This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/D4F24058870411EF8D8D2635C4F9AE02.roa
File:                     D4F24058870411EF8D8D2635C4F9AE02.roa (raw, json)
Hash identifier:          4yHPAUnpS39lBAS9Yk3Jy/YMrvPgOTgA0J928B8GM4M=
Subject key identifier:   D9:D3:C2:DE:CC:D8:C0:A0:B8:6F:4A:49:57:24:67:AA:29:0C:C2:A3
Certificate issuer:       /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Certificate serial:       EB
Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/D4F24058870411EF8D8D2635C4F9AE02.roa
Signing time:             Thu 01 Jan 2026 05:23:58 +0000
ROA not before:           Thu 01 Jan 2026 05:23:58 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     153362
IP address blocks:        2001:df4:6640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
                          rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
        Validity
            Not Before: Jan  1 05:23:58 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=695604ee-bd9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fb:31:49:3c:f8:cc:09:d2:73:70:dd:b9:35:
                    a9:78:bc:0d:bb:ea:7a:b7:08:54:ec:02:b2:ed:5e:
                    db:5f:ae:bc:cd:e0:be:db:36:20:14:9a:15:90:22:
                    68:e0:ff:c4:f6:7b:a7:6b:ed:9e:ba:9b:96:0f:b8:
                    ae:18:ec:ba:6d:1d:19:30:51:25:7e:d4:c6:16:77:
                    6e:f6:4e:cf:03:0e:25:bb:a6:c4:ae:95:38:74:95:
                    28:fe:b0:78:46:a3:37:9b:d6:cc:36:39:b7:3c:fc:
                    13:f7:e9:6d:bf:cb:e9:24:40:2d:10:84:f2:88:a6:
                    c9:f4:0a:14:30:2d:db:6a:11:aa:e0:4a:b6:81:b8:
                    bf:09:08:35:72:90:ee:06:e2:fc:64:82:bc:63:a8:
                    4a:46:df:55:7c:71:eb:df:75:d0:d6:67:e1:0e:d8:
                    06:5c:3a:40:e4:ac:8a:8f:39:ed:7d:14:a0:90:55:
                    93:e4:d1:6c:27:38:7b:11:e9:07:0d:aa:82:39:88:
                    df:0b:f7:38:c5:d9:54:26:e0:81:07:13:72:54:42:
                    1b:80:f5:42:c3:1d:c4:56:26:eb:88:70:fd:79:82:
                    82:f7:36:ac:b8:fd:1b:41:12:e5:3f:31:76:b6:1d:
                    5b:af:22:5e:c3:00:c4:92:7e:7e:28:28:98:f3:f9:
                    d5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D3:C2:DE:CC:D8:C0:A0:B8:6F:4A:49:57:24:67:AA:29:0C:C2:A3
            X509v3 Authority Key Identifier:
                keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/D4F24058870411EF8D8D2635C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:6640::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:95:9a:6b:47:77:6d:eb:00:3a:0a:b5:78:7c:2a:59:b2:3f:
         33:25:0a:5a:33:42:b3:8e:df:15:1d:17:40:19:83:4a:28:ec:
         18:a8:87:1e:5b:2b:94:3b:35:46:83:fc:74:af:53:08:23:05:
         dd:a4:6b:f8:30:f1:bd:e7:92:20:34:b6:1c:39:54:ce:2e:b0:
         b4:2e:db:64:35:9b:f4:69:14:90:e3:14:86:b8:b6:98:f6:79:
         33:b6:a9:28:96:26:13:3b:df:26:f0:9f:ca:c1:0f:a1:f0:85:
         8c:a2:ca:10:fe:9a:7e:91:6e:12:aa:99:c0:48:34:1f:f9:d9:
         00:3d:88:10:4d:da:85:49:71:eb:fc:bb:7e:c3:b5:44:34:1d:
         49:61:6a:58:5a:78:f2:fa:e8:ab:8f:82:15:02:c1:37:54:4b:
         ff:ae:8f:a0:81:f8:8f:c6:7d:ab:ae:7c:e0:dd:3f:54:7e:b0:
         bc:5d:a4:00:33:da:18:cd:63:a9:4c:4f:c3:24:54:69:45:af:
         46:f2:a6:30:f2:ee:52:0d:7a:11:14:de:d2:78:08:e5:cb:9e:
         f4:00:f0:85:6b:45:a3:d8:e4:3e:2f:4b:da:d7:22:e5:e2:be:
         b7:1e:35:c6:85:09:5c:43:cd:2f:f1:3e:54:25:9d:59:c7:ed:
         ad:75:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:13:28 2026 by rpki-client