This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/73DC26744B0611EF8698EB13C4F9AE02.roa
File:                     73DC26744B0611EF8698EB13C4F9AE02.roa (raw, json)
Hash identifier:          R1OUwwbFhRrvM5hkT+3nm1/8xxFGqJcsm+CwuQRS+mE=
Subject key identifier:   1B:F4:47:7B:B8:BE:F2:2E:35:3F:92:E0:E9:69:87:8E:CF:97:BE:D1
Certificate issuer:       /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329
Certificate serial:       0ADB
Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/73DC26744B0611EF8698EB13C4F9AE02.roa
Signing time:             Sat 08 Nov 2025 19:10:07 +0000
ROA not before:           Sat 08 Nov 2025 19:10:07 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     8987
IP address blocks:        27.124.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl
                          rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2779 (0xadb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329
        Validity
            Not Before: Nov  8 19:10:07 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=690f958e-7bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ea:c2:96:c8:8f:05:18:48:20:12:c1:98:f7:
                    e1:e2:62:83:4f:3f:5e:d3:d2:49:ca:0e:41:83:4a:
                    a6:7b:7c:67:69:3f:bc:94:df:4b:91:a4:48:f7:b6:
                    8f:a2:34:70:87:c5:65:fb:80:8d:67:ca:01:c2:2e:
                    55:3a:de:52:7f:34:35:be:4e:e6:20:a4:b5:ed:44:
                    84:bc:2a:e3:91:4c:8b:d3:41:b1:be:5f:d4:d3:ac:
                    e2:0e:a3:46:86:eb:e7:73:ed:0d:28:de:a0:57:97:
                    86:55:1d:91:36:eb:8a:61:3b:b3:a6:f8:4b:f3:6e:
                    03:ba:c1:28:12:e4:05:9f:2b:3f:d1:dc:f0:ce:33:
                    fd:17:dd:b5:e5:f7:af:64:bf:be:d6:0b:a5:0d:a9:
                    28:62:e2:4c:79:8d:56:6e:ae:e9:8b:c6:91:27:e1:
                    af:40:e0:ac:e3:d8:d1:70:17:ae:1e:38:16:ad:11:
                    ed:bb:bc:e3:93:7f:b2:7c:4b:f8:78:29:16:65:77:
                    24:ab:60:d6:fc:01:ea:07:e4:93:2e:8d:ce:95:29:
                    ee:f3:8e:99:79:06:c1:65:ab:87:13:46:58:0a:0e:
                    46:eb:4c:0e:cf:e1:c4:77:1a:60:69:c6:6a:68:c2:
                    cf:3c:f6:a4:71:7f:37:ed:d2:d3:32:9e:1a:77:76:
                    e0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F4:47:7B:B8:BE:F2:2E:35:3F:92:E0:E9:69:87:8E:CF:97:BE:D1
            X509v3 Authority Key Identifier:
                keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/73DC26744B0611EF8698EB13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:8f:f6:c2:03:eb:40:bd:18:c9:46:89:d6:fd:76:d0:a5:00:
         1e:a9:ab:44:42:8d:a0:6a:0d:6b:63:15:78:72:5e:d4:30:ce:
         e5:61:76:35:03:84:15:31:29:ea:eb:87:25:8f:da:db:ac:bd:
         37:36:a1:00:b9:7a:b4:c3:21:65:45:fd:b5:24:8a:e4:88:40:
         9e:ac:ad:f2:48:36:dd:ab:37:22:81:98:fd:f0:0d:f4:73:28:
         cf:8f:ea:e0:fc:a8:7b:b2:d6:a7:09:7c:c1:6d:bd:7d:02:62:
         45:c4:46:99:93:c9:c9:02:95:a0:6f:b7:5f:44:bf:e4:e3:1f:
         04:e0:7b:5f:f9:3a:13:38:89:c6:a0:16:2b:aa:5b:7e:6d:26:
         68:4a:92:e0:7b:ed:d4:e3:fd:a8:02:96:a3:a5:89:a4:a8:18:
         66:40:62:e6:5b:59:d2:f1:db:f4:90:7f:f4:d1:94:a8:ae:a5:
         7f:a4:43:96:b4:d8:b3:b4:9c:a5:43:2f:11:79:c4:70:66:23:
         3d:c5:29:fa:fe:32:b9:c7:b7:a1:47:1b:60:e0:e4:cb:4e:58:
         4d:4b:a4:1e:06:87:41:12:ff:19:10:28:72:0d:08:20:dc:b5:
         b2:e1:ea:74:44:e3:6f:91:3d:b6:52:6a:42:f6:bf:68:65:bf:
         c3:12:a0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 07:29:41 2025 by rpki-client