This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/FD380306BD4D11F091CCAA18C4F9AE02.roa
File:                     FD380306BD4D11F091CCAA18C4F9AE02.roa (raw, json)
Hash identifier:          fyBk0/SenzZ7ZpMuKE4hYCz4BAc8UUHVr3R2rElUu98=
Subject key identifier:   E6:19:A1:A5:B9:5C:89:A1:83:A5:64:92:59:EA:D2:AE:98:C1:61:58
Certificate issuer:       /CN=A911691A/serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
Certificate serial:       DD
Authority key identifier: 6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/FD380306BD4D11F091CCAA18C4F9AE02.roa
Signing time:             Mon 05 Jan 2026 05:27:37 +0000
ROA not before:           Mon 05 Jan 2026 05:27:37 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     20200
IP address blocks:        2401:d860::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl
                          rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911691A, serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
        Validity
            Not Before: Jan  5 05:27:37 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=695b4bc8-d058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1a:a7:31:01:cc:e1:49:2f:28:40:68:be:43:
                    21:7b:ea:14:12:dc:cd:e4:3d:f3:40:39:f5:7c:55:
                    be:bd:a4:44:f9:0c:79:7f:cb:b0:f8:e1:e9:6c:6d:
                    2f:82:2a:b2:ff:7e:71:eb:5d:0a:69:4d:b8:d3:01:
                    16:73:7d:fb:46:5e:c7:22:14:06:76:5b:3e:48:49:
                    5a:d6:f2:e9:6b:58:fe:e7:c1:f1:d2:9d:95:80:e8:
                    c9:8e:db:36:02:9d:25:39:68:c5:96:cd:e7:dc:65:
                    45:0c:99:83:a7:8b:ec:ec:09:ee:60:38:1f:08:3a:
                    ab:27:a3:b7:02:59:25:6f:33:62:cf:b0:39:df:05:
                    da:ea:64:e8:65:56:a3:3b:93:6e:67:a0:80:4a:b4:
                    f9:7c:3e:70:ec:b7:6d:8e:68:79:8f:7c:9a:5b:b6:
                    e3:37:88:4e:7b:94:24:53:8e:ce:e0:4a:46:b5:74:
                    f6:45:2d:c4:ac:e7:f2:8f:dc:09:0d:10:cb:83:53:
                    eb:c7:4c:8a:d6:9e:7c:d7:8a:87:ea:48:35:c1:b1:
                    a0:a5:24:a8:a8:fe:9d:ea:0c:e4:aa:d0:b9:90:b2:
                    73:b2:50:f4:2b:43:53:f5:b1:dc:a1:aa:85:f9:ac:
                    08:17:1e:66:61:64:8e:68:d7:7f:cb:00:03:58:1a:
                    73:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:19:A1:A5:B9:5C:89:A1:83:A5:64:92:59:EA:D2:AE:98:C1:61:58
            X509v3 Authority Key Identifier:
                keyid:6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/FD380306BD4D11F091CCAA18C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d860::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:63:96:3c:07:01:d2:4d:0b:fb:9c:bc:49:98:03:4c:6c:3e:
         47:5d:77:ec:0c:cd:28:ef:e6:86:9e:36:d3:49:ab:3a:a6:b2:
         f0:9b:28:43:58:ea:f9:e9:a4:90:68:ff:53:ed:3c:0a:8e:e8:
         80:ce:04:e0:55:79:b1:09:95:59:83:1d:8e:bd:c3:c2:43:5d:
         1e:17:2e:c2:b8:b2:f7:d7:63:8c:3b:e9:d0:3e:57:10:51:59:
         a2:d0:18:f5:2a:f5:08:db:15:e0:3e:1d:3d:65:35:31:da:63:
         00:83:9b:32:46:b1:2c:e2:cb:c6:3f:ce:b2:7d:60:7d:b7:93:
         96:93:7b:54:c4:c5:a3:33:3f:6d:0a:95:3b:1a:53:10:23:b1:
         03:b4:cd:4c:79:0c:e4:15:ee:b7:5b:db:61:af:f8:83:f3:da:
         74:66:f5:c7:80:ae:27:69:d4:c8:2b:65:66:33:94:a1:6e:0b:
         74:47:64:b7:ee:ec:31:53:fe:e2:0e:be:24:1d:e8:c6:0a:1f:
         a2:68:8e:36:e8:f0:df:2d:6b:0d:2c:3b:e3:b5:7e:c9:31:f4:
         0d:da:0e:3c:75:c6:c8:97:7c:d4:d0:64:c5:9e:3a:d9:e3:63:
         49:04:8e:09:70:5d:f5:0c:ee:fa:6f:22:bd:9f:11:11:79:1a:
         a3:ca:74:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:50:56 2026 by rpki-client