This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/7CCDD124BEC811F09972220FC4F9AE02.roa
File:                     7CCDD124BEC811F09972220FC4F9AE02.roa (raw, json)
Hash identifier:          kF3MsF0LKW2hpCo2tc4HdlJWfcSXM3xD20g6oUSt0Tw=
Subject key identifier:   0E:B5:3B:E6:C5:9D:A7:3E:1D:8F:D3:E7:7E:1E:CC:9B:76:FE:D3:65
Certificate issuer:       /CN=A915E131/serialNumber=005704403B95E58D8C4E71BF153DA3F264A9865C
Certificate serial:       05
Authority key identifier: 00:57:04:40:3B:95:E5:8D:8C:4E:71:BF:15:3D:A3:F2:64:A9:86:5C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/7CCDD124BEC811F09972220FC4F9AE02.roa
Signing time:             Tue 11 Nov 2025 06:34:34 +0000
ROA not before:           Tue 11 Nov 2025 06:34:34 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     154355
IP address blocks:        138.252.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl
                          rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 06:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E131, serialNumber=005704403B95E58D8C4E71BF153DA3F264A9865C
        Validity
            Not Before: Nov 11 06:34:34 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6912d8fa-061a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:35:3a:b4:b2:e1:bf:93:ff:69:cf:20:3b:68:
                    8c:c5:2d:06:f5:bd:8a:6c:7d:f2:5f:e7:d7:25:7a:
                    14:bb:37:3b:c2:82:2c:30:e9:f9:f3:55:01:28:fe:
                    ac:18:59:ff:e7:f8:f0:29:0b:4c:58:4a:9d:8c:73:
                    79:de:a6:6b:43:d5:e0:99:a6:aa:cf:cc:c7:40:cc:
                    0d:10:29:f3:23:d1:37:d8:2a:84:94:87:7a:58:f6:
                    ad:2d:76:16:a0:29:ac:a7:11:79:af:0e:62:3b:65:
                    fa:22:47:5d:a8:95:85:9f:bd:dd:87:99:fc:03:54:
                    7a:02:09:4d:f6:20:2e:03:36:2d:89:e0:ea:b8:32:
                    d3:93:3b:26:43:3d:47:94:9d:ee:e9:e8:bc:a1:56:
                    ed:25:b9:9d:90:31:02:13:92:15:97:94:f6:75:8f:
                    ab:84:1e:5c:62:11:a6:80:ec:1c:4c:f8:89:f2:54:
                    a3:85:6b:a6:bb:62:a6:6e:33:c8:86:d0:00:b3:22:
                    fc:03:68:fb:86:20:36:a1:4b:aa:2a:8b:91:67:06:
                    55:f2:81:16:e1:2d:fb:91:a6:6e:fd:3d:dd:60:1e:
                    a3:7e:f4:35:1e:88:36:1a:38:1a:7c:6e:87:cf:13:
                    90:a1:8d:0c:8b:2a:28:8e:65:dc:8e:e2:4b:fe:c9:
                    d9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B5:3B:E6:C5:9D:A7:3E:1D:8F:D3:E7:7E:1E:CC:9B:76:FE:D3:65
            X509v3 Authority Key Identifier:
                keyid:00:57:04:40:3B:95:E5:8D:8C:4E:71:BF:15:3D:A3:F2:64:A9:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/7CCDD124BEC811F09972220FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:41:a7:d3:4c:5b:71:d2:4f:22:3b:c4:a2:91:37:3f:ba:49:
         04:8e:d5:7c:30:5c:b0:4a:48:40:85:b4:14:59:12:cc:f3:f3:
         6b:f5:cf:3f:e1:7d:a9:0f:eb:2f:0e:17:20:11:fc:d6:52:01:
         ab:7d:53:1b:8c:c0:0c:c6:f4:ad:98:44:04:b1:10:9d:f8:57:
         21:0a:bc:e2:f7:28:23:dd:15:ef:e3:89:20:0e:7f:7c:42:93:
         22:6c:c2:11:37:30:05:73:90:75:7b:60:c3:b2:6f:d8:50:55:
         82:43:af:b6:37:a9:b6:72:31:0c:e3:ed:fa:7b:6c:ff:17:38:
         2a:90:e2:ca:9b:c7:31:3d:6e:89:d5:fd:84:c1:88:03:0e:ec:
         6f:bc:b1:35:c7:92:ec:a9:97:7b:9a:a8:fd:0b:56:b4:62:6d:
         13:da:a8:19:ae:50:f5:2c:3e:08:ff:29:38:e1:7d:16:3c:41:
         ff:21:d9:cb:d7:ff:7e:34:06:d1:5e:9f:0f:9d:c4:a4:f6:0d:
         49:be:0c:2e:32:83:4c:c9:09:78:0d:7c:f5:2c:5b:ba:ac:f5:
         1e:64:4f:78:61:7e:92:d3:ac:0b:e2:c2:22:1b:2c:86:5b:54:
         7b:dd:b7:dd:58:ba:9a:c3:d1:a1:1b:b2:53:13:e2:b9:e0:2a:
         0b:a7:38:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:52:47 2025 by rpki-client