This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/C3D424C4F4F611F0B230A1D14E6F56BC.roa
File:                     C3D424C4F4F611F0B230A1D14E6F56BC.roa (raw, json)
Hash identifier:          8/UUkf/rJMbbXL8T4uuyP3cefAkqNROTQKzms1ULk+U=
Subject key identifier:   27:9E:8F:8C:89:B0:2B:21:88:09:B3:C9:6A:00:FA:88:C9:09:39:0E
Certificate issuer:       /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Certificate serial:       0974
Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/C3D424C4F4F611F0B230A1D14E6F56BC.roa
Signing time:             Mon 19 Jan 2026 05:21:53 +0000
ROA not before:           Mon 19 Jan 2026 05:21:53 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     138619
IP address blocks:        2001:df6:7bc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
                          rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:59:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2420 (0x974)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
        Validity
            Not Before: Jan 19 05:21:53 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=696dbf71-07a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:5a:21:98:1d:1d:ac:1b:7d:cd:61:f2:d3:
                    42:dd:5d:c0:c7:cc:79:85:a8:64:da:df:1b:45:1a:
                    b1:17:3e:37:3c:71:00:29:f5:c6:4d:d7:63:d8:a0:
                    ef:d9:1d:39:84:fe:c1:0a:f4:69:d8:a2:0e:9e:65:
                    a5:d0:09:cc:3b:ba:3f:ca:40:27:e1:30:66:1f:4c:
                    5f:3f:27:c1:3e:84:a6:03:3d:a2:1a:fd:a7:9a:ca:
                    3d:58:d9:96:76:3b:f2:7e:12:0a:e9:5b:1c:e2:c9:
                    84:b7:42:b5:47:4f:90:e2:02:b2:1c:67:61:41:55:
                    2b:39:3e:8f:f6:08:97:59:86:bc:e1:3b:a1:31:38:
                    82:b8:2d:45:ea:b5:7f:ab:bf:51:71:53:a8:30:68:
                    ba:a7:7a:f2:5f:7e:ae:5c:2d:95:33:85:6c:76:51:
                    10:90:41:e0:ba:f1:b6:5a:bf:14:a2:4a:11:8c:6c:
                    f0:59:9b:d8:29:4e:ed:cc:b2:64:7b:e8:c7:03:5e:
                    bc:a0:95:93:25:44:9c:23:f9:b3:02:66:fa:e6:fc:
                    7e:cd:22:4c:ac:f3:0e:cb:c1:02:ef:51:3e:a4:3d:
                    c3:0e:fd:22:41:ef:b8:d2:b6:68:c3:8d:36:3c:14:
                    9b:57:d2:d3:75:b2:ea:8e:16:39:4d:77:38:f5:fd:
                    e1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9E:8F:8C:89:B0:2B:21:88:09:B3:C9:6A:00:FA:88:C9:09:39:0E
            X509v3 Authority Key Identifier:
                keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/C3D424C4F4F611F0B230A1D14E6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:7bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:f6:f9:65:cb:ec:e2:30:11:b5:10:14:3f:9a:5c:ed:58:b2:
         13:a4:a5:29:a6:94:00:9d:60:19:1f:e2:5d:41:40:85:dd:f2:
         45:43:b0:ea:69:63:05:ca:1e:df:cf:be:2c:3d:85:8d:ae:c0:
         6f:aa:cf:a3:57:66:c9:10:2a:d9:64:df:9f:2f:4c:bd:45:e7:
         5a:6f:57:b3:73:51:40:04:30:be:87:ec:ee:dd:a6:44:70:4a:
         6d:7d:fe:07:67:d0:45:0c:00:b3:fc:7c:6b:8c:69:bf:f0:27:
         07:49:15:92:a2:03:ec:17:de:15:5c:c7:54:14:cb:67:18:c3:
         27:54:cb:fb:a6:83:cd:55:61:d4:b3:ce:1a:53:7e:cc:bf:a5:
         ba:76:13:98:10:46:7d:03:0d:f6:a8:c0:67:be:08:aa:2f:38:
         a4:4b:04:cd:c0:e5:6a:a7:7d:6a:80:e3:df:fd:98:f5:80:51:
         ad:b5:8f:c3:66:96:61:3d:9a:78:82:26:bf:6d:f7:65:f8:35:
         3b:5e:45:5d:39:83:ca:88:ea:0f:4e:08:94:00:15:05:f7:eb:
         52:dc:3a:8c:96:42:13:7d:2e:68:ad:ef:3b:36:ba:dd:bf:5f:
         a4:5d:70:ad:06:40:87:b1:91:00:2a:e7:fe:7a:0e:10:38:f7:
         7e:84:43:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:20:20 2026 by rpki-client