This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1EF20696EEC611F0B6553517716F56BC.roa
File:                     1EF20696EEC611F0B6553517716F56BC.roa (raw, json)
Hash identifier:          3GuxeAjrlB+hxfwnx2ev/UrANIlreKIaPOJsJtCLgaE=
Subject key identifier:   36:26:1C:92:3E:59:46:AA:E0:01:44:24:D4:2F:BD:D4:7C:8E:A4:DA
Certificate issuer:       /CN=A911695A/serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Certificate serial:       1C
Authority key identifier: 94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1EF20696EEC611F0B6553517716F56BC.roa
Signing time:             Sun 11 Jan 2026 08:18:34 +0000
ROA not before:           Sun 11 Jan 2026 08:18:34 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     154313
IP address blocks:        2001:df6:3e40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
                          rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911695A, serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
        Validity
            Not Before: Jan 11 08:18:34 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69635cda-8a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:07:89:96:3a:a8:7d:32:48:ab:a3:c1:ab:cf:
                    57:57:24:95:72:c3:3c:2c:a0:6d:28:f9:ef:98:bf:
                    24:b4:6f:f2:58:22:bf:f9:6c:b5:ca:68:ed:2b:bb:
                    27:20:6c:82:76:a5:09:47:21:35:e2:a9:c0:35:72:
                    dd:a3:d3:14:e1:da:5f:b2:38:59:36:b0:b2:5d:5f:
                    d0:d8:a5:82:ca:7c:87:11:ff:db:c0:6f:ec:e7:a7:
                    11:f0:8d:3e:52:c0:f1:fd:6c:06:77:32:8f:28:79:
                    24:ed:0e:e5:fc:bf:2b:a0:ec:e7:59:93:90:e7:1f:
                    4f:30:18:ad:3d:bd:bc:ce:6d:24:50:19:c5:63:9f:
                    b7:46:5b:e4:76:8d:00:84:3a:91:50:89:d1:85:a3:
                    1c:4c:fb:8f:fa:21:9e:bf:4f:ab:ec:6e:70:01:3b:
                    eb:2a:47:51:e3:66:e9:80:34:a9:16:98:60:d9:38:
                    9e:5d:08:84:a3:90:1d:e9:35:fb:39:c0:e9:18:56:
                    fd:59:17:f0:46:c9:e1:0f:c0:98:a4:0f:54:81:d5:
                    1b:09:ce:73:4a:c0:87:5b:1f:57:3e:e7:ef:84:58:
                    db:e6:08:f8:ee:63:8e:0e:2b:a8:b5:46:c5:c7:c0:
                    21:f7:23:14:36:7b:ff:b5:3f:ed:fc:bd:57:33:1b:
                    e3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:26:1C:92:3E:59:46:AA:E0:01:44:24:D4:2F:BD:D4:7C:8E:A4:DA
            X509v3 Authority Key Identifier:
                keyid:94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1EF20696EEC611F0B6553517716F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:3e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:cb:c4:74:a0:62:85:c1:2e:aa:b4:3f:a6:98:cd:40:ec:93:
         44:78:5f:96:a3:78:86:e7:18:01:51:bb:5a:95:24:26:09:eb:
         00:c6:5b:5a:b2:b1:56:a0:3f:40:f2:86:f7:57:fa:bc:b1:8a:
         8d:68:17:65:aa:89:f9:0f:fa:52:6a:bc:99:46:a3:2f:49:ca:
         ce:c1:10:39:c2:79:6e:45:de:65:e4:38:77:a9:ea:d3:49:a8:
         b7:f0:9d:c4:7f:77:db:36:18:5f:04:c6:49:fd:20:cb:08:0c:
         23:6b:a5:f2:47:82:0f:0a:bc:7c:85:06:3b:90:9c:c0:50:a6:
         47:53:78:8f:05:e6:80:4e:e7:fa:af:d8:7c:4c:71:d1:c3:a8:
         d9:e1:a1:12:43:4b:b1:c5:1c:61:9d:35:1e:47:86:ea:8c:b9:
         4f:30:82:5d:a4:2d:d4:34:2e:f2:b9:ff:e7:cc:dc:62:d0:2f:
         55:5a:0a:5b:bd:6f:94:dd:d6:54:e5:7a:a8:81:a3:41:98:2e:
         4b:75:14:2f:b8:9b:82:5f:68:cc:a5:7d:81:06:23:b7:c7:fe:
         75:d2:a6:08:ea:1e:ec:7e:8b:6c:8f:f8:ea:ea:b3:b3:7e:2b:
         30:7b:1f:6d:d3:ae:af:51:22:22:bf:ab:17:49:be:72:e5:83:
         8d:7d:24:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:13:30 2026 by rpki-client