This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/935748B4F66B11F085B6348E6F6F56BC.roa
File:                     935748B4F66B11F085B6348E6F6F56BC.roa (raw, json)
Hash identifier:          ooY2TZh5rhLCZOuRkIEjtwotMZ8hnS+oME2X4SR7uss=
Subject key identifier:   A6:1D:58:AB:CD:6C:AF:48:E5:48:7A:3A:6E:F0:4F:03:E3:74:85:B8
Certificate issuer:       /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial:       0777
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/935748B4F66B11F085B6348E6F6F56BC.roa
Signing time:             Wed 21 Jan 2026 01:50:34 +0000
ROA not before:           Wed 21 Jan 2026 01:50:34 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     213618
IP address blocks:        2403:58c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
                          rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1911 (0x777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
        Validity
            Not Before: Jan 21 01:50:34 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=697030ea-1bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:57:ce:e4:be:e9:74:66:33:ab:bf:0f:59:12:
                    74:e1:a7:57:37:78:14:4e:7b:d1:75:6b:4f:aa:ce:
                    f9:e4:8a:69:cf:cd:32:d9:36:45:c6:2f:d1:da:8e:
                    3b:9f:c1:f8:fa:c2:80:01:07:a7:fd:9c:f7:e0:88:
                    20:4d:9f:c9:6f:f6:62:65:47:28:61:24:e6:f4:03:
                    99:12:5a:af:30:3a:a8:3b:6a:bd:67:ce:f6:ef:3b:
                    f0:52:e0:8c:d6:19:00:6b:85:e9:3b:56:08:a2:3f:
                    3a:f0:42:2d:3d:21:1e:2b:75:86:bc:59:ed:7b:fb:
                    e4:20:f8:1a:80:fa:b0:df:37:25:3e:e1:a3:31:e9:
                    18:d4:34:3a:12:3e:65:d3:37:e5:02:92:43:c6:87:
                    d5:d1:3f:21:6f:25:44:1c:d5:34:ad:54:d9:a6:e7:
                    9b:b6:44:41:df:c9:93:6c:30:0c:b0:7b:c8:a2:60:
                    e1:9b:c4:bd:d9:76:60:c7:b4:82:08:b9:21:d3:38:
                    04:28:45:13:f5:6f:f7:7c:d8:18:5b:47:19:e9:12:
                    1a:66:a3:cf:fc:76:1b:64:5f:28:e3:8b:ef:c0:9a:
                    71:43:9b:e2:31:35:16:33:c3:eb:c0:e8:dc:6f:21:
                    7c:ca:c8:82:90:7b:2d:04:f9:8f:ff:6b:69:00:d0:
                    a1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1D:58:AB:CD:6C:AF:48:E5:48:7A:3A:6E:F0:4F:03:E3:74:85:B8
            X509v3 Authority Key Identifier:
                keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/935748B4F66B11F085B6348E6F6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:58c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:61:cd:76:34:38:fc:31:ee:d8:7c:e8:21:b8:ef:d0:ad:25:
         3b:75:80:00:1d:6c:4a:c3:18:cb:8d:48:06:c7:65:9d:c8:c7:
         d3:c6:c4:4d:d4:3e:ce:ec:da:d4:ec:5c:71:4f:1d:0e:a7:26:
         d9:06:55:d8:da:de:f6:3c:43:9d:e5:e4:44:f5:c8:50:40:5d:
         e1:fb:22:7a:94:d7:b7:c3:63:94:b4:2c:1a:6d:73:cc:d1:d6:
         74:af:4b:38:92:50:e7:08:a3:3d:84:35:93:90:c8:19:01:37:
         bc:76:2c:ae:a6:9d:9b:f6:f5:64:21:dc:2f:e8:4e:3e:b6:64:
         c9:98:c7:50:8b:3a:05:7e:90:48:38:6f:12:bd:a9:c0:5b:52:
         5d:df:c0:50:e4:e6:42:13:5c:e5:31:8b:db:91:90:87:ba:cb:
         0c:39:b8:0f:b8:31:af:cd:b7:8b:ad:d1:21:a5:04:62:b8:55:
         52:f1:0b:f3:a7:2c:fa:4f:28:a7:88:e8:3f:fd:c2:49:89:29:
         88:fb:61:89:ce:78:e3:39:da:fd:a7:a7:55:4d:ab:8a:50:00:
         be:f7:16:2b:7a:97:d7:ef:55:cd:69:01:34:54:ae:8a:80:28:
         ca:21:ab:4d:00:8b:7c:bd:65:30:44:2a:d9:9a:bf:1c:fb:25:
         da:e0:3c:29
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICB3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzMyNkYxMTAvBgNVBAUTKDM5MkYzNkUwQTQ1MDA1M0MzREM2NkQyRTM4OTRFMTBD
QTczM0REQTYwHhcNMjYwMTIxMDE1MDM0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTcwMzBlYS0xYmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvFfO5L7pdGYzq78PWRJ04adXN3gUTnvRdWtPqs755Ippz80y2TZFxi/R2o47
n8H4+sKAAQen/Zz34IggTZ/Jb/ZiZUcoYSTm9AOZElqvMDqoO2q9Z8727zvwUuCM
1hkAa4XpO1YIoj868EItPSEeK3WGvFnte/vkIPgagPqw3zclPuGjMekY1DQ6Ej5l
0zflApJDxofV0T8hbyVEHNU0rVTZpuebtkRB38mTbDAMsHvIomDhm8S92XZgx7SC
CLkh0zgEKEUT9W/3fNgYW0cZ6RIaZqPP/HYbZF8o44vvwJpxQ5viMTUWM8PrwOjc
byF8ysiCkHstBPmP/2tpANChgQIDAQABo4ICljCCApIwHQYDVR0OBBYEFKYdWKvN
bK9I5Uh6Om7wTwPjdIW4MB8GA1UdIwQYMBaAFDkvNuCkUAU8PcZtLjiU4QynM92m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzI2Ri83ODY2RjUzMDVG
QzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJUdzl4bTB1T0pUaERLY3oz
YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09TODI0S1JRQlR3OXhtMHVPSlRoREtjejNhWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzMyNkYvNzg2NkY1MzA1RkM3MTFFQjhBNjkyMDJFQzRGOUFFMDIvOTM1NzQ4QjRG
NjZCMTFGMDg1QjYzNDhFNkY2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkA1jAMA0GCSqGSIb3DQEBCwUAA4IBAQCeYc12NDj8Me7Y
fOghuO/QrSU7dYAAHWxKwxjLjUgGx2WdyMfTxsRN1D7O7NrU7FxxTx0OpybZBlXY
2t72PEOd5eRE9chQQF3h+yJ6lNe3w2OUtCwabXPM0dZ0r0s4klDnCKM9hDWTkMgZ
ATe8diyupp2b9vVkIdwv6E4+tmTJmMdQizoFfpBIOG8SvanAW1Jd38BQ5OZCE1zl
MYvbkZCHussMObgPuDGvzbeLrdEhpQRiuFVS8Qvzpyz6TyiniOg//cJJiSmI+2GJ
znjjOdr9p6dVTauKUAC+9xYrepfX71XNaQE0VK6KgCjKIatNAIt8vWUwRCrZmr8c
+yXa4Dwp
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:17:43 2026 by rpki-client