This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/5805D2B2EC6611F0B20AED364E6F56BC.roa
File:                     5805D2B2EC6611F0B20AED364E6F56BC.roa (raw, json)
Hash identifier:          aByLTxvvr9l/KJS4ZEp5UGOTlLwbRTJdiOB79qAE9eY=
Subject key identifier:   9F:32:6E:4D:AA:92:77:10:EC:5F:13:89:2D:DB:48:55:1F:F7:96:55
Certificate issuer:       /CN=A91DBF0C/serialNumber=1548F1095F1E0F9B784B1B7FDD8F0E759C842DFE
Certificate serial:       F4
Authority key identifier: 15:48:F1:09:5F:1E:0F:9B:78:4B:1B:7F:DD:8F:0E:75:9C:84:2D:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/5805D2B2EC6611F0B20AED364E6F56BC.roa
Signing time:             Thu 08 Jan 2026 07:47:56 +0000
ROA not before:           Thu 08 Jan 2026 07:47:56 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     153312
IP address blocks:        2401:c060::/32 maxlen: 40
                          2401:c060::/44 maxlen: 52
                          2401:c060:1000::/44 maxlen: 52
                          2401:c060:1010::/44 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.crl
                          rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 04:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBF0C, serialNumber=1548F1095F1E0F9B784B1B7FDD8F0E759C842DFE
        Validity
            Not Before: Jan  8 07:47:56 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=695f612b-9d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ce:b8:58:4f:d6:9a:3a:21:46:8b:3f:03:3d:
                    c8:13:8d:2f:9d:bc:c7:ae:4a:fb:a4:a4:dd:bc:03:
                    9a:16:a1:46:d6:d2:53:b5:44:ab:b3:80:9d:79:70:
                    81:6d:14:34:56:30:82:76:62:4a:88:70:f1:a6:f9:
                    9d:56:74:d0:96:72:f4:bf:cf:b2:07:fc:b5:31:ae:
                    97:53:ec:07:e8:04:0a:70:a4:e8:25:65:7d:c8:76:
                    81:5b:26:b8:75:7f:f2:3f:37:3d:b8:f3:69:34:4d:
                    77:67:96:22:c7:40:a6:22:29:74:ac:06:96:56:64:
                    66:0e:6b:39:c9:dc:49:36:07:18:e9:2d:a8:a5:3d:
                    94:e7:de:d9:87:5c:ad:98:ae:9c:e1:c9:04:1d:00:
                    0e:f6:16:3e:29:bc:21:cb:73:5c:c0:34:2f:c2:46:
                    d6:99:01:d1:d1:1c:ea:06:a0:1c:c6:af:7e:e5:14:
                    85:d4:90:7c:f9:05:6c:a0:b4:f8:44:59:92:12:a7:
                    1b:bd:79:ff:0f:6d:f3:8d:7b:da:43:fc:13:1f:e5:
                    ae:c1:63:8e:17:96:9f:46:e4:dc:6a:cc:5d:cd:9c:
                    8b:2d:02:fc:52:12:0f:31:d1:27:0a:65:a5:f2:4d:
                    66:96:65:78:d5:e5:b1:19:89:76:26:69:d5:ec:f0:
                    79:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:32:6E:4D:AA:92:77:10:EC:5F:13:89:2D:DB:48:55:1F:F7:96:55
            X509v3 Authority Key Identifier:
                keyid:15:48:F1:09:5F:1E:0F:9B:78:4B:1B:7F:DD:8F:0E:75:9C:84:2D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/5805D2B2EC6611F0B20AED364E6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:c060::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:b2:82:f6:c1:88:9b:e2:d8:69:b6:f0:55:c3:a2:c1:74:94:
         50:48:cd:4b:84:c3:a3:99:48:e4:59:ab:6e:cc:e6:9c:11:08:
         7e:62:94:8e:ba:01:d7:ae:67:e1:d2:6d:47:fb:04:49:02:40:
         d4:f4:83:cf:06:d2:ec:96:61:d9:7e:9e:14:4c:8d:bc:c2:c9:
         7a:3a:7a:5a:a8:95:7c:7c:8f:1b:47:68:56:66:37:3f:a2:5c:
         f2:eb:c7:75:45:57:2e:5c:4a:d6:43:a4:0e:37:d9:a2:15:80:
         16:f6:1f:34:4c:c6:c5:75:36:8a:fb:0b:66:ba:0d:34:34:0b:
         b1:6f:9a:e4:55:ed:78:05:a4:e9:06:1c:27:07:eb:f4:f5:3c:
         47:90:77:13:2e:11:19:ef:41:62:dc:e6:ed:78:72:63:f3:aa:
         97:e3:d6:f2:1f:7e:d4:f1:d1:85:34:e1:9c:40:ff:29:2a:a3:
         11:1d:50:ba:c3:1a:0b:7e:12:b9:57:65:4c:1e:0e:47:97:bd:
         5f:8d:84:6e:f9:bc:78:50:cf:4e:d6:68:8c:71:63:78:53:b8:
         b8:74:cc:24:ee:79:ee:ac:16:8b:e7:68:87:8e:db:36:5d:7c:
         85:7e:c8:b2:c5:4b:de:aa:53:db:76:1b:cf:30:11:c2:8e:14:
         2b:a8:1e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:55:08 2026 by rpki-client