This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/20151124C8EE11F0BD2FFA4CC4F9AE02.roa
File:                     20151124C8EE11F0BD2FFA4CC4F9AE02.roa (raw, json)
Hash identifier:          IVcqyVphDBj8NjJzKEcLhgljJS7gLCls1Em+kdKrq9M=
Subject key identifier:   D2:B8:73:78:4D:BB:71:89:39:85:08:AE:56:FA:2A:F6:41:B3:FD:25
Certificate issuer:       /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial:       70
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/20151124C8EE11F0BD2FFA4CC4F9AE02.roa
Signing time:             Tue 09 Dec 2025 03:19:48 +0000
ROA not before:           Tue 09 Dec 2025 03:19:48 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     9335
IP address blocks:        61.19.240.0/20 maxlen: 20
                          61.19.242.0/24 maxlen: 24
                          61.19.245.0/24 maxlen: 24
                          61.19.246.0/24 maxlen: 24
                          61.19.247.0/24 maxlen: 24
                          61.19.248.0/24 maxlen: 24
                          61.19.249.0/24 maxlen: 24
                          61.19.250.0/24 maxlen: 24
                          61.19.251.0/24 maxlen: 24
                          61.19.252.0/24 maxlen: 24
                          110.78.192.0/20 maxlen: 24
                          110.78.208.0/21 maxlen: 24
                          110.78.216.0/22 maxlen: 24
                          110.78.220.0/22 maxlen: 24
                          110.78.228.0/22 maxlen: 24
                          110.78.252.0/22 maxlen: 24
                          122.154.133.0/24 maxlen: 24
                          122.155.0.0/19 maxlen: 20
                          122.155.0.0/24 maxlen: 24
                          122.155.1.0/24 maxlen: 24
                          122.155.2.0/24 maxlen: 24
                          122.155.3.0/24 maxlen: 24
                          122.155.4.0/24 maxlen: 24
                          122.155.5.0/24 maxlen: 24
                          122.155.6.0/24 maxlen: 24
                          122.155.7.0/24 maxlen: 24
                          122.155.8.0/24 maxlen: 24
                          122.155.9.0/24 maxlen: 24
                          122.155.10.0/24 maxlen: 24
                          122.155.11.0/24 maxlen: 24
                          122.155.12.0/24 maxlen: 24
                          122.155.13.0/24 maxlen: 24
                          122.155.14.0/24 maxlen: 24
                          122.155.16.0/24 maxlen: 24
                          122.155.17.0/24 maxlen: 24
                          122.155.18.0/24 maxlen: 24
                          122.155.19.0/24 maxlen: 24
                          122.155.22.0/24 maxlen: 24
                          122.155.23.0/24 maxlen: 24
                          122.155.28.0/24 maxlen: 24
                          122.155.29.0/24 maxlen: 24
                          122.155.55.0/24 maxlen: 24
                          122.155.144.0/21 maxlen: 21
                          122.155.144.0/24 maxlen: 24
                          122.155.145.0/24 maxlen: 24
                          122.155.146.0/24 maxlen: 24
                          122.155.147.0/24 maxlen: 24
                          122.155.148.0/24 maxlen: 24
                          122.155.149.0/24 maxlen: 24
                          122.155.150.0/24 maxlen: 24
                          122.155.151.0/24 maxlen: 24
                          122.155.160.0/19 maxlen: 19
                          122.155.164.0/24 maxlen: 24
                          122.155.165.0/24 maxlen: 24
                          122.155.166.0/24 maxlen: 24
                          122.155.167.0/24 maxlen: 24
                          122.155.168.0/24 maxlen: 24
                          122.155.169.0/24 maxlen: 24
                          122.155.170.0/24 maxlen: 24
                          122.155.171.0/24 maxlen: 24
                          122.155.172.0/24 maxlen: 24
                          122.155.173.0/24 maxlen: 24
                          122.155.174.0/24 maxlen: 24
                          122.155.175.0/24 maxlen: 24
                          122.155.177.0/24 maxlen: 24
                          122.155.180.0/24 maxlen: 24
                          122.155.184.0/21 maxlen: 21
                          122.155.191.0/24 maxlen: 24
                          122.155.192.0/24 maxlen: 24
                          122.155.193.0/24 maxlen: 24
                          122.155.194.0/24 maxlen: 24
                          122.155.195.0/24 maxlen: 24
                          122.155.196.0/24 maxlen: 24
                          122.155.197.0/24 maxlen: 24
                          122.155.198.0/24 maxlen: 24
                          122.155.199.0/24 maxlen: 24
                          122.155.200.0/24 maxlen: 24
                          122.155.201.0/24 maxlen: 24
                          122.155.202.0/24 maxlen: 24
                          122.155.203.0/24 maxlen: 24
                          122.155.204.0/24 maxlen: 24
                          122.155.205.0/24 maxlen: 24
                          122.155.206.0/24 maxlen: 24
                          122.155.207.0/24 maxlen: 24
                          122.155.208.0/24 maxlen: 24
                          122.155.209.0/24 maxlen: 24
                          122.155.210.0/24 maxlen: 24
                          122.155.211.0/24 maxlen: 24
                          122.155.212.0/24 maxlen: 24
                          122.155.215.0/24 maxlen: 24
                          122.155.216.0/24 maxlen: 24
                          122.155.220.0/24 maxlen: 24
                          122.155.221.0/24 maxlen: 24
                          122.155.222.0/24 maxlen: 24
                          122.155.223.0/24 maxlen: 24
                          202.3.68.0/24 maxlen: 24
                          202.3.69.0/24 maxlen: 24
                          202.3.70.0/24 maxlen: 24
                          202.3.71.0/24 maxlen: 24
                          202.129.2.0/24 maxlen: 24
                          202.129.50.0/24 maxlen: 24
                          202.139.192.0/22 maxlen: 22
                          202.139.192.0/24 maxlen: 24
                          202.139.193.0/24 maxlen: 24
                          202.139.194.0/24 maxlen: 24
                          202.139.195.0/24 maxlen: 24
                          202.139.196.0/24 maxlen: 24
                          202.139.198.0/24 maxlen: 24
                          202.139.199.0/24 maxlen: 24
                          202.139.223.0/24 maxlen: 24
                          2001:c38:1000::/36 maxlen: 36
                          2001:c38:1000::/48 maxlen: 48
                          2001:c38:2000::/36 maxlen: 36
                          2001:c38:2000::/48 maxlen: 48
                          2001:c38:20f8::/48 maxlen: 48
                          2001:c38:3001::/48 maxlen: 48
                          2001:c38:3002::/48 maxlen: 48
                          2001:c38:3003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 07:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
        Validity
            Not Before: Dec  9 03:19:48 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69379554-4e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:41:06:db:cd:64:6c:53:9a:20:da:58:28:53:
                    53:2d:8e:67:d9:7b:f6:2b:f9:f0:86:81:9e:79:1e:
                    e7:a6:cd:b6:ac:30:75:c1:c0:47:79:36:cd:c0:f3:
                    da:d8:41:88:9e:53:a1:d3:d5:56:b4:6e:35:e5:19:
                    13:9b:23:88:fd:2e:bb:7e:0f:1b:f1:71:74:39:97:
                    2d:71:89:3d:ca:f2:8d:c4:6c:bc:b0:ea:ef:2e:2e:
                    80:80:bc:1a:08:76:7f:f8:db:66:95:c0:a7:b4:8d:
                    83:d2:bd:93:d1:55:6e:03:34:91:53:84:e3:9a:73:
                    30:07:49:78:3e:c9:0e:db:d5:d6:23:a7:ba:02:5f:
                    1d:0c:5a:6c:e6:1a:30:4f:b1:5f:1f:fa:d4:fa:ba:
                    5c:cd:7e:c5:f3:98:ea:79:92:e0:6f:f9:fd:97:18:
                    3a:c4:91:9a:06:2a:7e:a7:c9:1f:49:ed:00:32:78:
                    b5:6b:78:09:3e:2a:5c:22:65:5c:ee:29:07:60:5e:
                    69:9d:d3:53:4e:f2:dd:bb:27:cd:c7:de:12:e4:9b:
                    50:31:f7:7f:b7:8d:24:85:e1:ce:5f:18:f3:a0:01:
                    f2:69:30:f3:e7:50:09:9c:75:87:80:ac:14:cf:15:
                    de:4f:c8:f9:80:05:fc:2c:40:ec:f4:ca:ff:40:9c:
                    69:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B8:73:78:4D:BB:71:89:39:85:08:AE:56:FA:2A:F6:41:B3:FD:25
            X509v3 Authority Key Identifier:
                keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/20151124C8EE11F0BD2FFA4CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.19.240.0/20
                  110.78.192.0/19
                  110.78.228.0/22
                  110.78.252.0/22
                  122.154.133.0/24
                  122.155.0.0/19
                  122.155.55.0/24
                  122.155.144.0/21
                  122.155.160.0-122.155.212.255
                  122.155.215.0-122.155.216.255
                  122.155.220.0/22
                  202.3.68.0/22
                  202.129.2.0/24
                  202.129.50.0/24
                  202.139.192.0-202.139.196.255
                  202.139.198.0/23
                  202.139.223.0/24
                IPv6:
                  2001:c38:1000::-2001:c38:2fff:ffff:ffff:ffff:ffff:ffff
                  2001:c38:3001::-2001:c38:3003:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         4a:00:73:f0:27:71:20:cc:aa:6c:d9:20:2c:cd:e8:d4:d4:5d:
         db:48:85:2b:e3:4b:84:10:2f:8b:39:20:70:ea:23:41:83:fd:
         a1:63:d7:69:35:73:5f:1f:d7:3f:a8:54:20:ca:06:25:37:82:
         16:b8:b5:b0:77:d0:51:52:ec:24:04:86:d4:4b:5a:64:58:90:
         72:1c:0f:a0:cb:14:f0:23:31:cf:b7:3a:17:f1:47:bf:ad:14:
         4c:c1:ee:3d:6a:7a:81:8d:72:dc:f9:eb:6a:49:da:7d:4a:03:
         aa:7b:42:df:11:e3:13:ca:8b:ac:76:9f:07:10:52:bd:45:7c:
         0a:1f:7b:28:12:21:3f:95:eb:0d:70:32:26:f7:ff:e3:29:bc:
         ed:93:89:48:3a:c0:07:13:20:2a:10:1a:9f:d4:83:2d:90:e8:
         1d:80:de:db:cf:5d:a2:e8:1c:3a:7d:13:e5:8d:76:c2:b3:e8:
         bd:5c:f2:1c:08:ed:29:41:1a:fb:ad:eb:61:d9:85:97:23:22:
         27:d8:46:d6:ff:17:71:38:14:0a:fc:f7:c2:fa:67:16:df:00:
         04:15:50:ce:0c:86:1d:f7:e4:5a:0f:02:90:c3:30:d5:26:2d:
         d6:4a:94:fa:d3:ce:08:0f:3f:95:b0:d9:22:1c:71:3b:49:7f:
         90:eb:b7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 05:05:52 2025 by rpki-client