This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa
File:                     323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa (raw, json)
Hash identifier:          F6Sb6C8r+kxQjBCkCG4vPtEDy5gC9s+/Ef15CAMZ1qE=
Subject key identifier:   BC:A1:1D:99:3C:1C:B4:D8:7C:4D:98:88:15:72:E9:25:04:29:C1:96
Certificate issuer:       /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial:       4C843B0B49C4437346C5F00E5EBD8DCC9C643EA8
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa
Signing time:             Thu 22 Jan 2026 07:00:00 +0000
ROA not before:           Thu 22 Jan 2026 06:55:00 +0000
ROA not after:            Fri 22 Jan 2027 07:00:00 +0000
asID:                     46997
IP address blocks:        2406:4440:90::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
                          rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:84:3b:0b:49:c4:43:73:46:c5:f0:0e:5e:bd:8d:cc:9c:64:3e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
        Validity
            Not Before: Jan 22 06:55:00 2026 GMT
            Not After : Jan 22 07:00:00 2027 GMT
        Subject: CN=3082010A0282010100C53DA4EA2C22DBBA80F7ABA54EAAF00E8A9F8FB6D3178F098242C757C2F9BED4353A1D5343FDEAF2E8CDF20E368D73879E75C0D027C50FFCACFB80787244109969AAD77CB224297467CDB4CDABB16AC80A12C075BFE315DFFB2244CDB509C525F24A1CDFD210BACE4D0777E03B54C901246E7705C666D1CB8E8A8A5F31EF396A668458603BE3B877747D6085D0EC447A2F3B098F7960E26D0F0B69AB1A160B96A7A54E651E99AADCC79214D9CD258FDEC9687360792C99345AFCF6823CDCA04EF979DB7803DA592953A434EB6A1A3F6914D01257009AE9250533D87AFC52570471822BB8106D53663BEBF0D83C35289DB1B65108C3540CA6600FCBB1E5F9A8370203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:a4:ea:2c:22:db:ba:80:f7:ab:a5:4e:aa:
                    f0:0e:8a:9f:8f:b6:d3:17:8f:09:82:42:c7:57:c2:
                    f9:be:d4:35:3a:1d:53:43:fd:ea:f2:e8:cd:f2:0e:
                    36:8d:73:87:9e:75:c0:d0:27:c5:0f:fc:ac:fb:80:
                    78:72:44:10:99:69:aa:d7:7c:b2:24:29:74:67:cd:
                    b4:cd:ab:b1:6a:c8:0a:12:c0:75:bf:e3:15:df:fb:
                    22:44:cd:b5:09:c5:25:f2:4a:1c:df:d2:10:ba:ce:
                    4d:07:77:e0:3b:54:c9:01:24:6e:77:05:c6:66:d1:
                    cb:8e:8a:8a:5f:31:ef:39:6a:66:84:58:60:3b:e3:
                    b8:77:74:7d:60:85:d0:ec:44:7a:2f:3b:09:8f:79:
                    60:e2:6d:0f:0b:69:ab:1a:16:0b:96:a7:a5:4e:65:
                    1e:99:aa:dc:c7:92:14:d9:cd:25:8f:de:c9:68:73:
                    60:79:2c:99:34:5a:fc:f6:82:3c:dc:a0:4e:f9:79:
                    db:78:03:da:59:29:53:a4:34:eb:6a:1a:3f:69:14:
                    d0:12:57:00:9a:e9:25:05:33:d8:7a:fc:52:57:04:
                    71:82:2b:b8:10:6d:53:66:3b:eb:f0:d8:3c:35:28:
                    9d:b1:b6:51:08:c3:54:0c:a6:60:0f:cb:b1:e5:f9:
                    a8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A1:1D:99:3C:1C:B4:D8:7C:4D:98:88:15:72:E9:25:04:29:C1:96
            X509v3 Authority Key Identifier:
                keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a39303a3a2f34342d3438203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:4440:90::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:78:15:ea:cb:93:46:a5:08:e0:00:7d:ae:df:8f:7d:d7:5f:
         fd:e6:4e:d1:de:fe:ee:16:61:74:56:5f:ee:df:48:99:f5:ef:
         af:60:31:57:92:b8:0f:66:a0:2e:99:a1:8b:08:a8:8c:62:b0:
         cb:46:35:24:27:45:49:f0:78:b3:f7:ec:87:77:ff:f9:a8:84:
         b9:3a:41:5b:8d:56:3a:a7:51:86:5c:cd:9f:20:54:d8:48:83:
         8a:c2:dc:69:f3:33:bc:67:12:cb:71:b0:0d:29:69:b1:c4:6e:
         18:8c:9b:9b:2e:04:c7:19:00:44:9d:d3:59:6a:36:eb:9e:82:
         06:b7:c4:81:14:a3:e8:ed:95:38:7e:bb:77:66:6c:4b:cc:16:
         88:b8:bd:2a:f2:c7:93:96:15:bd:ce:a7:8a:89:36:e4:ad:b8:
         09:ba:22:bf:28:ab:98:de:4a:71:61:2a:ad:0f:d3:17:1d:2b:
         19:6f:d9:07:1b:42:62:f2:b7:8f:17:78:42:28:b9:66:ab:95:
         2e:ee:3f:0d:d8:13:47:a5:3f:09:7e:8e:5c:1c:86:81:95:9f:
         1d:cc:5d:3b:a7:73:38:c1:c1:6a:75:7c:9c:19:7a:35:2c:7c:
         1d:fb:f8:88:bf:13:84:e7:db:41:2d:ed:6d:2f:f7:1c:6e:a0:
         31:cc:ed:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----