This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/EC065A52C28D11EBBCABCA6CC4F9AE02.roa
File:                     EC065A52C28D11EBBCABCA6CC4F9AE02.roa (raw, json)
Hash identifier:          D5/phfHv7NRnNh1uVB5OcYl3HKLOcCjwwCcn5LIOY04=
Subject key identifier:   59:A8:8D:6B:B3:CF:60:9E:CE:3F:0B:45:22:AC:69:0E:10:51:5A:6D
Certificate issuer:       /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Certificate serial:       17B9
Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/EC065A52C28D11EBBCABCA6CC4F9AE02.roa
Signing time:             Thu 04 Dec 2025 16:16:03 +0000
ROA not before:           Thu 04 Dec 2025 16:16:03 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     56207
IP address blocks:        139.135.192.0/22 maxlen: 22
                          139.135.196.0/22 maxlen: 22
                          139.135.200.0/22 maxlen: 22
                          139.135.204.0/22 maxlen: 22
                          139.135.208.0/22 maxlen: 22
                          139.135.212.0/22 maxlen: 22
                          139.135.216.0/22 maxlen: 22
                          139.135.220.0/22 maxlen: 22
                          139.135.224.0/22 maxlen: 22
                          139.135.228.0/22 maxlen: 22
                          139.135.232.0/22 maxlen: 22
                          139.135.236.0/22 maxlen: 22
                          139.135.240.0/22 maxlen: 22
                          139.135.244.0/22 maxlen: 22
                          139.135.248.0/22 maxlen: 22
                          139.135.252.0/22 maxlen: 22
                          139.135.252.0/23 maxlen: 23
                          139.135.254.0/24 maxlen: 24
                          139.135.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl
                          rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6073 (0x17b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
        Validity
            Not Before: Dec  4 16:16:03 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6931b3c3-54b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:65:74:55:17:8c:2e:6d:4b:9a:61:62:f9:
                    65:ea:d7:34:c5:0b:39:cd:3d:10:c3:9c:7b:9b:65:
                    b3:3e:5e:50:0a:27:ed:d5:56:28:48:85:9c:6c:20:
                    45:d8:0f:7b:fd:e1:63:18:75:3c:94:7e:e3:b8:fa:
                    07:cf:ff:4d:10:fe:6d:af:c0:b2:79:6b:e4:00:22:
                    41:fb:e6:ba:f6:f4:cb:ca:db:99:35:fe:07:1f:29:
                    f5:22:32:66:d8:f6:2b:3b:cb:cd:c9:4c:01:16:15:
                    33:a4:cf:2e:a4:30:aa:09:a1:ba:b5:29:f2:6d:bd:
                    4b:1c:81:a2:95:48:72:18:21:29:57:d6:da:e2:88:
                    08:51:ca:d2:8b:82:07:62:94:41:d0:9f:8a:4b:8e:
                    e6:28:12:ba:b3:73:8c:24:76:67:c8:da:92:63:16:
                    4b:2c:87:59:e4:62:9d:82:12:11:04:d8:d3:15:36:
                    71:ed:76:81:bd:2c:bc:1b:ac:77:11:b6:c3:d7:43:
                    e3:61:e4:21:ee:73:13:39:5e:0c:72:ab:c0:62:ee:
                    53:a3:c9:68:cb:84:37:0b:fd:43:42:47:4d:07:ac:
                    bf:94:57:d5:dd:81:c2:d8:90:ba:bf:39:fe:9f:b0:
                    d3:97:2e:d9:d7:3c:dd:28:48:68:2c:3f:3a:54:2d:
                    02:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A8:8D:6B:B3:CF:60:9E:CE:3F:0B:45:22:AC:69:0E:10:51:5A:6D
            X509v3 Authority Key Identifier:
                keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/EC065A52C28D11EBBCABCA6CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.135.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2a:ea:a7:c2:ae:1b:3e:ab:f2:ee:ec:63:51:bc:34:c8:35:60:
         22:ea:50:88:95:d8:c4:7c:2e:80:1d:4f:fe:9f:bd:23:0c:1e:
         5e:59:d4:87:ae:6a:97:a0:f7:4f:05:28:dd:0b:31:bf:b4:53:
         07:02:63:b7:41:bd:fe:c8:53:6c:10:73:42:0f:cb:bb:6b:5f:
         5b:ed:2c:f1:86:61:83:b4:8f:3b:55:c5:a8:7d:13:f5:b1:c8:
         23:c3:87:c2:77:69:ae:8e:6d:40:66:94:e1:69:b6:93:92:92:
         0f:72:f3:3d:b2:c3:01:e5:eb:94:2f:0b:40:2a:81:14:2d:0e:
         b3:ac:30:86:2b:2b:2d:f9:69:1c:bc:61:f0:d1:f0:ec:d2:87:
         24:75:6a:4a:04:78:5c:50:67:59:26:97:c0:01:30:25:cc:85:
         61:cc:b4:93:50:58:83:9f:de:d7:e5:55:95:1e:de:e9:cb:22:
         3b:f6:08:5c:10:38:13:ee:4c:a0:d5:7c:77:ae:5e:c4:08:8c:
         9d:39:0c:d6:bd:34:25:7e:bb:a5:f0:5a:79:14:78:8d:bb:88:
         bd:92:f2:a4:b1:2a:26:ea:ef:a6:c1:ac:49:b5:d6:2f:53:45:
         6d:0a:cc:f1:91:fd:d4:ba:02:1c:38:59:64:1a:53:45:40:6a:
         f7:9f:d0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 23:47:10 2025 by rpki-client