This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1E74642AEEC611F0B6553517716F56BC.roa
File:                     1E74642AEEC611F0B6553517716F56BC.roa (raw, json)
Hash identifier:          SOSLWLvLrsjjJ6AEtm/F/8vErniCw4XxHqkv+EwD6A4=
Subject key identifier:   D4:AF:E2:B6:D4:61:83:2B:41:62:0F:09:EC:BE:CE:7E:C1:A5:9E:40
Certificate issuer:       /CN=A911695A/serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Certificate serial:       1B
Authority key identifier: 94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1E74642AEEC611F0B6553517716F56BC.roa
Signing time:             Sun 11 Jan 2026 08:18:33 +0000
ROA not before:           Sun 11 Jan 2026 08:18:33 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     147176
IP address blocks:        2001:df6:3e40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
                          rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911695A, serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
        Validity
            Not Before: Jan 11 08:18:33 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69635cd9-e6ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3a:c1:c6:4e:08:68:34:c1:de:33:27:a9:fd:
                    4f:28:fa:03:43:03:b4:ed:7b:f1:16:1b:b8:92:b8:
                    37:9d:df:2d:f3:66:36:91:da:75:b6:e7:83:10:91:
                    15:b7:b8:8f:f1:fb:f4:f9:c3:a7:ee:03:15:0c:42:
                    e6:79:f3:cf:ef:ac:bc:7f:77:6d:a7:62:92:b6:1d:
                    11:72:3e:08:ce:33:a1:6e:e2:74:91:5a:53:23:85:
                    2a:4a:5f:3e:7c:a5:e0:ea:04:19:0e:06:21:55:e3:
                    64:bc:b2:58:59:15:42:6e:52:c2:f8:1f:4f:09:c0:
                    4e:d0:7c:7e:0d:30:01:09:78:4f:1d:6c:64:50:0e:
                    ff:ae:1e:4d:37:83:25:af:63:73:2f:f4:1c:39:dd:
                    3b:67:8d:af:65:b3:2f:38:4b:21:48:18:4e:90:9a:
                    e9:50:ba:1e:36:a1:7a:f4:86:f4:67:c3:ba:d8:41:
                    ec:7d:63:b9:2a:91:98:63:97:7e:dd:55:a6:6a:70:
                    98:b6:1c:ac:08:f7:50:f7:34:e2:9c:02:8d:05:c8:
                    11:2b:49:94:52:7f:e5:b1:89:3e:4b:df:e4:f4:bf:
                    56:61:2d:66:42:95:72:5e:54:57:67:5c:4e:96:e3:
                    82:19:40:81:c3:3b:37:04:67:d5:37:37:c4:89:8d:
                    b0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AF:E2:B6:D4:61:83:2B:41:62:0F:09:EC:BE:CE:7E:C1:A5:9E:40
            X509v3 Authority Key Identifier:
                keyid:94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1E74642AEEC611F0B6553517716F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:3e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:1d:28:91:99:df:f8:51:1b:9b:b7:10:6d:36:76:71:4f:84:
         df:4a:0f:b2:cc:13:71:20:30:4c:c1:7b:bb:64:91:40:ca:ce:
         39:51:6b:63:2a:03:93:11:e2:a8:47:f5:52:2b:91:b1:1c:82:
         28:24:39:49:c1:08:db:c0:d1:8c:2d:99:25:ea:f6:40:53:ef:
         f0:52:b4:09:eb:86:05:04:49:70:15:95:91:11:57:fe:f8:d6:
         ec:a0:f9:40:62:38:7a:46:0a:4a:89:01:f3:53:f5:ec:49:04:
         0a:78:b3:16:61:68:c2:69:b5:33:41:49:f2:e4:f7:a7:d6:c7:
         7c:07:6a:9b:1b:72:c9:78:ff:2d:81:ae:07:53:8c:2e:d6:f0:
         c6:34:f9:f0:89:17:f2:60:4b:d9:ce:99:d8:74:7a:66:54:01:
         f9:00:94:c1:2c:77:6c:b9:c0:f5:73:c0:b1:8e:70:ee:28:95:
         17:aa:36:32:80:1a:e0:28:6e:27:b7:bc:42:f7:68:53:76:67:
         6b:ba:f1:03:59:29:69:eb:57:eb:37:3a:85:1f:89:72:7c:9c:
         a7:d8:a4:60:eb:cd:36:91:ab:e5:b5:c9:ce:a4:09:6c:a7:58:
         15:bf:47:e3:24:fc:c5:b0:0b:de:56:98:dd:a5:6b:79:b3:ce:
         77:8a:21:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:01:20 2026 by rpki-client