This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/0D041790A28611EFBD5A8C11C4F9AE02.roa
File:                     0D041790A28611EFBD5A8C11C4F9AE02.roa (raw, json)
Hash identifier:          LGzZuPNiRPnWl27SkEdE4WpUy5pSZMAYp9U5fkhC8CI=
Subject key identifier:   8B:41:C3:C4:99:D5:DE:B7:35:F8:CB:91:6A:30:8F:34:50:26:7F:44
Certificate issuer:       /CN=A91955D9/serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
Certificate serial:       DB
Authority key identifier: F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/0D041790A28611EFBD5A8C11C4F9AE02.roa
Signing time:             Sun 11 Jan 2026 05:23:57 +0000
ROA not before:           Sun 11 Jan 2026 05:23:57 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     153455
IP address blocks:        2401:d760::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl
                          rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91955D9, serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
        Validity
            Not Before: Jan 11 05:23:57 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=696333ed-487a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:18:52:f5:e3:96:44:89:69:da:db:da:40:
                    53:2d:5f:ee:ce:cc:d4:a6:c5:a8:8f:df:54:a8:9d:
                    54:60:f4:1a:00:8e:cf:a5:92:51:99:89:2e:12:63:
                    df:fd:bc:ee:40:f5:e2:7c:da:93:85:7b:da:dd:30:
                    c7:a8:69:67:b9:4b:7a:53:5c:9d:97:b9:81:6f:be:
                    10:e2:c2:3e:a2:19:de:19:9a:90:53:2f:3e:32:8b:
                    2a:a3:d1:4d:a5:75:da:7b:73:7d:9c:15:77:45:51:
                    44:08:7a:db:fe:31:14:d1:81:af:37:4f:0b:f9:6b:
                    40:de:e7:bc:33:1e:e3:df:0b:bf:5b:9c:df:5f:a6:
                    57:bb:98:7a:e3:86:82:0f:e0:d7:2a:fe:30:8e:cb:
                    3c:99:15:97:bf:76:67:43:a8:29:c9:2f:db:1d:4e:
                    eb:e5:f2:fc:01:e1:c4:b4:4d:0c:f2:a6:ae:77:9f:
                    8e:8b:aa:6d:b4:52:b2:e8:54:2b:dc:82:cc:89:d3:
                    4e:97:3f:ee:66:c1:2a:32:a9:16:32:e7:38:7b:b1:
                    90:63:f4:d1:1a:75:fa:b7:03:f9:32:5f:12:2e:42:
                    32:7c:6d:36:a6:e9:f0:0d:73:16:c6:39:cf:e6:77:
                    5e:5b:cf:8e:dd:a1:e0:28:ae:f0:f1:b0:6a:0c:e0:
                    ae:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:41:C3:C4:99:D5:DE:B7:35:F8:CB:91:6A:30:8F:34:50:26:7F:44
            X509v3 Authority Key Identifier:
                keyid:F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/0D041790A28611EFBD5A8C11C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d760::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:05:9b:67:56:7a:84:4f:f9:16:31:ee:9d:25:99:f0:37:b1:
         6f:f6:b6:69:0b:04:1c:c1:e5:f4:d4:6b:74:c4:d7:a3:25:24:
         69:48:de:b0:e3:d9:be:86:d2:5d:66:ed:4f:63:59:3f:c3:80:
         8f:60:38:84:ab:fe:1d:90:1e:30:91:67:b3:07:c3:f2:83:c1:
         d3:05:81:f4:4f:c4:97:b3:bd:06:30:d6:54:51:e5:51:86:93:
         28:ae:fc:38:6a:80:75:c2:fa:b6:7c:b3:30:30:63:8e:73:aa:
         34:48:ce:94:0b:9a:43:eb:03:a1:39:4a:29:97:5f:e0:29:10:
         4b:bf:13:c7:c7:9a:c3:7b:e2:92:1e:55:d3:74:13:33:67:02:
         fd:82:52:98:4b:59:f3:35:03:08:2f:62:ca:30:34:63:b6:ec:
         2c:b1:be:ff:06:7e:39:ca:c1:19:14:2d:d9:56:3e:20:71:ea:
         ea:2c:dc:14:e4:a0:15:bc:ee:d5:0c:2d:11:5e:ce:83:26:7a:
         c9:ba:fd:4f:5e:ab:60:7a:63:f1:98:72:c0:f4:d4:cb:af:42:
         07:dc:5c:a4:78:3d:7e:90:6c:82:ba:20:c3:9f:3d:e8:50:4b:
         cf:b0:47:4c:4c:64:20:a8:aa:8d:6c:76:08:e7:61:fc:23:2f:
         c3:27:fd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:51:50 2026 by rpki-client