This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/323430363a343434303a3a2f34342d3438203d3e203338303038.roa
File:                     323430363a343434303a3a2f34342d3438203d3e203338303038.roa (raw, json)
Hash identifier:          V8HI3LeqhlDWaTNhOKrowUK3gcQBxuKNchpGfE7O8VY=
Subject key identifier:   27:D3:0E:02:72:D5:E1:2D:2F:7B:A3:97:21:B6:26:1E:F1:4A:0B:D3
Certificate issuer:       /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial:       519A8FBC837A34FE1FA39F29099387630D80CD5C
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a3a2f34342d3438203d3e203338303038.roa
Signing time:             Thu 29 Jan 2026 09:00:00 +0000
ROA not before:           Thu 29 Jan 2026 08:55:00 +0000
ROA not after:            Fri 29 Jan 2027 09:00:00 +0000
asID:                     38008
IP address blocks:        2406:4440::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
                          rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9a:8f:bc:83:7a:34:fe:1f:a3:9f:29:09:93:87:63:0d:80:cd:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
        Validity
            Not Before: Jan 29 08:55:00 2026 GMT
            Not After : Jan 29 09:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:22:fa:53:5b:5a:32:cc:9b:c2:ec:59:2a:
                    99:a8:11:39:62:55:ca:5c:5b:fb:d7:3e:85:d1:5a:
                    0a:b0:b8:2d:4a:43:b1:77:7f:95:ad:66:11:c3:56:
                    c7:7f:72:a2:13:08:77:64:2e:50:78:a6:49:19:29:
                    f7:36:2c:a9:71:5a:e7:4d:c4:47:d5:0a:12:8e:99:
                    12:31:a7:40:35:ab:bc:48:25:c1:11:1c:43:8b:ae:
                    22:0a:16:64:96:bd:ac:f7:85:4d:f7:d3:8e:8e:14:
                    7d:d6:98:d8:ca:5f:fd:f6:95:45:07:ee:71:66:5a:
                    e1:48:2e:29:d7:4f:c1:15:39:1b:40:cc:a6:a0:64:
                    42:6a:c9:9f:23:97:fa:54:63:a8:30:00:8c:d2:2a:
                    8a:10:3c:14:b2:49:1c:2d:57:88:fe:36:3d:d1:9e:
                    af:cf:79:69:e7:d3:de:97:59:d1:33:d6:65:d0:20:
                    1a:8b:0e:2c:6b:4f:fc:c3:29:19:ed:38:cc:40:ea:
                    3f:55:d6:37:31:d2:7e:40:b8:58:0e:ea:9a:53:39:
                    2a:bf:9e:29:95:05:6e:62:72:19:27:52:da:8e:77:
                    79:bf:be:43:64:ae:99:f5:d9:c8:88:57:2d:a5:99:
                    5d:9d:76:85:66:45:4b:c4:c6:63:01:86:8e:99:89:
                    0f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D3:0E:02:72:D5:E1:2D:2F:7B:A3:97:21:B6:26:1E:F1:4A:0B:D3
            X509v3 Authority Key Identifier:
                keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a3a2f34342d3438203d3e203338303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:4440::/44

    Signature Algorithm: sha256WithRSAEncryption
         d4:5f:8e:80:10:d2:76:0a:3e:36:59:9c:10:12:5b:59:11:d1:
         53:c7:6c:ca:75:89:90:e9:fd:d2:4c:c9:b2:1a:cf:23:3c:3f:
         57:62:84:6c:92:8d:39:fa:a2:cc:52:ba:2b:74:85:df:95:75:
         54:71:34:53:e3:82:54:5a:2b:c9:0a:c4:11:5f:3b:db:ec:69:
         f0:f2:be:cc:44:06:47:f0:7d:e4:2c:14:4b:ec:fc:d9:d5:b8:
         0f:3d:73:62:8a:41:8c:de:89:84:2e:9a:58:5a:da:1d:35:1e:
         dc:93:83:f3:e7:50:fd:ce:5c:db:22:fc:00:3b:db:84:27:f7:
         29:64:de:73:3a:c1:58:7a:fb:75:1a:9e:b4:56:8c:d0:f3:61:
         f3:60:7f:68:ab:54:91:ee:de:86:18:52:f6:d4:0b:fe:dc:3b:
         b5:1a:d1:4c:be:1d:fb:db:39:90:20:1c:10:f7:c4:8b:a1:4c:
         b5:94:cf:1f:6b:63:08:b6:87:76:39:b1:b9:c4:79:92:10:b2:
         b4:20:49:82:55:40:93:d5:99:ae:33:8a:f0:64:0d:d0:10:50:
         72:73:dd:2c:28:69:86:54:74:0d:fc:a9:df:e2:35:0d:47:75:
         a8:7b:34:a3:39:42:40:34:7d:cb:10:87:71:e4:72:57:7c:58:
         9b:00:15:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 20:52:51 2026 by rpki-client