This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/455D199EE38B11EE84566164C4F9AE02.roa
File:                     455D199EE38B11EE84566164C4F9AE02.roa (raw, json)
Hash identifier:          S8ULCgPAXSM7+qWXp3lvcSf0qm+AFlYQ40YOxpCz5HM=
Subject key identifier:   A8:DB:C9:24:16:C4:A5:44:A0:8E:0E:21:C3:51:9E:3A:27:FF:36:C1
Certificate issuer:       /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Certificate serial:       0276
Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/455D199EE38B11EE84566164C4F9AE02.roa
Signing time:             Tue 13 Jan 2026 01:21:13 +0000
ROA not before:           Tue 13 Jan 2026 01:21:13 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     152639
IP address blocks:        2001:df2:3dc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
                          rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630 (0x276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
        Validity
            Not Before: Jan 13 01:21:13 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69659e09-cb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b2:58:12:e3:4e:38:66:cc:92:2d:22:03:39:
                    71:fe:92:59:99:b3:0c:16:d9:f5:38:13:43:69:99:
                    5b:fe:7a:50:7c:8c:54:83:d7:cd:dd:5f:44:9d:41:
                    ad:62:7c:04:26:ab:64:e0:b2:7a:11:ac:0b:9b:4c:
                    a9:fb:ec:5a:4e:29:42:cb:10:2b:2c:23:bb:30:21:
                    1c:ee:c5:82:f2:15:d1:ec:8a:7a:64:40:d7:99:42:
                    7e:f5:bf:55:51:cc:f2:7f:31:2b:db:5f:e3:bf:5a:
                    6a:5c:0e:68:f0:49:a7:58:a1:6f:c1:53:f9:4f:13:
                    e5:b4:cc:c6:94:47:93:f9:14:4b:93:f0:34:e8:b5:
                    69:f9:2c:3f:71:96:0e:1a:7b:88:a8:53:4b:00:8c:
                    9e:f9:f3:6a:74:3b:0b:05:22:11:2c:4f:dc:79:6f:
                    fe:40:91:01:97:a5:32:15:49:12:1a:08:8b:72:2b:
                    8a:20:8e:a4:d0:fc:5c:d3:e7:a1:28:8f:90:9e:5b:
                    69:3b:b1:4f:9d:03:2d:95:7c:38:a7:fc:93:e7:e7:
                    f3:a8:2a:b8:02:69:e6:5a:f8:96:33:35:0b:ff:7c:
                    87:d7:07:d7:87:6f:a8:36:f2:ea:be:26:f3:4f:73:
                    08:38:ef:1e:f5:a9:62:c8:b8:85:b5:75:0c:53:44:
                    04:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DB:C9:24:16:C4:A5:44:A0:8E:0E:21:C3:51:9E:3A:27:FF:36:C1
            X509v3 Authority Key Identifier:
                keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/455D199EE38B11EE84566164C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:3dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:01:dc:84:88:79:c5:0a:de:c5:b9:8c:09:33:40:26:48:bf:
         7d:59:53:e0:95:ea:6d:0b:57:dc:9d:e4:cc:d2:35:e0:72:b5:
         ce:e7:14:02:20:57:90:98:02:d5:c8:56:d8:1e:a2:26:bb:20:
         ec:59:e5:ec:a2:c4:90:23:23:6f:28:59:7c:07:5d:52:96:9f:
         02:93:94:8e:ae:ea:e5:91:a3:4e:4f:f1:25:c7:cc:2c:5a:3b:
         a6:78:a2:48:d6:6c:aa:0f:17:ef:06:a6:2d:c6:ef:37:c5:56:
         b0:ce:cf:8e:f8:c8:25:80:c6:71:ad:5d:1b:f9:c7:00:f1:b1:
         f9:32:2f:ad:1e:93:f0:d9:15:41:b6:2c:52:8e:ed:28:33:4a:
         b6:08:01:ce:a7:80:59:9a:6d:3e:f2:5b:48:d1:56:3f:bc:ec:
         32:26:14:1e:78:d5:d6:eb:0d:84:6b:f9:db:c6:15:f6:e8:31:
         fe:47:bd:1b:e5:44:de:17:06:dc:15:ca:ac:92:83:6f:42:7d:
         65:79:da:9a:a1:a4:1f:f0:99:60:88:f2:f5:44:32:e2:58:9c:
         04:80:94:d2:a2:13:4c:e9:17:3a:e7:b7:01:5f:3c:1f:da:f5:
         3f:9c:be:c1:57:a2:35:8e:19:21:96:86:94:5d:38:44:54:2f:
         8a:63:09:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:21:09 2026 by rpki-client