This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/F73EFF46839211EEA1EC8A0EC4F9AE02.roa
File:                     F73EFF46839211EEA1EC8A0EC4F9AE02.roa (raw, json)
Hash identifier:          xi4yoyms06WhExaW9gu+Oo/FprIj45uriQGp+HkgIXE=
Subject key identifier:   72:0E:7B:CC:08:C5:72:97:BD:E0:2D:86:6C:1D:C3:D9:6C:F0:A8:56
Certificate issuer:       /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
Certificate serial:       0F21
Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/F73EFF46839211EEA1EC8A0EC4F9AE02.roa
Signing time:             Tue 30 Dec 2025 18:14:34 +0000
ROA not before:           Tue 30 Dec 2025 18:14:34 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     7470
IP address blocks:        2400:c540:110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl
                          rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3873 (0xf21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
        Validity
            Not Before: Dec 30 18:14:34 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6954168a-934a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9b:07:5c:81:bc:73:55:e1:46:60:77:b9:74:
                    b2:51:77:66:dd:74:54:0a:03:21:67:6a:e0:74:e7:
                    f0:85:9b:c5:11:80:7b:ef:3f:42:34:33:99:f1:21:
                    53:66:2b:51:6b:de:27:03:f4:fc:da:58:60:30:b5:
                    e7:52:d7:c4:43:5e:95:3f:b1:7a:f1:d3:88:b6:f5:
                    7b:d8:c1:80:98:4c:50:62:9f:e5:97:79:68:18:a6:
                    45:26:f3:d9:8e:f6:9c:cf:8a:1f:f2:e3:de:ea:ec:
                    c5:bd:8f:a6:b2:8e:57:b0:39:4e:2c:97:4c:17:ed:
                    58:2b:41:3a:bc:66:91:48:bc:95:97:25:ef:79:5a:
                    43:be:73:08:1d:40:e4:93:95:49:c4:81:13:e7:37:
                    9e:5a:3b:cb:8a:09:6d:11:45:c5:a3:7a:b7:06:1b:
                    9a:7c:c8:06:83:d6:25:6d:20:d2:3d:7f:d9:02:e1:
                    8b:9f:89:4e:49:38:9f:6c:a2:ef:42:5a:7d:13:8f:
                    4d:0a:51:f1:8a:c8:11:20:cc:ed:eb:3b:fe:89:c8:
                    a8:76:43:0c:51:ff:b8:8c:2a:a2:2b:b3:da:45:85:
                    bd:f7:6a:ba:7d:19:54:84:43:72:85:0a:82:92:1e:
                    44:e4:6a:ad:69:e8:c8:c4:e9:ed:e1:18:b8:26:f5:
                    66:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0E:7B:CC:08:C5:72:97:BD:E0:2D:86:6C:1D:C3:D9:6C:F0:A8:56
            X509v3 Authority Key Identifier:
                keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/F73EFF46839211EEA1EC8A0EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c540:110::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:f7:b9:c3:4d:b1:be:57:12:33:3c:0d:53:7d:ef:72:4b:8a:
         de:0e:10:f4:b4:4a:b7:55:81:70:3d:4b:73:1a:66:36:25:98:
         61:2f:7b:70:e7:e3:21:c9:03:45:ec:fc:b5:81:9d:f5:1e:69:
         6b:27:b9:11:96:61:a1:87:cb:39:9f:9a:24:53:27:ee:ec:f1:
         61:ee:24:c5:e7:14:54:78:f2:13:aa:bb:0f:96:19:78:4c:42:
         a6:5e:5a:82:a2:a0:17:95:d1:ae:33:90:19:2f:6e:f2:52:18:
         8f:b4:58:2a:7f:b2:7f:85:65:7f:2c:b0:7b:c2:bc:fd:cf:be:
         2b:af:18:29:53:f5:d6:12:40:da:d4:3f:22:a3:a5:e9:92:cf:
         5b:9c:36:bb:50:15:d3:87:a1:8e:08:5b:e3:f7:4c:6f:10:ab:
         0a:8c:0c:07:38:7b:5e:00:bd:83:3b:88:9b:b0:c4:be:38:07:
         bf:7a:39:65:a1:6a:a7:20:ba:a5:bf:82:cc:64:47:4e:55:84:
         e4:18:8c:33:f7:82:b6:01:5e:d2:19:1b:ea:58:b2:20:de:08:
         ac:cf:6f:77:23:a9:d2:e4:a5:28:50:e5:2a:9a:e2:7b:39:ae:
         e7:ed:e2:50:d1:ea:e2:1c:c7:7a:57:08:2e:8a:8a:c3:38:92:
         69:fc:4c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:23:16 2026 by rpki-client