This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/58A53DF483EB11F083FC5148C4F9AE02.roa
File:                     58A53DF483EB11F083FC5148C4F9AE02.roa (raw, json)
Hash identifier:          NjVDS2QkAh1ArmSLgoyPKfqDVYo9nr3xlwWJ1P+4P9Q=
Subject key identifier:   8E:32:02:0A:66:14:E4:52:18:56:7B:26:DE:FC:08:26:7E:39:88:87
Certificate issuer:       /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Certificate serial:       024F
Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/58A53DF483EB11F083FC5148C4F9AE02.roa
Signing time:             Sun 25 Jan 2026 01:21:29 +0000
ROA not before:           Sun 25 Jan 2026 01:21:29 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     151080
IP address blocks:        2001:df1:c340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
                          rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
        Validity
            Not Before: Jan 25 01:21:29 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69757018-23d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b7:3b:ec:dc:fd:3c:9b:a5:34:3e:d5:12:93:
                    98:ae:ac:87:43:69:30:e0:c1:0b:26:b2:8f:df:c0:
                    dc:a4:a4:f6:1d:61:59:e6:66:dd:4d:96:ee:55:55:
                    1b:d2:f0:40:14:77:17:6a:70:b2:69:0d:8f:a3:ac:
                    e6:35:12:4b:4f:f9:fd:a5:23:62:4c:a9:a5:fa:98:
                    61:1d:4b:7b:4c:32:a8:98:72:41:db:f8:e7:5e:02:
                    48:e7:9f:06:50:23:b9:d5:ba:bc:18:8d:29:58:c8:
                    c7:6d:19:7c:17:a9:b3:69:b0:47:fd:8a:09:f0:3a:
                    00:72:d0:e5:e0:b4:b6:a8:14:47:4b:f2:55:a4:93:
                    2e:41:be:14:6c:23:0f:a7:73:fd:76:09:8f:c0:74:
                    74:24:7a:24:94:9b:7d:f4:3b:ec:af:a5:50:87:53:
                    3d:1a:89:39:c3:9d:e8:f5:54:6c:38:c6:a1:2c:56:
                    d9:d6:8a:c6:d3:8d:9b:35:76:f0:9c:0d:04:5b:75:
                    8f:a0:9e:cd:2b:67:43:de:e4:3c:7b:e3:4b:0c:71:
                    86:cf:51:f3:0d:31:a6:6d:46:3d:88:62:d3:b4:cc:
                    ee:bb:46:21:34:45:33:fb:12:84:1d:31:42:0b:56:
                    11:15:23:25:b1:93:8f:d9:58:69:fc:06:7d:7c:67:
                    15:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:32:02:0A:66:14:E4:52:18:56:7B:26:DE:FC:08:26:7E:39:88:87
            X509v3 Authority Key Identifier:
                keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/58A53DF483EB11F083FC5148C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:c340::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:30:5e:d1:62:1f:54:dc:f4:46:9d:ec:84:3c:c8:c4:52:35:
         e4:01:9f:89:69:93:fd:f9:81:cb:70:d6:7a:d5:6a:1a:9f:05:
         3b:8c:bc:18:2c:38:b6:00:24:48:8b:a5:fc:dc:3f:10:86:48:
         94:fb:1d:6d:59:d5:95:e7:1e:22:38:aa:2d:d3:b5:8f:77:94:
         01:b6:86:ce:f8:7d:c2:86:06:d5:e9:23:cf:1a:8c:67:89:ac:
         e4:5e:4d:2a:00:58:d1:fd:fc:27:8a:66:df:3a:f3:1a:29:fa:
         52:fe:7e:3e:c6:57:43:ed:1b:93:06:ca:8f:95:8d:09:bb:37:
         e3:d6:3c:4d:a4:c2:13:be:72:d7:ea:0e:52:39:75:9b:f2:2b:
         ee:96:f8:77:2b:e9:51:72:bd:89:e0:47:85:85:7c:6f:ed:51:
         56:43:00:ac:f1:b9:8e:e6:b4:ed:a0:40:c7:4d:37:44:33:cc:
         98:59:65:68:1a:e3:05:b1:f9:b6:3c:0c:7b:c6:a9:97:e0:0f:
         56:c7:ec:45:a1:85:df:5b:79:fd:21:e2:9c:a7:e0:25:e0:06:
         44:93:1f:cf:a2:31:45:ce:70:7f:fa:85:43:c0:54:63:72:7d:
         44:8d:5b:4c:fb:dd:fe:7f:1b:cf:0b:e8:e2:b9:db:0a:e2:4e:
         54:92:ee:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:41:55 2026 by rpki-client