This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/44A19870784F11E8A84DBE2EC4F9AE02.roa
File:                     44A19870784F11E8A84DBE2EC4F9AE02.roa (raw, json)
Hash identifier:          RNnF2ePfC8BYDHm4iESSiRJubUxv34IgqucOMaN6gUg=
Subject key identifier:   E8:3F:57:F3:5B:04:3B:64:13:95:B3:D1:82:EF:93:E8:2F:E1:8C:19
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2B19
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/44A19870784F11E8A84DBE2EC4F9AE02.roa
Signing time:             Fri 02 Jan 2026 16:13:35 +0000
ROA not before:           Fri 02 Jan 2026 16:13:35 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     38443
IP address blocks:        2405:9800:9c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 15:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11033 (0x2b19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:13:35 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6957eeaf-e161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:be:73:d7:79:c2:d7:32:b8:dc:86:99:c6:16:
                    7e:ee:32:1e:a1:95:13:5f:c3:64:d1:0f:81:ca:1b:
                    11:ad:4a:3b:d0:c6:f5:48:80:a9:08:ce:f7:18:a3:
                    f6:f7:77:25:64:a4:25:f6:9b:2e:c0:17:14:ce:30:
                    36:23:60:a5:0d:13:49:e7:7a:58:d5:da:55:e7:23:
                    12:90:92:ad:2f:c2:1f:1e:c4:16:67:be:a5:b0:9b:
                    e7:c8:36:2c:3e:27:8f:a6:42:c0:37:8a:b1:5f:ca:
                    32:f3:93:58:c3:74:8b:dd:8a:d1:98:6e:90:ab:91:
                    72:40:76:b0:04:eb:18:29:b6:ef:31:a7:7c:af:9a:
                    e9:aa:03:78:ff:cc:00:85:b7:83:3d:cc:64:d1:9d:
                    eb:a2:0f:ca:46:a7:91:0b:64:61:32:47:d0:b8:40:
                    f9:3c:90:42:b2:19:1e:80:eb:7b:c3:88:1a:cb:f6:
                    3b:a0:c5:74:c0:83:74:0d:25:95:87:8d:2a:6a:08:
                    55:37:ae:51:4f:46:db:99:70:e6:e6:4d:f0:06:a3:
                    6e:75:00:f0:12:78:5c:4a:4b:5c:db:57:33:6f:08:
                    a9:d1:9e:d0:07:b7:0d:f1:7d:ca:62:13:61:af:98:
                    16:7c:ad:29:6b:c4:57:13:97:51:a1:cb:aa:49:f3:
                    5e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3F:57:F3:5B:04:3B:64:13:95:B3:D1:82:EF:93:E8:2F:E1:8C:19
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/44A19870784F11E8A84DBE2EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9800:9c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:d3:5d:5a:31:c0:c6:3a:4e:25:53:41:50:63:cb:b4:20:14:
         a7:49:be:90:b7:3f:e8:94:e7:22:d4:cd:72:8a:8d:e1:55:b5:
         5e:12:b5:87:69:57:3c:70:16:d7:51:b3:df:f3:b4:c5:27:f1:
         02:00:4c:7e:95:d8:c7:6b:ed:77:c8:be:9f:93:39:c7:7b:22:
         30:d6:29:ca:a5:d8:e0:fb:b6:87:e9:95:0c:8c:4b:05:63:2c:
         a6:c0:72:07:e9:de:c3:df:c4:1d:41:7c:67:7c:99:d6:3d:2d:
         bd:f2:0b:8f:a7:2e:61:e0:7c:36:a1:67:3c:26:27:58:fe:4c:
         04:88:1e:5d:d4:70:ca:5f:75:72:bd:04:ae:41:9b:a3:e9:f6:
         27:5f:aa:cb:6b:71:1a:5e:9e:b0:c2:57:d9:e8:1f:cf:d6:4b:
         7f:f5:4d:2b:cc:93:de:59:62:21:13:0c:22:e1:56:35:b3:e9:
         26:86:fc:36:ef:f6:92:fe:59:83:ac:63:a9:f4:94:b3:6c:f5:
         a8:75:f3:95:aa:f8:ec:bc:cb:73:0d:90:27:35:4d:08:f4:30:
         dc:ed:70:33:2a:d5:9e:9a:7e:3f:5c:73:c4:69:6b:ea:95:00:
         63:0a:42:e4:a3:05:6e:56:2d:86:bb:7b:31:0c:0e:4e:9e:94:
         5e:89:3c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 06:17:34 2026 by rpki-client