This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C4488734721511EF9D7B9F3DC4F9AE02.roa
File:                     C4488734721511EF9D7B9F3DC4F9AE02.roa (raw, json)
Hash identifier:          900rPf6fLuCAuDpS8wt8ma6mNyasHxmVYMJAC9vVY3g=
Subject key identifier:   FE:91:23:9B:F3:C2:62:CA:36:5B:5D:75:36:92:9A:57:F8:92:0B:2E
Certificate issuer:       /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial:       01CF
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C4488734721511EF9D7B9F3DC4F9AE02.roa
Signing time:             Wed 31 Dec 2025 04:24:43 +0000
ROA not before:           Wed 31 Dec 2025 04:24:43 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     3839
IP address blocks:        2001:3c8:1401::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
        Validity
            Not Before: Dec 31 04:24:43 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6954a58b-32c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:c8:03:38:c4:67:fc:f9:89:29:e5:5b:3c:
                    b4:3f:16:06:f9:10:21:4c:1a:ac:71:1f:c2:ab:72:
                    a9:e5:e9:d2:6b:6e:20:d5:5c:74:83:0f:89:5d:14:
                    e7:98:95:af:d6:6c:ff:03:2a:15:67:60:e5:22:b9:
                    2f:56:c3:6f:a4:e6:3a:18:20:5a:35:fc:08:b9:9c:
                    15:d2:85:2a:b8:ce:65:90:13:71:a2:5c:d7:d2:41:
                    de:4d:ae:8b:82:31:2b:56:bc:c8:c4:d4:d8:72:52:
                    c7:0e:ac:90:1d:d6:2d:52:ed:3f:48:36:ad:f7:ca:
                    28:36:e2:b5:9e:3b:61:3b:5d:8a:e1:66:20:fc:3e:
                    20:ce:d5:e7:3d:65:c6:d1:4b:32:87:a7:2f:26:e4:
                    e5:e5:67:69:46:77:db:3d:39:60:ff:35:0a:b9:98:
                    da:e2:da:16:50:75:f5:db:a6:d6:85:8a:fa:17:af:
                    7e:50:dc:54:e8:8b:ca:19:5d:47:e7:e9:95:f3:9d:
                    0b:34:29:a3:80:73:a3:c3:d0:d0:23:57:0a:3b:62:
                    30:6a:f8:40:b9:08:47:4e:ea:ee:8b:49:88:a5:84:
                    8c:a2:0b:1c:fd:a0:37:72:3b:d3:64:0a:fc:ed:70:
                    51:24:3a:0b:d1:73:cb:de:05:f1:b6:75:97:fe:cf:
                    d5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:91:23:9B:F3:C2:62:CA:36:5B:5D:75:36:92:9A:57:F8:92:0B:2E
            X509v3 Authority Key Identifier:
                keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C4488734721511EF9D7B9F3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3c8:1401::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:b5:02:ec:6e:4c:13:d9:bd:c5:71:c7:41:39:a3:d6:9f:c2:
         ec:25:72:29:84:99:89:3a:38:b6:ce:62:4f:2d:38:4c:1c:ce:
         88:d7:ca:54:fd:3a:f3:70:d8:21:d1:b2:c6:5e:82:60:77:92:
         7e:f2:df:e0:84:e8:c4:cd:cc:28:e7:bf:81:6d:bb:1a:f9:8f:
         a5:66:91:54:4a:16:28:85:37:be:ac:a2:2e:eb:bb:c7:63:b9:
         0c:7a:d3:48:2a:11:b4:92:21:5d:e7:81:c2:b7:96:04:19:96:
         aa:8f:64:51:3c:74:25:19:33:e5:08:e1:1c:2e:2b:14:02:6a:
         40:ea:7a:b4:bf:eb:63:a1:8b:1c:e2:08:86:c2:2a:a7:9a:14:
         43:db:cb:e3:64:f7:ee:e2:19:55:78:c8:20:63:5d:96:54:a9:
         2f:31:9e:98:d6:34:ad:cb:84:0a:c8:15:4c:96:84:b9:8a:d8:
         37:23:04:ca:30:4e:97:65:ce:8f:2b:a1:45:d7:0f:7e:97:e9:
         97:f5:80:00:a7:56:28:07:c4:8f:0a:5f:b1:26:ef:20:27:bd:
         5d:53:01:d0:07:d2:11:da:ad:f1:54:00:fa:b7:ad:1a:7e:34:
         e4:77:a1:b0:5c:42:4e:a5:3e:a5:97:58:2b:cc:2b:5b:c0:f8:
         60:d3:54:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:02:31 2026 by rpki-client