This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1F740B32EEC611F0B6553517716F56BC.roa
File:                     1F740B32EEC611F0B6553517716F56BC.roa (raw, json)
Hash identifier:          GkuChrKCeIjrx/7RKi1sDVvBepAqIC5AXcgUnelT0n4=
Subject key identifier:   42:06:7E:F5:EE:A4:6D:B9:09:82:B1:D3:16:11:5D:92:24:78:F6:C9
Certificate issuer:       /CN=A911695A/serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Certificate serial:       1D
Authority key identifier: 94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1F740B32EEC611F0B6553517716F56BC.roa
Signing time:             Sun 11 Jan 2026 08:18:35 +0000
ROA not before:           Sun 11 Jan 2026 08:18:35 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     20473
IP address blocks:        2001:df6:3e40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
                          rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911695A, serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
        Validity
            Not Before: Jan 11 08:18:35 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69635cdb-b014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:46:81:02:4c:71:ef:d4:79:03:20:4e:59:4b:
                    92:29:93:63:24:70:80:46:fc:95:6c:e7:19:4b:46:
                    04:49:59:d0:09:5d:ee:28:b4:b4:f6:dc:c9:a3:34:
                    44:ea:04:a8:e6:86:ae:23:87:d3:eb:5c:9c:51:9e:
                    08:8f:84:c9:48:66:da:9b:27:dc:df:a1:1b:d4:86:
                    01:96:21:8c:0b:63:da:d1:08:7a:cd:99:1f:68:eb:
                    65:68:be:31:df:e6:71:75:81:6c:d8:e5:2e:36:bd:
                    db:23:74:54:1a:ef:73:47:4e:fe:cf:d9:46:38:44:
                    26:5e:19:c3:09:dc:8a:0c:e3:02:b8:ce:98:69:8c:
                    86:bb:39:47:5c:7c:b3:ce:e3:c0:c7:d8:ff:84:68:
                    f6:6c:75:dd:01:1e:f8:78:06:56:bd:1f:1f:42:9a:
                    88:c0:80:cc:dd:11:22:fc:7d:d3:e1:1d:94:7a:60:
                    7d:92:d7:ac:91:68:54:a8:41:cc:83:53:12:e4:17:
                    a3:83:ba:fa:af:e5:b7:9f:36:c7:05:cd:b3:25:6c:
                    0a:fb:27:04:af:1d:bf:fe:a8:17:44:26:51:3a:6d:
                    5c:86:1c:be:fd:87:3e:c1:64:df:f0:d1:30:4e:00:
                    8f:89:de:2f:fb:ad:ac:55:04:a6:9f:0b:17:d0:3b:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:06:7E:F5:EE:A4:6D:B9:09:82:B1:D3:16:11:5D:92:24:78:F6:C9
            X509v3 Authority Key Identifier:
                keyid:94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1F740B32EEC611F0B6553517716F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:3e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:f9:e4:ca:29:7f:e4:ef:ae:f1:02:1d:3f:15:c6:1a:da:14:
         2a:99:40:d1:b6:d6:38:61:74:13:a8:71:7d:4b:87:75:42:15:
         69:76:53:f1:fe:34:67:a4:a7:27:38:7f:94:32:a3:70:4a:e3:
         18:e0:c9:16:14:2e:85:67:c1:3e:1b:fc:18:93:66:4a:d5:fd:
         5e:a5:5a:c3:ec:df:35:41:c7:a4:da:86:f9:ed:cc:96:94:75:
         b8:7e:66:76:6b:c7:6c:ef:71:09:42:2a:7f:51:c8:80:f6:62:
         de:6e:1c:22:87:5f:52:bf:11:33:b3:89:65:0b:b3:48:fa:31:
         a7:38:5d:6c:2c:2b:31:9e:fe:a4:4c:f0:e7:ad:18:52:1d:51:
         40:f8:4f:b1:63:5c:7e:7e:f3:5a:9d:24:a7:9d:53:25:bd:55:
         3c:55:c3:6c:dc:bc:06:23:f1:00:72:35:ee:6a:d4:ea:8b:f7:
         18:a3:6f:ce:7f:bc:37:3d:10:dc:53:07:f2:cf:18:03:a7:55:
         b2:53:34:97:75:c7:f3:df:13:c6:57:30:2d:93:8b:ab:35:17:
         13:40:69:32:3d:a1:a3:cb:e4:1f:80:95:e3:b7:8f:7f:b1:8a:
         6d:4b:06:13:c6:c4:8f:9e:ef:63:03:a3:87:13:d3:ee:a9:a5:
         db:a1:e0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:37:35 2026 by rpki-client