This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/566800AE193C11F094773636C4F9AE02.roa
File:                     566800AE193C11F094773636C4F9AE02.roa (raw, json)
Hash identifier:          x5Q7IFWOHg2tUDOM+TNLmmJ3sU4DrJntxSwPcYFFFRU=
Subject key identifier:   07:CA:5B:7F:6A:84:DC:01:8D:05:7D:10:A0:46:73:AD:0E:C0:20:14
Certificate issuer:       /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Certificate serial:       0D76
Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/566800AE193C11F094773636C4F9AE02.roa
Signing time:             Fri 09 Jan 2026 15:21:39 +0000
ROA not before:           Fri 09 Jan 2026 15:21:39 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     141030
IP address blocks:        2400:3dc0:41::/48 maxlen: 48
                          2400:3dc0:42::/48 maxlen: 48
                          2400:3dc0:44::/48 maxlen: 48
                          2400:3dc0:47::/48 maxlen: 48
                          2400:3dc0:48::/48 maxlen: 48
                          2400:3dc0:4d::/48 maxlen: 48
                          2400:3dc0:4e::/48 maxlen: 48
                          2400:3dc0:4f::/48 maxlen: 48
                          2400:3dc0:50::/48 maxlen: 48
                          2400:3dc0:51::/48 maxlen: 48
                          2400:3dc0:52::/48 maxlen: 48
                          2400:3dc0:53::/48 maxlen: 48
                          2400:3dc0:54::/48 maxlen: 48
                          2400:3dc0:55::/48 maxlen: 48
                          2400:3dc0:59::/48 maxlen: 48
                          2400:3dc0:5c::/48 maxlen: 48
                          2400:3dc0:5d::/48 maxlen: 48
                          2400:3dc0:5f::/48 maxlen: 48
                          2400:3dc0:62::/48 maxlen: 48
                          2400:3dc0:63::/48 maxlen: 48
                          2400:3dc0:64::/48 maxlen: 48
                          2400:3dc0:65::/48 maxlen: 48
                          2400:3dc0:66::/48 maxlen: 48
                          2400:3dc0:67::/48 maxlen: 48
                          2400:3dc0:6b::/48 maxlen: 48
                          2400:3dc0:6d::/48 maxlen: 48
                          2400:3dc0:6e::/48 maxlen: 48
                          2400:3dc0:73::/48 maxlen: 48
                          2400:3dc0:74::/48 maxlen: 48
                          2400:3dc0:75::/48 maxlen: 48
                          2400:3dc0:76::/48 maxlen: 48
                          2400:3dc0:77::/48 maxlen: 48
                          2400:3dc0:79::/48 maxlen: 48
                          2400:3dc0:7a::/48 maxlen: 48
                          2400:3dc0:81::/48 maxlen: 48
                          2400:3dc0:82::/48 maxlen: 48
                          2400:3dc0:90::/48 maxlen: 48
                          2400:3dc0:91::/48 maxlen: 48
                          2400:3dc0:92::/48 maxlen: 48
                          2400:3dc0:93::/48 maxlen: 48
                          2400:3dc0:94::/48 maxlen: 48
                          2400:3dc0:95::/48 maxlen: 48
                          2400:3dc0:96::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
                          rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3446 (0xd76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
        Validity
            Not Before: Jan  9 15:21:39 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69611d02-6a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:31:f9:95:68:ad:db:3d:26:03:8e:61:7f:8f:
                    b1:a8:5d:6c:27:1c:e7:5e:59:24:1f:15:d8:95:b5:
                    6c:97:19:bc:1d:b7:db:ee:1e:b4:1b:c2:63:78:d5:
                    6c:7e:80:66:f0:02:61:e6:2f:d1:d6:d6:03:c5:6b:
                    2d:da:1a:00:8f:1e:e7:bb:4e:7f:f3:67:4b:0e:ca:
                    f3:cc:85:bf:2d:95:6d:26:38:fc:24:55:f9:5c:5f:
                    39:f3:58:22:63:cd:6b:3c:63:f8:79:26:89:6b:55:
                    3f:de:4b:64:3a:d6:ec:a9:95:78:ab:8d:99:bb:3f:
                    71:95:6f:44:7d:5c:35:2d:c4:58:21:c6:f0:1b:39:
                    2d:66:86:48:c9:a3:a1:61:74:97:43:57:3a:ce:de:
                    44:83:b4:9d:81:9c:b2:f1:20:9d:f6:55:05:ca:6a:
                    dd:f3:fb:77:a4:35:6e:c8:84:4b:38:b9:9d:72:0b:
                    b3:e0:dd:6d:55:b6:18:99:1c:09:d2:04:5a:c7:c2:
                    4e:a4:04:2f:38:99:44:26:02:02:5b:b9:ed:09:d2:
                    6a:b2:6b:3b:5b:23:4f:64:2e:54:bb:75:ed:8b:e3:
                    35:55:f4:ed:36:f9:a7:89:d6:f9:79:6c:47:87:55:
                    27:04:b6:7a:10:68:ee:2d:5d:77:6f:46:d7:42:d1:
                    1d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CA:5B:7F:6A:84:DC:01:8D:05:7D:10:A0:46:73:AD:0E:C0:20:14
            X509v3 Authority Key Identifier:
                keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/566800AE193C11F094773636C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:3dc0:41::-2400:3dc0:42:ffff:ffff:ffff:ffff:ffff
                  2400:3dc0:44::/48
                  2400:3dc0:47::-2400:3dc0:48:ffff:ffff:ffff:ffff:ffff
                  2400:3dc0:4d::-2400:3dc0:55:ffff:ffff:ffff:ffff:ffff
                  2400:3dc0:59::/48
                  2400:3dc0:5c::/47
                  2400:3dc0:5f::/48
                  2400:3dc0:62::-2400:3dc0:67:ffff:ffff:ffff:ffff:ffff
                  2400:3dc0:6b::/48
                  2400:3dc0:6d::-2400:3dc0:6e:ffff:ffff:ffff:ffff:ffff
                  2400:3dc0:73::-2400:3dc0:77:ffff:ffff:ffff:ffff:ffff
                  2400:3dc0:79::-2400:3dc0:7a:ffff:ffff:ffff:ffff:ffff
                  2400:3dc0:81::-2400:3dc0:82:ffff:ffff:ffff:ffff:ffff
                  2400:3dc0:90::-2400:3dc0:96:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         59:d3:eb:b7:69:02:f8:2d:21:d6:96:77:3a:b7:26:1b:da:1a:
         d5:b8:ea:34:08:f1:80:91:22:7a:68:62:84:93:1b:d1:03:f9:
         32:13:12:04:e5:40:77:09:b7:2f:1b:7e:8d:c7:04:d7:a8:96:
         51:9f:09:62:34:c0:16:02:9e:d9:27:72:f2:66:3c:33:08:40:
         09:e8:2a:12:45:96:bc:dc:88:96:57:6b:01:f8:8f:a5:3b:a8:
         91:b0:bb:73:f8:83:65:fa:12:27:1c:f5:6a:55:91:de:2b:12:
         3f:de:c7:f5:4b:57:81:8b:c5:31:62:50:d2:0f:45:d1:a2:a5:
         58:6a:4e:01:43:35:28:cb:a1:a6:cd:de:87:75:be:8c:7f:b2:
         5f:5e:5a:72:f4:75:77:62:3f:bb:fa:86:f8:05:85:7d:5d:91:
         b6:95:85:41:29:ce:9f:d9:01:ca:a0:aa:bc:f1:e3:54:07:d9:
         00:6f:ae:9b:6f:a3:a6:23:eb:e1:85:31:2b:f1:c1:95:f9:dc:
         45:52:b0:20:cb:86:4b:92:16:c3:74:ab:d4:b0:f5:05:6f:c2:
         a9:17:5f:8a:21:3d:ac:a8:6b:69:37:50:1e:0b:fe:81:65:30:
         c3:88:91:60:59:fd:8b:2f:bd:1d:00:00:78:07:b1:b4:ee:75:
         3b:bc:d0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:32:55 2026 by rpki-client