This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/6AAF8E08F51C11F09AD046EA586F56BC.roa
File:                     6AAF8E08F51C11F09AD046EA586F56BC.roa (raw, json)
Hash identifier:          kc9sOCeRb3zN+5Mnvc8nN+23u1KD7QtmcMoVlWRYrFU=
Subject key identifier:   F7:C6:14:AA:CD:F5:9F:00:A5:2E:20:9C:4C:01:9A:20:27:4E:68:BE
Certificate issuer:       /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Certificate serial:       016F
Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/6AAF8E08F51C11F09AD046EA586F56BC.roa
Signing time:             Mon 19 Jan 2026 09:51:25 +0000
ROA not before:           Mon 19 Jan 2026 09:51:24 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     152702
IP address blocks:        2001:df6:640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
                          rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 09:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
        Validity
            Not Before: Jan 19 09:51:24 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=696dfe9c-3c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:26:ea:ab:ce:3f:08:20:65:a2:58:d1:72:88:
                    06:9b:03:46:a0:f7:c3:1d:c0:4e:78:68:5d:14:bc:
                    b4:ce:fb:96:ee:43:8c:69:a7:43:12:cb:cb:02:e8:
                    6d:20:d6:b7:e0:6d:c7:fe:b6:2a:60:fc:5c:5a:14:
                    6c:3e:d7:0a:e2:12:50:67:09:38:00:35:05:5a:3b:
                    11:92:15:78:e3:54:e2:80:01:16:70:30:27:dc:e2:
                    9c:46:be:73:b7:53:ed:87:a4:9b:3d:b0:26:8b:fb:
                    56:cc:19:41:58:31:0e:64:e5:9a:f2:ac:0b:68:11:
                    d4:20:22:f3:76:5e:44:ac:c2:93:be:59:52:d9:dc:
                    69:a2:c9:d2:da:4e:16:99:dc:80:2e:e6:03:35:31:
                    b9:60:28:1e:bb:19:c4:0e:11:b3:a8:87:09:e9:77:
                    e8:e3:78:d1:04:63:d7:0a:35:1d:d6:52:e7:17:0b:
                    73:02:d1:8f:d6:5b:96:45:26:95:7e:33:cd:ad:13:
                    f3:de:e6:31:df:fb:1b:3d:ac:4d:7a:1e:35:a1:3b:
                    e6:47:f2:93:23:ea:ad:d9:b5:45:15:cc:fc:06:0a:
                    a3:d7:cb:bd:b5:e5:e6:47:7a:a9:10:a7:b6:f7:0c:
                    d8:d2:70:27:cd:3b:d3:4a:04:f5:33:82:9c:00:a1:
                    04:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C6:14:AA:CD:F5:9F:00:A5:2E:20:9C:4C:01:9A:20:27:4E:68:BE
            X509v3 Authority Key Identifier:
                keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/6AAF8E08F51C11F09AD046EA586F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:640::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:ec:8d:f9:78:e5:74:45:af:1f:f1:fa:7e:66:52:c2:7c:98:
         26:07:a1:38:60:d8:a0:cd:57:68:42:a5:78:5b:f8:9f:2e:5b:
         6a:62:db:8a:6d:94:c3:9c:82:07:74:60:72:52:29:50:9e:1a:
         6a:ea:c0:57:59:5b:89:a5:9c:87:c3:be:53:9b:49:f8:21:38:
         ab:55:c7:f4:f3:1e:bc:cb:40:a1:69:d2:94:88:38:ff:a7:1a:
         bf:64:a0:39:a6:c0:1a:5b:d0:78:d9:04:6a:04:0e:1e:40:87:
         35:d0:74:91:b2:20:a3:1a:f0:e4:b4:9b:09:2e:0a:de:6a:b4:
         7f:f6:6b:22:98:37:f0:ad:0a:44:65:75:28:7e:5e:0f:9d:56:
         41:06:4f:6d:2e:69:df:ac:52:25:d3:97:27:0e:4f:86:1d:14:
         ab:ea:d0:01:c7:cd:06:ba:9b:b8:2e:6d:f1:fd:e7:80:53:ed:
         c0:13:bf:ff:05:6f:1c:98:4f:ee:08:97:6f:be:2c:91:2b:00:
         69:f9:c8:11:22:64:20:8d:70:f2:8b:79:eb:47:93:03:c6:92:
         85:b7:12:e1:06:50:d4:7d:26:ea:f6:44:15:b4:ce:0e:42:65:
         0b:19:4d:ae:e2:a8:f5:19:a8:99:47:0e:ac:a8:cd:60:78:4a:
         25:a3:b0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:46:11 2026 by rpki-client