This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/75FA3D56F20311F081D1C5E2496F56BC.roa
File:                     75FA3D56F20311F081D1C5E2496F56BC.roa (raw, json)
Hash identifier:          p+6uG73s/MiA9kZm7213DcFrkRTBnwBwjrEnSLISo0Q=
Subject key identifier:   7B:8E:AD:B9:62:A4:13:08:19:8E:3B:EB:1A:F8:42:1D:08:10:E0:AA
Certificate issuer:       /CN=A91F7D5E/serialNumber=CFE47BC8C748BEFD1B77524CC79FFAB54C17BDB3
Certificate serial:       02
Authority key identifier: CF:E4:7B:C8:C7:48:BE:FD:1B:77:52:4C:C7:9F:FA:B5:4C:17:BD:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/75FA3D56F20311F081D1C5E2496F56BC.roa
Signing time:             Thu 15 Jan 2026 11:15:13 +0000
ROA not before:           Thu 15 Jan 2026 11:15:13 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     131171
IP address blocks:        2402:4460::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl
                          rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 07:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7D5E, serialNumber=CFE47BC8C748BEFD1B77524CC79FFAB54C17BDB3
        Validity
            Not Before: Jan 15 11:15:13 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6968cc40-b38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b2:86:ef:08:9c:21:19:08:cd:91:32:b7:b7:
                    5c:e2:e6:7c:c2:79:8e:72:09:61:88:f4:67:55:a2:
                    6c:e1:e2:1c:12:58:e1:29:93:38:09:fc:0a:ed:3e:
                    63:cd:7a:b1:fd:f3:c2:df:83:70:0d:f6:78:44:43:
                    4b:88:aa:fd:0a:50:ea:c6:88:9d:37:ff:f6:23:6a:
                    8d:d1:55:f3:ec:ce:9f:e3:a6:a1:15:3a:31:af:d8:
                    b8:c4:71:cb:1a:89:89:ae:f9:8a:32:80:31:ba:7a:
                    fb:59:fd:d4:bb:bc:ca:27:57:be:32:37:d6:7d:b8:
                    4e:ee:45:25:cb:90:96:37:69:dd:d0:12:10:db:f8:
                    fb:b7:0a:e9:63:18:34:58:a4:b4:fe:2a:6f:9d:f8:
                    49:7e:eb:37:d4:1d:32:80:3a:9a:a9:cd:7e:22:a0:
                    95:8f:d3:5f:8c:15:5e:db:cb:3d:62:f9:e0:f6:d7:
                    1a:a5:c7:42:8d:4d:5f:1e:34:43:72:cb:83:e0:41:
                    32:ec:4b:a8:93:2c:81:49:92:52:47:70:ce:9b:85:
                    5a:1a:c7:0b:89:90:ea:09:28:f8:8b:fe:18:2f:68:
                    83:57:7c:9d:48:6b:a7:50:ef:cf:f8:a5:39:cb:33:
                    20:d0:3e:e6:91:a7:c7:0d:84:b6:fe:93:7d:96:ba:
                    79:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8E:AD:B9:62:A4:13:08:19:8E:3B:EB:1A:F8:42:1D:08:10:E0:AA
            X509v3 Authority Key Identifier:
                keyid:CF:E4:7B:C8:C7:48:BE:FD:1B:77:52:4C:C7:9F:FA:B5:4C:17:BD:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/75FA3D56F20311F081D1C5E2496F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4460::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:3e:ff:6e:42:90:40:bf:51:cf:a9:5e:58:70:4b:2c:db:9e:
         78:70:c3:b4:38:d0:67:08:30:ba:af:f3:a3:f3:ac:28:79:13:
         29:e3:a8:f5:ff:a9:6e:4a:78:19:21:aa:ae:c1:d6:e0:cf:90:
         8d:3c:65:be:38:30:6d:3e:17:5e:7c:ef:25:6c:b2:6c:7d:7c:
         b0:95:8f:a7:97:84:96:6a:86:64:16:6a:7a:02:7d:98:5d:7f:
         4a:58:9e:e6:71:9f:19:b5:ef:e9:97:fb:35:d6:36:e6:7e:30:
         ba:78:ce:16:04:4b:07:94:ce:7c:b5:b2:86:be:3c:fc:a3:d1:
         f6:3c:21:79:52:da:f8:46:5c:e2:ee:0a:d9:1c:29:7c:c4:88:
         f3:c5:5b:7f:5f:8d:b3:2d:a8:54:26:c9:98:33:12:09:fc:04:
         ee:89:a9:04:81:f7:42:9b:4d:1e:01:c5:c0:95:02:1a:04:af:
         d3:8e:af:a9:42:20:45:e7:4a:59:d3:88:31:1c:20:fb:ab:38:
         46:25:4b:25:19:aa:61:a0:4a:eb:b6:24:32:7b:63:04:6a:c9:
         18:f5:b6:08:1b:24:57:a5:32:2d:f3:1f:e9:24:ca:e2:fc:29:
         5f:b3:be:3d:c6:31:49:d4:0b:7c:95:c4:b0:69:c1:50:16:ca:
         1a:4b:2c:4f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFG
N0Q1RTExMC8GA1UEBRMoQ0ZFNDdCQzhDNzQ4QkVGRDFCNzc1MjRDQzc5RkZBQjU0
QzE3QkRCMzAeFw0yNjAxMTUxMTE1MTNaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5NjhjYzQwLWIzOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCosobvCJwhGQjNkTK3t1zi5nzCeY5yCWGI9GdVomzh4hwSWOEpkzgJ/ArtPmPN
erH988Lfg3AN9nhEQ0uIqv0KUOrGiJ03//Yjao3RVfPszp/jpqEVOjGv2LjEccsa
iYmu+YoygDG6evtZ/dS7vMonV74yN9Z9uE7uRSXLkJY3ad3QEhDb+Pu3CuljGDRY
pLT+Km+d+El+6zfUHTKAOpqpzX4ioJWP01+MFV7byz1i+eD21xqlx0KNTV8eNENy
y4PgQTLsS6iTLIFJklJHcM6bhVoaxwuJkOoJKPiL/hgvaINXfJ1Ia6dQ78/4pTnL
MyDQPuaRp8cNhLb+k32Wunl9AgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUe46tuWKk
EwgZjjvrGvhCHQgQ4KowHwYDVR0jBBgwFoAUz+R7yMdIvv0bd1JMx5/6tUwXvbMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3RDVFLzE4QzgzRjQwRjIw
MTExRjBBRDQxOENCQTQ4NkY1NkJDL3otUjd5TWRJdnYwYmQxSk14NV82dFV3WHZi
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvei1SN3lNZEl2djBiZDFKTXg1XzZ0VXdYdmJNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
N0Q1RS8xOEM4M0Y0MEYyMDExMUYwQUQ0MThDQkE0ODZGNTZCQy83NUZBM0Q1NkYy
MDMxMUYwODFEMUM1RTI0OTZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACQCRGAwDQYJKoZIhvcNAQELBQADggEBAI8+/25CkEC/Uc+p
XlhwSyzbnnhww7Q40GcIMLqv86PzrCh5EynjqPX/qW5KeBkhqq7B1uDPkI08Zb44
MG0+F1587yVssmx9fLCVj6eXhJZqhmQWanoCfZhdf0pYnuZxnxm17+mX+zXWNuZ+
MLp4zhYESweUzny1soa+PPyj0fY8IXlS2vhGXOLuCtkcKXzEiPPFW39fjbMtqFQm
yZgzEgn8BO6JqQSB90KbTR4BxcCVAhoEr9OOr6lCIEXnSlnTiDEcIPurOEYlSyUZ
qmGgSuu2JDJ7YwRqyRj1tggbJFelMi3zH+kkyuL8KV+zvj3GMUnUC3yVxLBpwVAW
yhpLLE8=
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:34:54 2026 by rpki-client