This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/9B3FE178A7FA11EFA7886875C4F9AE02.roa
File:                     9B3FE178A7FA11EFA7886875C4F9AE02.roa (raw, json)
Hash identifier:          Gr0PXwxUpmRKlbQEfvqS5eHW+A4ehoPUWPtwkZnjT0E=
Subject key identifier:   C0:3B:FA:0E:06:58:68:79:9E:2C:7F:36:6A:97:D9:63:77:20:0C:00
Certificate issuer:       /CN=A91380F7/serialNumber=0391D9A70E893E751BC61289C54417B87A104559
Certificate serial:       DB
Authority key identifier: 03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/9B3FE178A7FA11EFA7886875C4F9AE02.roa
Signing time:             Mon 19 Jan 2026 05:24:39 +0000
ROA not before:           Mon 19 Jan 2026 05:24:38 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139469
IP address blocks:        2001:df4:a6c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl
                          rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 04:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91380F7, serialNumber=0391D9A70E893E751BC61289C54417B87A104559
        Validity
            Not Before: Jan 19 05:24:38 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=696dc016-6872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:59:32:0b:3c:5a:46:bd:db:c5:49:e8:08:d8:
                    18:80:b6:07:bf:9d:1f:d4:5c:41:71:8b:aa:89:3d:
                    65:61:1d:00:6b:c2:63:92:62:22:e9:5e:b3:a6:77:
                    44:8e:9f:b1:21:51:57:da:5d:5c:b8:cf:30:b9:dc:
                    95:1c:ec:50:ef:93:32:82:44:81:52:05:0e:b9:5c:
                    39:e4:1e:b4:8f:08:7e:68:6e:35:65:e7:1a:d0:4c:
                    00:2d:23:81:e2:3f:a5:dc:b4:b8:bc:f9:1f:c3:da:
                    b9:83:e7:21:d6:e3:3f:6d:5d:69:42:e2:98:97:9c:
                    a2:37:c5:14:04:75:48:63:9d:98:a2:22:3c:73:9f:
                    5b:b1:a4:b3:84:2e:15:f2:cc:e2:84:24:e1:55:16:
                    b0:f3:58:ae:98:09:59:15:57:d0:b3:00:60:3f:90:
                    b1:4e:d4:e8:93:38:d8:7e:66:1d:dd:3b:c8:c6:4c:
                    07:06:e2:75:5e:9c:2a:07:98:a1:cb:67:e2:1d:3d:
                    e9:36:04:42:60:ae:0b:ac:4d:dd:b7:0b:dc:76:2c:
                    c7:d5:e4:8e:19:92:75:18:7e:aa:9f:66:59:5b:cf:
                    0f:f0:b6:7d:de:6a:c7:47:d9:90:3b:7d:e1:7f:38:
                    d0:14:66:0b:28:85:87:6e:43:13:b9:78:b1:a6:ab:
                    f7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3B:FA:0E:06:58:68:79:9E:2C:7F:36:6A:97:D9:63:77:20:0C:00
            X509v3 Authority Key Identifier:
                keyid:03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/9B3FE178A7FA11EFA7886875C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:a6c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:7a:99:fa:2b:b3:d3:bd:91:4c:53:40:bf:67:92:ff:fc:c8:
         95:fd:5c:9e:e7:3f:3b:07:93:6a:e8:7d:af:44:7e:6e:ea:74:
         22:6a:7c:60:7c:33:5c:f7:f0:1f:5d:ad:3a:19:62:3b:3b:a0:
         76:62:e2:00:ef:19:d9:48:bc:0b:8c:51:2b:45:55:f1:4c:cf:
         3b:d5:77:4f:01:bf:0b:fc:9e:77:34:de:33:d1:4b:51:6d:7c:
         e7:00:de:99:be:f3:21:2d:90:c5:f8:92:a1:bf:4f:90:0b:6f:
         c3:8a:85:8b:98:d5:41:11:2c:f7:c4:3d:d5:57:b1:fc:35:a1:
         39:ce:38:68:d4:a4:7b:0a:0a:30:a1:80:79:d3:46:4b:e8:1b:
         5e:cc:1f:78:ca:e0:0b:2b:13:86:f5:fd:a6:e2:a7:8b:dc:5e:
         35:d8:58:0a:3e:25:fb:fe:44:de:06:0c:a5:b8:f9:0d:c6:dc:
         23:49:bf:23:0a:b7:62:6a:10:56:0b:dc:4a:0b:96:50:03:f6:
         63:56:78:5a:35:72:21:59:47:a9:f5:9f:30:90:b4:95:17:93:
         af:80:c6:65:2f:ab:77:3d:f9:6c:a6:f1:23:c7:81:d3:a1:a0:
         20:5a:09:ab:1b:54:19:32:b8:86:c0:99:ea:6d:76:a8:67:47:
         06:39:78:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:15 2026 by rpki-client