This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/2B46EF64951211F0A6C6AF5AC4F9AE02.roa
File:                     2B46EF64951211F0A6C6AF5AC4F9AE02.roa (raw, json)
Hash identifier:          YC+Xx7KbVUpjJoSdqrDIz5VLsWIkLluqz4lGXQlus1M=
Subject key identifier:   B3:EA:E8:6E:18:EA:CC:01:A0:1D:F9:13:D3:58:C1:03:8D:9F:BA:EA
Certificate issuer:       /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE
Certificate serial:       0430
Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/2B46EF64951211F0A6C6AF5AC4F9AE02.roa
Signing time:             Wed 31 Dec 2025 00:19:49 +0000
ROA not before:           Wed 31 Dec 2025 00:19:49 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     7594
IP address blocks:        2400:16e0:36::/48 maxlen: 48
                          2400:16e0:36:3000::64/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl
                          rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1072 (0x430)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE
        Validity
            Not Before: Dec 31 00:19:49 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69546c25-9b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:69:de:51:bd:d9:04:3f:03:41:a1:f8:90:47:
                    f7:5a:a9:52:86:01:3b:bf:87:a4:90:a7:87:7d:f3:
                    3e:0a:a0:ac:95:af:98:62:e6:2b:f2:03:7f:ac:1b:
                    3a:d2:48:0b:6a:20:3a:20:a1:4d:32:b2:73:b6:6d:
                    31:37:57:6b:a0:d8:de:1b:d5:ea:04:79:6e:e4:dd:
                    bb:06:fc:e1:9a:06:18:d9:1d:34:f4:c0:db:a8:86:
                    bb:0f:af:f3:89:06:e3:1e:1b:b1:c1:a8:7d:89:fa:
                    44:ee:f9:8d:44:e9:b9:11:84:28:af:82:5b:9b:dd:
                    18:11:54:f5:6b:f7:af:d2:03:3a:3b:2f:a4:5f:e8:
                    38:c2:bc:70:17:a5:87:a4:5c:01:35:76:9c:89:fb:
                    39:cf:cf:03:59:de:23:e7:01:71:c0:c8:0b:45:be:
                    27:08:03:b5:ac:4c:e6:a1:00:75:9b:fb:e8:bc:06:
                    f2:95:32:62:b7:26:ca:9d:16:68:ea:2f:b9:b1:0a:
                    36:fb:07:9c:d3:90:f3:27:e3:23:00:b1:32:73:07:
                    c8:d6:50:48:0b:a2:74:dc:72:3b:3d:d0:00:fe:f2:
                    e2:50:bd:30:9a:54:b7:48:00:be:d4:28:cc:09:e2:
                    db:93:1c:18:59:a3:96:a4:f8:11:9c:de:61:4d:5c:
                    c8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EA:E8:6E:18:EA:CC:01:A0:1D:F9:13:D3:58:C1:03:8D:9F:BA:EA
            X509v3 Authority Key Identifier:
                keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/2B46EF64951211F0A6C6AF5AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:16e0:36::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:c9:b2:a4:99:5c:3c:36:76:47:41:c9:03:07:cf:45:6b:82:
         b0:03:5c:6f:db:07:2a:5c:56:ef:24:81:54:8d:49:8a:a3:3a:
         f0:63:cc:eb:72:44:9e:fb:2c:d7:36:da:87:9d:63:38:cf:de:
         41:0c:11:66:d0:cd:b3:fa:ff:c2:77:bd:86:82:ac:20:4c:95:
         08:57:45:67:d1:e1:85:8d:a5:71:2f:e4:3d:ff:38:e3:9e:e9:
         80:2f:0a:cf:f4:f8:fc:9c:7f:63:89:59:50:eb:3f:4d:88:5f:
         67:a4:cc:5c:af:7f:c8:2e:2c:0a:66:b5:a3:80:10:a0:79:5d:
         b7:f9:77:7c:d9:d5:a6:62:7d:73:22:df:b1:70:88:55:2e:7e:
         63:69:ab:95:e7:4e:44:61:b6:49:cd:a5:d5:7e:2b:ea:34:6c:
         01:06:63:ec:53:a2:6c:f9:c0:52:72:39:fa:07:38:62:58:2a:
         91:56:07:27:40:21:d4:9c:60:89:cb:29:2d:de:60:53:ec:06:
         9d:1f:bd:46:99:42:79:ed:e8:63:92:b2:e8:88:2d:23:5f:41:
         63:09:0e:34:da:fe:58:0e:34:53:e4:de:d5:e0:03:42:80:6e:
         ba:99:75:ea:16:ec:ba:e8:fd:bb:38:f1:13:a1:83:a0:1f:63:
         aa:d9:99:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:58:51 2026 by rpki-client