba:12:c3:d1:ef:a2:a4:86:48:c3:f3:2b:10:74:30:
                    1c:52:74:9c:57:70:a0:53:43:e3:ae:8e:a6:6c:c6:
                    a5:b2:c0:8c:6c:6d:1a:ff:c3:80:0f:82:26:9a:09:
                    52:d1:9a:db:4a:05:87:17:d2:33:7f:55:c4:61:dd:
                    94:8f:44:e5:70:b8:b6:89:8a:e9:17:e6:cd:99:88:
                    65:c5:41:ea:93:7e:92:65:71:c7:95:22:36:bc:a1:
                    2d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3A:7F:BD:B5:C6:76:49:C5:5E:E5:92:F4:00:BB:26:C2:6A:06:1B
            X509v3 Authority Key Identifier:
                keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/B2F27AFAC92411F09F068126C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.19.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:f4:e3:b6:e3:c3:2b:e2:5a:51:b3:59:1a:17:82:74:11:2a:
         3b:35:ea:f4:44:64:49:02:c0:d5:3b:f9:3e:b2:70:7d:ea:2e:
         2f:e4:b2:42:58:a2:16:29:6a:7e:e7:be:59:e5:28:c6:44:81:
         b8:57:49:fd:eb:82:f0:b6:2b:56:a4:63:e1:70:27:14:2e:72:
         5a:99:40:fe:00:e5:a4:24:38:94:e7:49:b2:35:55:08:7f:aa:
         50:ea:63:b9:78:61:82:48:97:43:44:81:fd:5d:ca:af:d4:b0:
         1b:6e:fe:ed:da:71:47:8d:ee:0e:bc:89:7c:0d:94:c7:49:4c:
         97:7f:50:0e:b5:75:bf:24:48:67:b0:79:0d:47:13:ac:59:41:
         0a:e5:50:52:38:85:58:89:30:e1:0a:be:61:bf:54:8b:cd:51:
         f6:7a:4a:ae:86:6f:e4:fc:da:6a:0b:15:9a:5e:a2:95:9e:cc:
         2a:43:5a:f6:60:95:3f:f7:04:e7:51:21:4a:61:b3:45:54:79:
         b6:2e:d3:c5:b9:53:df:10:af:b8:f9:b4:53:3a:fb:d4:1a:d2:
         c1:99:6a:01:68:3b:c2:00:c7:1d:43:dc:1e:19:98:b0:30:ab:
         88:6f:73:0f:84:56:08:f6:c5:59:75:7c:2e:91:e6:38:e5:a2:
         e9:47:78:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:35:05 2025 by rpki-client