This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa
File:                     9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa (raw, json)
Hash identifier:          7YqeEswxJjsF8+Ym8ZXKHPEpLe9VpPmEs7vNVGd9xjs=
Subject key identifier:   47:D1:76:AC:57:42:11:99:53:FA:AA:3C:D1:AB:DC:8B:09:90:56:E8
Certificate issuer:       /CN=A919318C/serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442
Certificate serial:       69
Authority key identifier: BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa
Signing time:             Fri 09 Jan 2026 06:25:15 +0000
ROA not before:           Fri 09 Jan 2026 06:25:15 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     135060
IP address blocks:        2001:df5:df40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl
                          rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919318C, serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442
        Validity
            Not Before: Jan  9 06:25:15 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69609f4b-5872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5b:60:10:5c:b2:dd:13:c2:69:74:e7:27:ac:
                    c3:35:d0:cd:7a:d5:4c:52:63:84:fb:ba:49:93:1c:
                    d8:9f:46:69:fb:bd:7f:11:6b:cd:fd:1c:b4:cc:1c:
                    4c:e8:ea:23:f7:12:71:a5:77:bd:8b:55:a4:4a:a6:
                    63:17:01:5e:4c:ce:da:34:2b:43:b4:3f:e3:79:11:
                    82:62:f1:52:21:70:3f:4e:f7:bb:da:17:b2:05:c0:
                    ba:97:1e:70:29:16:2b:d1:08:bd:7d:2f:9e:ab:3c:
                    45:23:7f:65:9c:1d:03:69:7d:08:82:36:2d:fa:25:
                    ee:7c:31:ae:e8:0b:db:99:84:53:40:28:22:e3:aa:
                    19:d7:1a:32:67:09:68:bf:1d:dc:72:a2:a4:6e:e3:
                    83:a7:69:64:b0:95:43:99:16:bd:e4:7b:35:ad:81:
                    28:ce:3b:02:8e:88:90:14:2a:37:7a:18:0b:df:6b:
                    9c:aa:af:41:a8:60:57:59:f8:30:61:a0:d3:f3:5c:
                    eb:e9:c3:76:0f:c4:a9:5d:73:2b:73:5a:5e:94:14:
                    65:09:0f:3a:10:b4:4c:26:61:9e:2c:a2:10:0b:08:
                    f9:69:0f:38:52:51:aa:b5:19:03:2c:ca:a5:81:03:
                    fe:7c:ab:7f:d1:42:48:c7:82:f4:66:f4:2e:fb:2d:
                    17:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D1:76:AC:57:42:11:99:53:FA:AA:3C:D1:AB:DC:8B:09:90:56:E8
            X509v3 Authority Key Identifier:
                keyid:BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:df40::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:09:a8:02:6f:9d:f2:c8:48:7f:8a:be:ce:f1:7a:8c:e5:41:
         8e:67:78:97:e4:38:7b:e6:1b:9b:02:1f:9d:75:70:dc:e7:66:
         dc:49:69:90:b1:8f:8f:b5:af:b6:fa:58:c5:24:20:9f:eb:d7:
         42:39:22:3b:3e:7a:b6:85:c4:98:1d:f2:2e:8e:33:10:24:3d:
         b0:9f:71:6a:4a:ae:34:2e:9f:91:32:aa:14:7b:3f:bd:ba:de:
         c9:2c:fc:de:ef:7c:61:85:1b:5f:c9:86:fd:e8:ad:59:71:59:
         bf:32:71:7c:61:fc:67:3e:93:0a:59:3d:c9:3f:d4:08:7d:88:
         37:46:fb:89:ef:7c:2e:95:aa:ca:10:f9:af:92:cd:83:bf:b8:
         90:42:c5:f3:d7:58:f2:f9:f7:82:67:05:34:25:d3:95:ad:dc:
         aa:ac:6a:98:8e:c8:65:d5:1f:a0:8b:dd:b4:28:f6:68:2d:2c:
         e5:36:78:79:a9:c3:b1:0c:d2:84:4b:22:e0:e2:7d:1a:7e:ca:
         f2:ca:d7:b1:7e:b2:ca:d2:2f:5a:d2:7f:f6:ea:f2:64:0c:b7:
         c0:5e:36:6b:15:c6:e2:b4:e6:27:fc:43:57:12:56:a2:12:19:
         08:85:73:a4:05:c3:53:6e:41:63:45:0e:d7:db:42:7f:6b:51:
         17:da:26:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:35:24 2026 by rpki-client