This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/26E44986BE8311F0B427BB65C4F9AE02.roa
File:                     26E44986BE8311F0B427BB65C4F9AE02.roa (raw, json)
Hash identifier:          WDe5+WCW+WUnfyj9lW0W66HhFFb2k+ZltOdwdXoQMHI=
Subject key identifier:   57:20:8A:6B:33:01:97:A8:5F:95:C7:92:80:7C:CC:5B:12:BB:C8:55
Certificate issuer:       /CN=A91D7578/serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7
Certificate serial:       0655
Authority key identifier: EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/26E44986BE8311F0B427BB65C4F9AE02.roa
Signing time:             Mon 10 Nov 2025 22:18:15 +0000
ROA not before:           Mon 10 Nov 2025 22:18:15 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     22672
IP address blocks:        2402:3820::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl
                          rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1621 (0x655)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7578, serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7
        Validity
            Not Before: Nov 10 22:18:15 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=691264a7-1ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:7e:c6:75:a6:c8:7e:be:7c:23:ed:d4:c8:
                    e9:a3:b6:79:e2:ea:00:87:6f:11:be:da:dc:6b:21:
                    a1:ef:20:4f:a8:37:01:e1:e2:9d:f2:56:b7:14:00:
                    9e:16:6e:d0:8a:ed:a5:4c:21:21:0c:6d:4d:8c:b6:
                    4d:3c:75:24:29:45:fb:47:6c:2c:e0:61:65:20:2c:
                    9c:fb:f9:3d:e5:53:e4:14:2e:8c:31:31:81:d4:ad:
                    9e:ea:58:2a:8f:a1:ea:3b:14:6f:70:f8:53:6a:aa:
                    5c:02:4f:d5:65:22:9e:bd:3a:d2:b7:4c:13:cf:65:
                    b3:cd:91:4d:71:2a:77:96:32:21:46:d9:70:58:12:
                    37:3f:1e:ff:82:b3:c0:06:de:12:0b:9f:14:d1:2e:
                    ba:7a:06:c3:c8:1b:e1:aa:2c:59:09:dd:00:3a:55:
                    38:fc:fb:64:c0:35:33:cc:9d:bf:ef:c5:5d:70:02:
                    dc:92:7f:80:8e:34:81:d1:4d:29:1d:1d:65:84:2c:
                    1f:39:03:4f:5b:38:52:10:63:19:3b:4c:61:04:3a:
                    7e:2c:ac:ae:f7:05:08:e3:e4:0d:47:ae:09:67:d9:
                    72:c2:df:9d:41:ee:2c:cc:f4:e2:a8:a7:63:03:eb:
                    d8:db:3a:cb:79:c7:15:6f:e3:19:dc:f8:9d:1e:07:
                    ff:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:20:8A:6B:33:01:97:A8:5F:95:C7:92:80:7C:CC:5B:12:BB:C8:55
            X509v3 Authority Key Identifier:
                keyid:EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/26E44986BE8311F0B427BB65C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3820::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:a2:1a:af:34:36:76:e5:05:be:25:9c:43:a8:b5:1d:3d:eb:
         5b:26:4c:a4:77:dc:28:a1:d7:8d:65:58:ae:d7:31:a6:7f:f5:
         95:7d:4e:57:de:0b:db:fa:53:83:cc:fa:ae:8e:cf:b9:1a:c1:
         e8:e2:dc:67:46:bd:11:d1:0a:49:07:5a:77:84:93:44:78:63:
         23:14:7d:78:02:5c:a4:8d:fa:54:c1:81:fc:45:64:91:05:1c:
         4a:2b:73:f9:0a:b1:50:a8:0e:c3:1c:d4:af:68:15:23:4b:53:
         35:79:b9:83:20:d1:21:6d:86:2f:37:55:7e:90:ee:de:8e:a7:
         04:b4:22:6d:4e:6b:c0:a0:be:50:27:2b:57:17:67:41:75:44:
         08:eb:0e:d4:f4:11:96:f3:b4:23:c3:6b:f0:d5:02:ac:75:b2:
         f4:de:9f:2f:a9:f5:54:32:19:d1:fc:f8:2c:ee:47:33:33:d5:
         58:c6:27:69:4d:6f:f4:77:c1:3d:d9:a1:80:a7:49:14:c0:56:
         a8:9e:24:9d:80:03:47:52:3a:a8:13:85:5e:f6:12:e3:04:f6:
         64:f6:65:3d:8b:d2:7e:73:40:88:56:58:5d:cb:6c:b3:7b:e4:
         54:3f:a0:9c:d0:36:75:a3:64:8c:88:9d:89:ce:33:e7:aa:78:
         21:4a:cd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:13:29 2025 by rpki-client