This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F59370E6F77111F0A2BF2041476F56BC.roa
File:                     F59370E6F77111F0A2BF2041476F56BC.roa (raw, json)
Hash identifier:          ZpEClsJ2Nft7D/KNIYw3+k0oBg6SUDf5L18uHsEFDYg=
Subject key identifier:   9C:CC:7D:2E:2E:FB:DF:8A:07:F1:4A:47:2E:CA:0B:38:DC:38:58:00
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4F8A
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F59370E6F77111F0A2BF2041476F56BC.roa
Signing time:             Thu 22 Jan 2026 09:08:47 +0000
ROA not before:           Thu 22 Jan 2026 09:08:47 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153501
IP address blocks:        2001:df4:d9c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20362 (0x4f8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Jan 22 09:08:47 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6971e91f-ef43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b5:b3:15:c2:da:44:a3:fa:12:7a:3c:8e:13:
                    03:af:51:54:d2:ec:4a:8b:18:46:e0:cd:65:0d:3b:
                    5f:8c:da:66:30:c5:c2:77:9d:31:c2:17:7b:48:e7:
                    0f:ad:f5:01:dc:0c:4a:38:f3:a8:80:2b:0d:8b:95:
                    a7:09:22:91:1f:20:ce:b6:37:57:27:e2:38:86:6b:
                    3a:69:52:66:28:e2:78:4c:0d:6c:c0:fd:61:ac:6f:
                    11:a5:40:2d:b7:2e:94:f1:dd:bd:45:02:f3:38:31:
                    40:05:8d:32:33:c7:83:70:d7:ae:2d:aa:36:d4:56:
                    6a:9c:9d:d3:19:18:b2:1f:af:4b:3a:33:b5:41:b8:
                    e8:ba:5e:9d:4f:bb:4e:83:72:f2:e2:10:58:3a:75:
                    95:1b:7b:69:fd:ac:59:e6:75:2e:de:ac:74:4c:a3:
                    7e:3a:1e:51:30:bc:30:de:a9:e4:36:58:10:8c:34:
                    cf:bb:48:f0:c1:39:83:56:7a:9b:2e:d6:ea:78:36:
                    ba:9d:0b:31:e0:8c:2e:2d:cf:7d:5d:3d:40:ce:09:
                    3e:a4:4b:64:cc:48:eb:8a:33:45:10:6e:14:3c:ad:
                    c4:0c:b0:a4:06:26:2f:88:ea:d8:3f:e3:53:39:21:
                    0a:87:4e:c8:00:0e:d8:0a:61:88:af:6c:56:94:9e:
                    71:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CC:7D:2E:2E:FB:DF:8A:07:F1:4A:47:2E:CA:0B:38:DC:38:58:00
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F59370E6F77111F0A2BF2041476F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:d9c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:0a:15:90:df:1e:4f:18:8e:ed:bf:77:f3:df:5c:de:ff:81:
         79:2a:ee:d4:b1:c1:11:5c:62:cb:19:67:b9:ac:f9:cf:5a:69:
         40:0a:db:b9:4d:b5:2c:cb:b2:78:79:d3:c3:3a:2e:62:df:d2:
         b4:40:ea:23:bf:fa:6b:af:80:ec:50:4a:c9:a2:2e:87:7f:19:
         84:2d:de:af:e4:dd:2e:02:42:b8:c3:dc:69:35:1a:60:7c:6b:
         cf:d4:10:e7:dc:2e:69:19:61:92:79:1d:11:91:21:73:50:2f:
         ce:f4:34:ef:60:0f:85:f2:d7:94:f3:c0:83:c2:15:28:55:aa:
         3d:c6:b0:c0:91:6f:02:80:d4:e8:e2:c3:79:e2:09:28:12:59:
         e8:6d:d3:07:cc:6a:1a:d2:4c:73:a9:9f:2a:c8:af:cc:6b:f2:
         fe:e1:4e:8a:7a:52:e3:eb:b3:3b:56:bb:95:ae:41:86:a2:e1:
         39:29:94:41:29:2e:93:e1:17:d0:54:66:2d:f7:23:3d:21:90:
         72:ce:fb:e1:de:f9:0e:c0:bf:9b:98:df:45:99:36:5c:47:50:
         f1:60:ee:35:e7:e1:7d:51:e9:4b:26:f9:f6:71:b3:87:9f:f9:
         ee:31:29:2a:3b:25:46:2b:98:7d:01:10:1c:e1:fd:33:6a:fd:
         2c:58:54:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:53:41 2026 by rpki-client