This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/4699D9EADB0B11F0B7B5790A82D3641D.roa
File:                     4699D9EADB0B11F0B7B5790A82D3641D.roa (raw, json)
Hash identifier:          1Eq/vBclyWsRKM4D4caA/umlvuEELi4/AbXwk1feOGQ=
Subject key identifier:   7D:77:33:F8:A8:2F:EE:1A:C6:D9:1F:32:B2:BF:B8:00:B0:7E:30:0D
Certificate issuer:       /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial:       0185
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/4699D9EADB0B11F0B7B5790A82D3641D.roa
Signing time:             Wed 17 Dec 2025 05:43:12 +0000
ROA not before:           Wed 17 Dec 2025 05:43:12 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     6453
IP address blocks:        124.4.120.0/23 maxlen: 24
                          124.4.122.0/23 maxlen: 24
                          182.94.236.0/23 maxlen: 24
                          182.94.238.0/23 maxlen: 24
                          182.94.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
                          rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
        Validity
            Not Before: Dec 17 05:43:12 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=694242f0-3ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:36:61:35:a0:5d:6f:a8:b6:27:f4:23:b3:
                    bd:1b:09:06:0e:8c:d1:e7:1f:70:cd:0d:a4:10:b4:
                    3d:59:b9:f3:ec:8c:df:40:7c:f6:17:47:9b:0b:61:
                    b7:86:7d:7c:95:30:ca:df:78:7d:ae:aa:47:43:08:
                    66:5c:c6:76:1d:89:9d:fc:98:87:4a:6e:50:f5:a2:
                    b3:62:c0:ce:22:2b:26:b4:8b:4a:1d:df:fb:58:f1:
                    4f:76:02:e9:e2:1e:15:6e:0e:7b:b5:99:59:6d:14:
                    c0:0d:c5:0b:01:63:40:57:42:d6:8e:f5:42:11:d7:
                    dc:fc:f5:7b:e0:74:57:2d:c7:35:97:ed:73:2d:59:
                    5e:65:ad:dd:24:be:c9:4c:9d:5b:b3:f9:22:ff:bf:
                    50:b9:f6:ab:3e:05:3f:8d:af:8f:81:a7:17:18:cc:
                    28:8f:c5:56:e4:31:e4:39:7d:e1:17:f7:bf:02:10:
                    a9:11:c1:cd:d0:56:e5:26:e9:93:d4:20:7e:89:bf:
                    e2:e8:97:2e:c9:06:82:81:7a:48:42:69:af:b9:07:
                    7a:4e:5f:d6:8a:f5:85:cf:29:ad:dc:10:e7:0c:a8:
                    d0:c4:3c:45:8b:0a:3b:1d:4c:2e:b4:0f:73:e4:84:
                    40:93:da:e2:54:63:c6:88:60:79:af:b2:c3:d9:52:
                    e4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:77:33:F8:A8:2F:EE:1A:C6:D9:1F:32:B2:BF:B8:00:B0:7E:30:0D
            X509v3 Authority Key Identifier:
                keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/4699D9EADB0B11F0B7B5790A82D3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.4.120.0/22
                  182.94.236.0-182.94.240.255

    Signature Algorithm: sha256WithRSAEncryption
         10:a9:c5:e5:bf:18:d9:3a:ff:76:41:0d:6c:48:83:3d:01:0f:
         f0:8d:9a:e8:4f:0a:68:99:02:f4:25:1a:6d:f6:e8:be:c6:63:
         fc:35:70:9d:cd:c3:d3:25:0c:29:c7:05:d9:a4:7c:1c:19:b9:
         7e:7d:c0:15:eb:29:fe:b0:9f:25:68:24:00:ec:d4:df:de:ff:
         2b:74:e0:25:48:99:f9:7a:c9:17:74:71:25:3e:c2:48:39:9c:
         b6:f3:8a:f2:d4:85:26:b2:46:16:d3:a2:54:5c:47:be:10:db:
         55:13:76:69:f5:ed:7f:9c:c7:04:23:d9:64:ec:60:f6:55:92:
         c9:fa:15:0c:6e:44:2d:91:3e:2c:d2:7d:45:73:de:38:3b:7d:
         1f:82:9d:b6:7e:a1:e9:38:18:31:49:ba:fa:4c:9e:42:08:d2:
         24:ba:63:63:0b:4a:ee:c6:8a:a7:a9:00:a3:1c:a5:45:a0:06:
         18:a3:4c:b4:0c:36:ee:92:78:47:c0:6c:53:f6:28:63:1f:a1:
         2b:f7:74:cb:d7:d7:fc:bb:57:83:8c:b4:de:bb:19:b8:8e:57:
         c1:63:7a:32:c2:8b:60:7e:03:18:c0:4e:31:8d:e3:3e:f3:8f:
         76:58:f8:cd:ec:0f:e9:af:1b:99:91:71:a6:57:6e:7f:a0:46:
         b8:44:3f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:02:58 2025 by rpki-client