This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/0D5C00AC38E311EF99F62432C4F9AE02.roa
File:                     0D5C00AC38E311EF99F62432C4F9AE02.roa (raw, json)
Hash identifier:          17fhyhHPrtB+iSmZkmztshJRvcPB98sOlFOyyOm/YOQ=
Subject key identifier:   2B:4C:F5:5A:A4:A3:77:B4:28:80:FB:C8:28:41:10:99:4F:C7:EA:78
Certificate issuer:       /CN=A91D0B40/serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484
Certificate serial:       0129
Authority key identifier: BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/0D5C00AC38E311EF99F62432C4F9AE02.roa
Signing time:             Fri 23 Jan 2026 06:24:22 +0000
ROA not before:           Fri 23 Jan 2026 06:24:22 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     152905
IP address blocks:        2401:86a0::/32 maxlen: 32
                          2401:86a0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B40, serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484
        Validity
            Not Before: Jan 23 06:24:22 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69731416-c096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:27:7f:16:9f:e9:e9:bf:48:88:75:c2:63:7e:
                    22:43:d0:7f:64:12:4a:34:45:a4:d2:3a:ba:09:2c:
                    ec:c6:29:ce:b0:e3:71:d1:9c:6e:8a:79:9c:2f:72:
                    52:ad:f9:18:14:a1:e9:5a:fa:e8:0d:f4:cd:b5:d5:
                    ac:63:5a:7f:b5:20:dc:40:e8:f7:36:90:9f:4c:eb:
                    76:ef:62:73:8a:63:c8:38:f7:65:ba:03:f5:61:f7:
                    b7:b4:86:c5:4e:4e:15:af:d7:90:22:60:48:5e:05:
                    ea:6e:87:ee:12:09:0d:11:f8:4e:91:c6:83:7b:cf:
                    ba:d2:04:31:c9:b3:8b:3f:8d:fd:aa:97:93:44:6d:
                    b2:bd:d7:80:f1:8c:ef:6c:dc:cc:37:c4:d7:d7:57:
                    7d:e3:10:fd:42:e6:be:37:7e:f3:40:91:c8:a7:5f:
                    6d:0c:a1:3e:53:ee:89:11:74:17:ef:6a:6c:74:94:
                    c0:ba:d6:6d:c6:e6:d4:5d:27:5a:02:00:aa:f9:ca:
                    d1:99:87:c0:3d:1a:3c:99:39:b6:b9:30:cc:61:78:
                    a3:c7:f4:ac:55:03:50:62:1e:20:95:3c:6f:03:d1:
                    7d:48:ec:7b:41:bc:16:3a:db:e7:25:9b:4d:be:f8:
                    f8:b3:f3:6d:27:6f:99:a9:34:57:74:4a:55:00:49:
                    be:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4C:F5:5A:A4:A3:77:B4:28:80:FB:C8:28:41:10:99:4F:C7:EA:78
            X509v3 Authority Key Identifier:
                keyid:BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/0D5C00AC38E311EF99F62432C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:86a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         d4:2f:6a:50:26:cd:0c:67:94:12:8b:c5:90:ed:33:9a:0e:26:
         da:25:6f:e9:9c:d9:15:fb:4b:b6:e8:c0:dd:60:a7:23:16:37:
         41:78:03:f1:09:b3:56:67:75:54:dd:d9:1e:9d:ef:51:9c:38:
         0b:a5:70:a8:65:dc:ec:0d:c7:55:82:dc:c2:38:4d:0c:e6:79:
         03:f7:11:c9:2b:0c:1d:f0:74:32:bc:1f:66:25:d3:85:63:9d:
         eb:af:bd:65:98:8d:39:33:44:4e:e1:06:d7:d9:28:f3:11:18:
         a2:d0:13:06:3c:50:f4:84:6e:b5:4a:d4:37:bf:eb:f2:e5:e4:
         b4:40:0b:ae:1c:f5:36:63:9b:17:5c:73:67:4d:8f:eb:8a:c6:
         3e:9b:a3:d7:c4:32:db:8e:91:06:b7:4a:f0:4e:4f:b9:fb:e5:
         7f:07:34:51:8b:28:6f:bd:06:12:4f:bb:2f:ac:61:66:b8:ce:
         12:31:a7:6d:02:cd:7c:ed:44:7b:fc:fe:f1:fe:bb:6d:cb:37:
         68:0a:52:24:ba:56:86:df:85:1a:80:0b:0d:11:b6:c8:df:72:
         bf:dd:14:3a:ca:b7:b0:4a:ae:52:10:7f:75:81:df:a0:54:0b:
         79:6b:4d:65:e0:ca:b8:4b:bf:7e:c7:6b:9d:32:30:4e:21:45:
         89:9e:6d:fe
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDBCNDAxMTAvBgNVBAUTKEJDMDU5M0M0N0RBQ0Y2QzdBNzdBNDFFMDdERUI5QTA2
MTYzMUE0ODQwHhcNMjYwMTIzMDYyNDIyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTczMTQxNi1jMDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Cd/Fp/p6b9IiHXCY34iQ9B/ZBJKNEWk0jq6CSzsxinOsONx0ZxuinmcL3JS
rfkYFKHpWvroDfTNtdWsY1p/tSDcQOj3NpCfTOt272JzimPIOPdlugP1Yfe3tIbF
Tk4Vr9eQImBIXgXqbofuEgkNEfhOkcaDe8+60gQxybOLP439qpeTRG2yvdeA8Yzv
bNzMN8TX11d94xD9Qua+N37zQJHIp19tDKE+U+6JEXQX72psdJTAutZtxubUXSda
AgCq+crRmYfAPRo8mTm2uTDMYXijx/SsVQNQYh4glTxvA9F9SOx7QbwWOtvnJZtN
vvj4s/NtJ2+ZqTRXdEpVAEm+awIDAQABo4ICljCCApIwHQYDVR0OBBYEFCtM9Vqk
o3e0KID7yChBEJlPx+p4MB8GA1UdIwQYMBaAFLwFk8R9rPbHp3pB4H3rmgYWMaSE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8yODQwQzhBNjM4
RTAxMUVGOTRCODREN0ZDNEY5QUUwMi92QVdUeEgyczlzZW5la0hnZmV1YUJoWXhw
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZBV1R4SDJzOXNlbmVrSGdmZXVhQmhZeHBJUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDBCNDAvMjg0MEM4QTYzOEUwMTFFRjk0Qjg0RDdGQzRGOUFFMDIvMEQ1QzAwQUMz
OEUzMTFFRjk5RjYyNDMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkAYagMA0GCSqGSIb3DQEBCwUAA4IBAQDUL2pQJs0MZ5QS
i8WQ7TOaDibaJW/pnNkV+0u26MDdYKcjFjdBeAPxCbNWZ3VU3dkene9RnDgLpXCo
ZdzsDcdVgtzCOE0M5nkD9xHJKwwd8HQyvB9mJdOFY53rr71lmI05M0RO4QbX2Sjz
ERii0BMGPFD0hG61StQ3v+vy5eS0QAuuHPU2Y5sXXHNnTY/risY+m6PXxDLbjpEG
t0rwTk+5++V/BzRRiyhvvQYST7svrGFmuM4SMadtAs187UR7/P7x/rttyzdoClIk
ulaG34UagAsNEbbI33K/3RQ6yrewSq5SEH91gd+gVAt5a01l4Mq4S79+x2udMjBO
IUWJnm3+
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:15 2026 by rpki-client