This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/1BE87EF0F54511F0AFC43705646F56BC.roa
File:                     1BE87EF0F54511F0AFC43705646F56BC.roa (raw, json)
Hash identifier:          9qE5tH+GYYqFJwxWgzlrWBSGQqpmQPy8LrvB9rE1fSA=
Subject key identifier:   5F:30:42:24:D0:AC:9F:40:2D:11:28:0C:C3:E0:3A:59:02:A2:A9:28
Certificate issuer:       /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial:       08A2
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/1BE87EF0F54511F0AFC43705646F56BC.roa
Signing time:             Mon 19 Jan 2026 14:42:42 +0000
ROA not before:           Mon 19 Jan 2026 14:42:42 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     213734
IP address blocks:        2401:2c80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 14:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2210 (0x8a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
        Validity
            Not Before: Jan 19 14:42:42 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=696e42e2-5ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3b:27:88:d4:ca:78:d9:31:fb:48:2f:9a:07:
                    d5:97:af:97:8d:e2:1f:15:ed:45:b4:6b:22:c3:14:
                    77:8b:67:6f:45:cc:1d:ce:48:78:b8:9b:64:13:84:
                    1d:42:f2:00:4a:4c:fa:6d:7f:9d:51:27:73:ff:9c:
                    8f:86:5a:72:76:b0:93:29:00:bc:c5:83:1e:f2:30:
                    d1:ba:00:c6:c0:0a:ab:e9:50:97:14:b4:2e:4d:2d:
                    74:26:62:b3:fc:e0:5d:ce:1e:1a:27:49:cd:99:c7:
                    36:2c:ef:e3:5f:73:2b:a6:97:25:66:d0:0f:f8:93:
                    46:48:93:fd:79:81:19:92:e0:82:90:d8:0f:2e:0c:
                    8a:f8:b6:92:b5:83:ff:27:1e:9f:d2:67:94:28:dd:
                    5d:57:f9:4b:fa:42:35:b4:00:59:17:d0:90:5e:16:
                    39:c9:7e:53:4a:fb:d7:f1:ca:ef:b4:5e:ac:c9:2c:
                    f9:03:3c:2f:b2:4b:9a:0d:d6:a3:fd:fc:44:26:6d:
                    18:b6:d8:d0:ce:0e:4f:fa:3d:8c:8d:fb:28:14:76:
                    df:aa:76:31:45:7e:3d:51:05:7f:56:94:f2:36:f4:
                    70:d5:cf:70:0c:43:e5:64:65:f2:67:22:04:0c:09:
                    10:1e:d9:a1:82:32:97:a8:f6:83:9e:ff:46:ce:cb:
                    9c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:30:42:24:D0:AC:9F:40:2D:11:28:0C:C3:E0:3A:59:02:A2:A9:28
            X509v3 Authority Key Identifier:
                keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/1BE87EF0F54511F0AFC43705646F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:86:e2:0f:bc:67:30:69:23:2f:00:e9:4d:28:16:32:05:d6:
         c1:75:5a:0a:28:5b:cd:e3:5e:27:f4:80:a4:0e:e1:3e:35:5d:
         87:15:16:d7:47:2f:97:80:a0:a7:d9:3f:b6:cf:a6:73:8c:4e:
         60:b4:74:31:c3:ab:b5:7a:b5:85:67:88:8f:39:1e:84:08:f0:
         ed:34:fd:f7:f6:5b:c8:75:fc:c1:78:db:6f:af:9b:9d:62:92:
         d3:58:19:f0:5f:22:e6:7b:d9:e2:05:df:91:f8:1a:4d:7c:a8:
         67:6b:1b:2a:ac:45:08:89:e4:b0:99:af:91:e3:e1:0c:ef:21:
         80:49:d2:30:d7:1a:d2:b5:c8:2e:2d:74:e3:6c:e6:f9:fe:f8:
         5e:b2:ce:b7:3c:a6:14:31:6f:93:ae:ab:88:b7:3b:f0:89:22:
         8d:af:24:c2:1e:40:99:5e:9e:4c:e9:05:32:81:63:88:62:2f:
         9b:77:f5:25:72:ab:25:82:56:6f:85:7b:e4:0e:54:5e:35:3b:
         6d:ba:28:02:3c:72:45:32:96:00:69:99:4d:b9:dd:8a:7f:b1:
         54:90:61:78:75:ac:fc:af:d1:87:89:1c:4c:7a:17:08:0d:d5:
         00:6a:5b:2c:8d:ab:c1:ca:10:f7:5b:5f:2a:30:95:c4:8c:35:
         0b:0a:cf:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:46:50 2026 by rpki-client