This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa
File:                     323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (raw, json)
Hash identifier:          T+jD0JhZMjE8i1nOFavU1KolcpDBIzceIHgb9yMEk0Q=
Subject key identifier:   14:C3:14:D7:C4:80:3F:03:73:E0:76:5C:E8:47:42:AF:55:16:9E:7B
Certificate issuer:       /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial:       1DCFFE7A2D0E99C87C101C08AAB3F686986E9A4C
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa
Signing time:             Thu 22 Jan 2026 07:00:00 +0000
ROA not before:           Thu 22 Jan 2026 06:55:00 +0000
ROA not after:            Fri 22 Jan 2027 07:00:00 +0000
asID:                     46997
IP address blocks:        2406:4440:80::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
                          rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:cf:fe:7a:2d:0e:99:c8:7c:10:1c:08:aa:b3:f6:86:98:6e:9a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
        Validity
            Not Before: Jan 22 06:55:00 2026 GMT
            Not After : Jan 22 07:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:58:d4:57:10:38:20:a0:64:fd:3b:7e:3d:48:
                    97:31:d1:80:33:31:3b:f8:49:8f:d7:8a:c1:65:6c:
                    ec:f9:8f:c3:6a:4a:66:97:d9:bc:5e:e4:30:e3:46:
                    06:72:09:ea:20:b2:ab:26:ed:a8:93:a5:3b:f7:58:
                    9d:09:36:6d:54:b7:47:98:8c:53:95:3c:05:62:e5:
                    58:c1:de:7a:bc:f6:b1:c6:32:94:46:64:6e:db:24:
                    a5:7b:8a:11:bf:5d:a4:cf:12:20:06:a2:4b:7b:60:
                    08:45:62:72:d4:fb:22:7b:fd:af:35:07:12:43:66:
                    90:8c:29:62:1b:16:08:47:05:6c:39:86:2d:98:b6:
                    7e:ae:4d:f8:68:8e:a4:04:a4:1c:70:cd:17:eb:e0:
                    ea:40:a0:ac:cd:24:9c:9c:62:27:79:87:db:3b:81:
                    bf:38:3f:bb:1e:1f:43:0f:18:53:72:0a:05:b9:75:
                    74:77:89:50:bd:4a:f3:05:61:fb:35:2d:01:fd:79:
                    74:e0:1b:6b:4d:04:5f:9f:bc:71:0c:e8:8d:18:4d:
                    19:ef:cd:9b:35:f2:cc:a8:0d:15:fd:79:97:9d:4b:
                    5a:ab:c0:bd:9a:f5:76:81:2d:e9:62:0a:33:e7:9f:
                    03:de:aa:3a:2f:f6:f0:97:20:aa:ea:cf:2e:13:19:
                    44:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C3:14:D7:C4:80:3F:03:73:E0:76:5C:E8:47:42:AF:55:16:9E:7B
            X509v3 Authority Key Identifier:
                keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:4440:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         76:68:2b:ae:d2:c1:39:af:56:c0:51:60:f4:ff:90:d9:47:dc:
         ec:b2:dd:74:11:d0:68:74:41:7f:e4:ef:6c:17:a9:fb:f1:a9:
         cc:44:f8:d2:a6:9b:71:b0:b0:15:18:10:fe:45:ec:d0:47:0a:
         76:9d:42:32:2f:47:15:fc:52:f8:a8:d4:fa:1b:66:24:f6:fb:
         d4:8a:8f:b7:57:66:74:ef:23:2f:26:6e:90:12:bd:a1:53:8a:
         f8:f8:03:16:0c:5b:dd:92:7b:e0:06:10:83:f3:e8:0a:2d:dc:
         01:c7:7a:44:9c:13:63:5f:f3:6d:c6:5c:e8:df:9f:32:22:18:
         4e:0a:a5:ec:8a:4c:a9:d1:72:db:a7:ba:49:46:b8:e1:2b:3f:
         5e:51:46:e8:7a:9d:cb:58:df:95:6e:02:ee:c3:4a:88:1a:c0:
         a7:b6:43:a3:c7:61:8d:7a:db:93:7b:54:6d:c1:4f:6d:e1:c8:
         22:bb:90:5f:88:80:fe:df:51:4b:aa:f6:6d:e4:56:ac:46:33:
         26:d5:e3:32:9b:ce:1c:8d:1e:ad:dc:d9:12:dc:42:fb:b0:ed:
         53:dc:2a:56:ef:0c:35:a2:04:23:06:3d:92:b9:77:17:fc:89:
         02:68:a4:3a:73:a6:89:75:5d:ce:32:e9:bd:c5:d0:64:95:03:
         64:63:a4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----