This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/B1532E06F5FC11F08D6378D9536F56BC.roa
File:                     B1532E06F5FC11F08D6378D9536F56BC.roa (raw, json)
Hash identifier:          BHvIKED2uaqPZAP51ZvoMUdC+nOEbdcjH/lTTza7+wg=
Subject key identifier:   3C:26:8B:61:44:3D:4C:00:8A:0E:75:4C:2E:84:0C:FD:E6:61:A3:84
Certificate issuer:       /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186
Certificate serial:       C7
Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/B1532E06F5FC11F08D6378D9536F56BC.roa
Signing time:             Tue 20 Jan 2026 12:36:50 +0000
ROA not before:           Tue 20 Jan 2026 12:36:50 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     58062
IP address blocks:        2001:df4:e140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl
                          rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186
        Validity
            Not Before: Jan 20 12:36:50 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=696f76e2-c509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1f:64:0a:cc:88:89:dc:6f:bf:e5:df:31:73:
                    b1:2d:24:06:e0:ab:16:28:2f:fc:c2:9a:e6:04:50:
                    82:32:cf:6c:95:d7:8b:1c:2b:f0:da:b0:1c:55:3f:
                    2c:a9:47:35:48:d0:e1:38:3e:a3:d6:58:0b:37:f9:
                    48:97:d9:f6:51:7d:f3:f2:5b:23:09:46:bf:ef:f0:
                    c5:88:8e:cc:b8:b1:26:a3:9c:51:1e:40:39:f5:38:
                    65:c7:46:b4:19:de:bf:5f:0c:1a:a2:50:36:10:ed:
                    78:0a:63:b6:45:d8:8b:0e:61:c5:6c:f2:50:bf:1d:
                    9c:6e:cd:38:5d:0a:1b:82:db:6b:69:9f:b0:41:f0:
                    d4:f9:d6:4f:1e:b0:a0:03:9f:bf:2a:0a:19:75:c0:
                    60:e7:ec:61:e5:71:65:dc:f0:cc:53:ae:b4:ae:f6:
                    98:28:ed:a7:19:03:9b:61:bd:49:bb:fb:ff:8c:a1:
                    94:8b:00:b5:6c:60:7a:bb:d8:01:c7:d2:7a:8c:8b:
                    04:5d:34:da:68:c8:87:f7:e6:7b:43:ef:1d:91:4f:
                    7e:7a:b8:7a:ee:12:ee:79:98:d0:c0:2e:50:e8:f2:
                    d9:fa:14:f1:24:1b:df:7f:43:4d:c0:6b:9a:f1:58:
                    5d:54:bf:92:23:0b:4e:03:7a:c9:94:60:cc:ef:91:
                    be:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:26:8B:61:44:3D:4C:00:8A:0E:75:4C:2E:84:0C:FD:E6:61:A3:84
            X509v3 Authority Key Identifier:
                keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/B1532E06F5FC11F08D6378D9536F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:e140::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:17:5d:30:00:86:1f:37:43:33:14:8d:86:e6:34:71:52:9b:
         ea:3a:1d:d8:e4:de:5e:d5:58:0d:49:c9:78:03:02:1f:6c:57:
         aa:7c:e8:3b:c2:31:6b:bf:e0:69:d5:64:98:44:ae:3f:10:b7:
         69:8a:37:04:76:3f:85:b0:ad:6e:f6:d3:b4:d1:3f:6f:f4:b6:
         71:86:e7:d6:99:9f:6d:0e:d2:56:52:22:b0:ff:b8:d5:f2:9e:
         da:77:e3:37:9d:4b:62:7e:ed:cf:60:9b:17:d4:0c:05:d7:55:
         58:6a:74:fe:9e:a3:17:b2:e3:55:97:da:76:a8:31:55:e1:8f:
         21:f1:0a:fc:e6:76:6f:d0:7b:33:65:73:84:a2:7d:89:50:7d:
         f8:c6:e3:1e:ac:6b:0c:13:f4:56:c4:05:c4:7c:4c:41:f0:a7:
         fe:da:2a:31:c9:24:31:06:51:74:9b:eb:31:5e:11:04:7a:e4:
         5f:00:85:a8:05:f0:7d:db:c1:b6:7f:ff:9f:b2:32:af:23:3b:
         88:74:a8:a2:df:60:bc:62:3c:d1:16:73:ae:39:f4:b5:11:de:
         f0:77:51:72:6e:6f:01:6d:bd:22:8d:a9:59:c7:f0:c2:4b:b5:
         fd:3f:ba:bc:4c:a3:17:70:7a:a0:f2:bf:50:7d:f4:8e:b7:9a:
         ef:f1:94:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:03:13 2026 by rpki-client