This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/0EB302DCEA5B11EFABB07C6DC4F9AE02.roa
File:                     0EB302DCEA5B11EFABB07C6DC4F9AE02.roa (raw, json)
Hash identifier:          h+3/FTy9YZabaahMuXXEJUibUnlCC2pty0unDAr7ERA=
Subject key identifier:   CE:15:C9:47:8E:CB:9D:D2:C7:20:5D:45:C3:1B:B8:7D:80:62:29:FD
Certificate issuer:       /CN=A91A91CB/serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6
Certificate serial:       B1
Authority key identifier: 89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/0EB302DCEA5B11EFABB07C6DC4F9AE02.roa
Signing time:             Wed 21 Jan 2026 05:25:16 +0000
ROA not before:           Wed 21 Jan 2026 05:25:16 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     7575
IP address blocks:        2001:df4:c7c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl
                          rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A91CB, serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6
        Validity
            Not Before: Jan 21 05:25:16 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6970633c-c090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8e:a8:cf:48:0f:b5:73:64:27:b1:95:fa:3c:
                    ad:ca:e5:72:ae:f5:4e:d3:42:29:9c:ba:15:12:ea:
                    7d:1f:9e:10:20:2b:05:02:15:bd:25:9e:db:78:4f:
                    ca:c0:f7:19:15:a7:19:2c:b9:fc:89:51:17:df:33:
                    f0:83:70:ad:67:c8:0e:16:0d:74:c6:66:d1:9b:ff:
                    17:be:71:84:f3:42:7e:2f:74:45:7a:12:24:28:55:
                    6d:83:63:c6:bb:ce:4b:36:34:2c:03:68:a1:87:9d:
                    9f:6c:34:1a:b9:24:1d:00:60:75:82:99:19:d1:d4:
                    44:fb:05:41:fc:b6:01:93:8c:73:05:df:9d:02:c6:
                    5c:e3:b2:39:cb:5d:85:2b:1d:8f:78:6f:3f:9d:b3:
                    1a:b2:0d:82:c7:be:42:d0:ac:ea:98:6d:9d:c5:29:
                    bf:bc:cf:cd:9b:b8:b7:a8:dc:0b:82:d5:52:18:47:
                    4a:40:b5:1f:3a:8a:c2:90:24:ee:81:f2:46:d1:f2:
                    5f:df:26:37:6d:be:24:fd:65:01:a9:57:81:03:c4:
                    72:02:0d:a3:d0:23:63:6c:85:d9:59:ee:46:22:74:
                    12:25:8c:b5:f4:64:f4:f3:47:8a:ab:b9:88:55:92:
                    19:c3:e8:bf:02:1d:20:f6:e1:c0:78:d1:ef:d1:43:
                    fe:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:15:C9:47:8E:CB:9D:D2:C7:20:5D:45:C3:1B:B8:7D:80:62:29:FD
            X509v3 Authority Key Identifier:
                keyid:89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/0EB302DCEA5B11EFABB07C6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:c7c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         d9:09:9c:10:c9:a7:92:5a:ca:38:63:5a:e7:66:ad:ff:5f:2a:
         c1:b1:e7:de:d9:e9:87:9f:ac:32:01:a2:8e:28:3d:be:f9:7c:
         68:03:a4:b1:23:0e:22:cd:fd:48:06:00:48:30:34:b8:b9:d2:
         05:6b:ff:78:12:39:cc:e4:a4:9b:8b:d5:07:84:2f:73:e4:d5:
         ac:05:76:d6:69:27:bf:c4:df:fd:47:ff:33:da:26:47:63:f0:
         17:23:c1:0c:10:43:01:e9:ca:9d:26:ad:30:72:83:87:62:8a:
         62:25:cd:72:da:36:9e:c2:68:d7:fe:ed:cc:d1:66:92:d1:f6:
         e1:e4:bb:1d:f5:e1:5e:81:48:05:64:42:c1:da:f3:c2:86:ea:
         24:89:1f:b6:ae:ee:b2:d9:23:50:16:72:67:f7:96:72:7f:92:
         44:ef:ba:a0:b0:6a:63:8d:68:c8:0d:f2:47:72:a0:c7:68:bc:
         79:a3:45:17:73:07:18:26:08:93:0d:58:f8:ad:7f:01:98:c7:
         0c:b7:ad:c2:60:f3:b0:67:cf:e8:a5:44:53:a9:35:17:01:e9:
         a7:47:67:a9:10:6e:17:ae:11:6a:99:3f:9e:2a:ad:9b:28:25:
         15:ec:1a:86:9f:37:04:4a:29:1e:23:03:d4:ee:09:dd:91:1d:
         4a:ba:3b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:04 2026 by rpki-client