This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/323430363a343434303a3a2f34342d3438203d3e203134363138.roa
File:                     323430363a343434303a3a2f34342d3438203d3e203134363138.roa (raw, json)
Hash identifier:          SAkfjvG8Y6WQWfQk0MGV0etVn0uiNoUlRJFQFNokniE=
Subject key identifier:   42:7D:D0:5D:C2:8A:90:A4:78:9D:5C:C2:62:D5:43:17:F7:07:06:19
Certificate issuer:       /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial:       0415B42C80A1D6F2404C5929F68CD01D14FBB2DB
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a3a2f34342d3438203d3e203134363138.roa
Signing time:             Thu 29 Jan 2026 08:00:00 +0000
ROA not before:           Thu 29 Jan 2026 07:55:00 +0000
ROA not after:            Fri 29 Jan 2027 08:00:00 +0000
asID:                     14618
IP address blocks:        2406:4440::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
                          rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:15:b4:2c:80:a1:d6:f2:40:4c:59:29:f6:8c:d0:1d:14:fb:b2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
        Validity
            Not Before: Jan 29 07:55:00 2026 GMT
            Not After : Jan 29 08:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a7:3f:81:44:a2:8c:df:7e:5a:b6:eb:7d:48:
                    4e:e7:eb:e8:b4:12:a4:6a:ee:f3:fc:21:5e:9e:05:
                    1f:68:bf:d3:ba:f2:84:ca:f7:97:9b:4f:d8:54:32:
                    86:6c:f9:bb:86:98:02:3a:e4:34:2b:05:e5:e9:10:
                    ef:20:fc:94:28:5b:a1:24:7d:6a:4e:20:e1:64:c7:
                    5e:65:b5:92:e1:65:ea:e9:b2:46:76:31:17:ee:77:
                    1a:11:c6:2c:23:6f:f8:3d:cf:8f:31:ad:4d:aa:f7:
                    66:a1:fb:78:5f:6b:5e:dc:80:8e:17:15:d3:ad:12:
                    44:f3:60:d7:49:f2:11:cb:e6:74:a1:01:b9:98:52:
                    d0:13:f7:76:3a:3d:2e:b2:12:7a:6a:46:2f:dd:07:
                    97:ce:99:83:fc:f9:7b:e9:40:16:fb:f8:7f:77:9a:
                    52:14:ef:3f:b3:38:d8:bb:42:f3:b0:29:b1:ae:68:
                    23:a0:51:e5:2e:e3:a2:06:09:9b:61:cc:fc:f0:5c:
                    3c:e4:c6:5a:87:52:ec:be:38:37:63:59:2e:cd:61:
                    36:96:6a:d1:18:cc:a5:aa:81:08:d2:49:97:ad:6b:
                    4f:4d:8c:14:bc:ba:74:8b:8b:57:d0:bb:74:e6:f6:
                    2b:c1:03:fe:ad:5b:4b:10:f9:d8:09:da:44:b3:84:
                    c7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7D:D0:5D:C2:8A:90:A4:78:9D:5C:C2:62:D5:43:17:F7:07:06:19
            X509v3 Authority Key Identifier:
                keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a3a2f34342d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:4440::/44

    Signature Algorithm: sha256WithRSAEncryption
         98:33:5a:14:01:ef:91:1b:4f:98:e2:d4:f6:34:f9:cd:2d:58:
         1a:af:01:41:1f:b3:7e:8c:5b:1e:fe:ab:49:09:91:14:98:63:
         0d:34:2f:9c:50:36:f1:1d:c7:d0:fc:80:e3:23:00:e6:dc:2e:
         e7:b4:d4:ab:9b:0b:79:ad:87:dc:fc:d4:15:6d:8e:9e:c0:b7:
         e9:e0:4b:0b:af:0e:68:03:f5:a0:66:d3:1f:e0:8d:40:eb:7c:
         b4:c9:c6:c8:59:d1:23:ef:68:be:fb:e8:29:05:91:ed:92:ba:
         82:e5:2b:ac:3d:43:f0:49:0c:79:7e:a5:d2:b0:4e:db:10:f2:
         8a:9c:eb:9b:6f:05:b8:e8:e9:2a:b9:d8:69:ae:e8:88:d4:15:
         26:fc:b7:37:f1:25:43:cc:a5:2a:69:a3:8d:78:c9:bc:36:2f:
         7f:96:72:d9:ee:fe:14:01:85:7b:c4:38:fc:82:2a:fd:56:cb:
         33:d5:2c:bf:c3:26:81:30:b4:45:f2:a1:b4:75:7a:94:da:c3:
         6c:55:d2:28:f8:22:c5:36:16:44:e3:3a:ea:9a:11:d4:50:ca:
         04:ee:7c:c2:46:bd:0c:cf:aa:13:85:85:c1:a4:fd:a6:44:bc:
         36:80:c6:cf:e0:bf:e3:9e:d8:c8:d7:e7:cf:6c:9d:b3:c5:01:
         ee:a2:cf:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----