This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/18EDF038F73711F08BB88460376F56BC.roa
File:                     18EDF038F73711F08BB88460376F56BC.roa (raw, json)
Hash identifier:          trU/KfYfjSGucpn3KguMiM57H2JukVI26PhKsT98JxM=
Subject key identifier:   85:CA:C6:6D:8A:DE:8C:3C:08:36:55:B0:A3:F8:A8:C8:F8:BD:E1:1C
Certificate issuer:       /CN=A91D0B40/serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484
Certificate serial:       0126
Authority key identifier: BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/18EDF038F73711F08BB88460376F56BC.roa
Signing time:             Thu 22 Jan 2026 02:07:26 +0000
ROA not before:           Thu 22 Jan 2026 02:07:26 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     174
IP address blocks:        2401:86a0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 07:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B40, serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484
        Validity
            Not Before: Jan 22 02:07:26 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6971865e-fa32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:19:8d:10:e5:53:bd:cc:8c:7f:92:26:98:b8:
                    df:c2:e9:f6:1f:b5:62:aa:31:8f:b7:1f:62:2e:6b:
                    20:04:dd:dd:93:9b:8b:84:fd:e4:3b:a0:99:71:8c:
                    0f:a8:97:bf:ae:bd:5a:8a:b1:fb:19:14:da:06:1b:
                    63:2c:77:ea:73:6f:48:0a:c6:ac:36:77:45:13:d9:
                    aa:2b:5f:67:2b:00:25:ee:ca:87:a3:51:ad:79:12:
                    1b:7b:4c:b1:c7:a6:bd:dd:b4:6b:1d:e1:26:77:5b:
                    4e:47:bd:b2:78:d5:33:d7:bf:5c:79:62:3a:59:4f:
                    0c:3b:74:65:2e:7c:5c:3a:7e:f4:22:69:10:c1:c3:
                    2b:11:21:2c:b4:3f:8e:31:d5:8b:e4:88:88:80:5d:
                    c1:ac:de:9b:9e:9e:bb:4c:e7:77:43:e3:2a:1c:a4:
                    cc:8b:88:e7:52:87:5f:7e:21:ec:10:6b:25:4b:ba:
                    e2:db:57:2f:1a:20:ba:81:32:c2:31:d6:dd:a5:3a:
                    ef:45:24:da:e9:d4:6f:78:0d:58:0f:c7:10:9c:47:
                    fd:dd:d7:0d:4c:e6:57:d2:68:f7:55:d4:d7:f2:54:
                    e0:a6:c2:db:a6:32:bf:a0:bd:70:b0:f0:ac:70:5e:
                    41:d2:eb:53:da:37:01:fb:30:f7:b6:85:94:10:ea:
                    d3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CA:C6:6D:8A:DE:8C:3C:08:36:55:B0:A3:F8:A8:C8:F8:BD:E1:1C
            X509v3 Authority Key Identifier:
                keyid:BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/18EDF038F73711F08BB88460376F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:86a0::/34

    Signature Algorithm: sha256WithRSAEncryption
         1c:2b:6c:ff:a9:31:f6:28:09:7a:df:bc:e3:f7:09:27:27:8e:
         1f:67:e2:6a:98:62:dd:f9:24:bb:c8:f7:fd:26:83:39:69:17:
         c5:1c:d5:22:42:55:12:78:2c:77:fc:58:5d:51:a3:df:9e:50:
         2a:df:91:b8:6c:45:24:7b:c5:6a:37:32:51:8f:c8:bc:e9:56:
         2a:74:7c:ef:45:fe:33:ff:d4:66:de:43:4e:4c:c5:cf:80:82:
         2a:65:6b:41:05:15:de:1a:a2:33:b4:34:db:1c:e9:8b:f0:5e:
         91:57:34:47:a4:b3:d1:41:e0:d8:b7:88:21:d6:2f:26:89:02:
         8b:48:f6:84:eb:e1:52:db:6a:90:cc:03:fe:cb:3f:77:56:c3:
         9b:cf:d4:66:fc:1e:10:d4:31:c2:ab:05:ba:67:9a:b4:63:e9:
         1c:32:99:49:9a:3d:08:02:5f:7a:e3:ad:51:1c:28:47:b0:b2:
         b0:4e:40:c4:2b:07:ca:ad:87:70:cb:41:1e:1a:29:8f:d2:81:
         19:e6:6c:e3:08:ce:8d:91:db:e2:18:d7:89:82:23:e9:72:13:
         af:35:97:03:6f:7f:b8:fe:cd:c1:b0:41:5f:b3:82:d0:39:c8:
         9c:34:5b:3a:93:f3:f9:83:21:47:ef:c5:4f:d9:bd:23:b9:65:
         c5:eb:a2:74
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDBCNDAxMTAvBgNVBAUTKEJDMDU5M0M0N0RBQ0Y2QzdBNzdBNDFFMDdERUI5QTA2
MTYzMUE0ODQwHhcNMjYwMTIyMDIwNzI2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTcxODY1ZS1mYTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhRmNEOVTvcyMf5ImmLjfwun2H7ViqjGPtx9iLmsgBN3dk5uLhP3kO6CZcYwP
qJe/rr1airH7GRTaBhtjLHfqc29ICsasNndFE9mqK19nKwAl7sqHo1GteRIbe0yx
x6a93bRrHeEmd1tOR72yeNUz179ceWI6WU8MO3RlLnxcOn70ImkQwcMrESEstD+O
MdWL5IiIgF3BrN6bnp67TOd3Q+MqHKTMi4jnUodffiHsEGslS7ri21cvGiC6gTLC
MdbdpTrvRSTa6dRveA1YD8cQnEf93dcNTOZX0mj3VdTX8lTgpsLbpjK/oL1wsPCs
cF5B0utT2jcB+zD3toWUEOrTbQIDAQABo4IClzCCApMwHQYDVR0OBBYEFIXKxm2K
3ow8CDZVsKP4qMj4veEcMB8GA1UdIwQYMBaAFLwFk8R9rPbHp3pB4H3rmgYWMaSE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8yODQwQzhBNjM4
RTAxMUVGOTRCODREN0ZDNEY5QUUwMi92QVdUeEgyczlzZW5la0hnZmV1YUJoWXhw
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZBV1R4SDJzOXNlbmVrSGdmZXVhQmhZeHBJUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDBCNDAvMjg0MEM4QTYzOEUwMTFFRjk0Qjg0RDdGQzRGOUFFMDIvMThFREYwMzhG
NzM3MTFGMDhCQjg4NDYwMzc2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgYkAYagADANBgkqhkiG9w0BAQsFAAOCAQEAHCts/6kx9igJ
et+84/cJJyeOH2fiaphi3fkku8j3/SaDOWkXxRzVIkJVEngsd/xYXVGj355QKt+R
uGxFJHvFajcyUY/IvOlWKnR870X+M//UZt5DTkzFz4CCKmVrQQUV3hqiM7Q02xzp
i/BekVc0R6Sz0UHg2LeIIdYvJokCi0j2hOvhUttqkMwD/ss/d1bDm8/UZvweENQx
wqsFumeatGPpHDKZSZo9CAJfeuOtURwoR7CysE5AxCsHyq2HcMtBHhopj9KBGeZs
4wjOjZHb4hjXiYIj6XITrzWXA29/uP7NwbBBX7OC0DnInDRbOpPz+YMhR+/FT9m9
I7llxeuidA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:24:25 2026 by rpki-client