This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/E11BD76CC6D911EF8CC3C849C4F9AE02.roa
File:                     E11BD76CC6D911EF8CC3C849C4F9AE02.roa (raw, json)
Hash identifier:          uaeUbT25QdGsv3S5FjRA3xNBZPZvdHAE+0iHQUE91u8=
Subject key identifier:   21:AC:15:59:E0:9E:29:78:D9:85:14:AC:4F:CF:82:58:16:5B:84:4C
Certificate issuer:       /CN=A9126A3C/serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66
Certificate serial:       C4
Authority key identifier: EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/E11BD76CC6D911EF8CC3C849C4F9AE02.roa
Signing time:             Sat 03 Jan 2026 05:24:26 +0000
ROA not before:           Sat 03 Jan 2026 05:24:26 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     153476
IP address blocks:        2401:e4e0::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl
                          rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Feb 2026 05:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126A3C, serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66
        Validity
            Not Before: Jan  3 05:24:26 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6958a80a-ad78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:86:9c:ff:e2:71:50:fa:6c:95:66:7b:a2:71:
                    2f:92:88:06:7a:43:df:87:d8:20:31:b4:c2:1e:4b:
                    75:3a:d5:8d:06:4d:d5:af:ed:0e:de:e0:54:37:c6:
                    6f:37:b4:77:eb:88:b4:e1:56:5d:25:39:ba:63:e3:
                    b4:43:32:06:ab:d9:5c:c9:ee:99:1c:29:58:c1:8e:
                    f1:b5:be:ff:c3:fe:f1:0e:15:80:b8:d9:cf:ee:5a:
                    91:ec:49:ec:bd:0e:23:0b:7f:9c:ca:bf:e0:c9:c9:
                    a6:03:07:3b:d7:fe:f0:90:f9:b1:d8:e3:23:ff:ec:
                    1a:9b:35:f7:26:d0:34:4a:f3:83:e7:47:6e:bf:0d:
                    95:df:ac:ba:79:9d:75:60:cc:92:ac:bb:b9:2a:42:
                    f4:d8:49:29:82:2c:60:9d:8f:96:92:ca:2d:02:c6:
                    a3:3f:3b:54:b4:32:14:6e:92:96:5c:05:95:3c:72:
                    4d:3f:1d:7f:3c:a1:f3:aa:e6:9a:28:bf:9b:73:b8:
                    67:5c:a9:a7:08:58:15:7b:b6:0f:48:89:3a:1d:ca:
                    90:5d:e1:e4:4f:18:e5:0a:f8:fb:59:6f:ef:ee:4c:
                    f7:4a:92:0a:09:20:9e:93:52:54:55:40:dd:02:eb:
                    89:6c:8c:15:a9:fc:d6:aa:f3:19:b7:ad:d4:2d:42:
                    9c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AC:15:59:E0:9E:29:78:D9:85:14:AC:4F:CF:82:58:16:5B:84:4C
            X509v3 Authority Key Identifier:
                keyid:EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/E11BD76CC6D911EF8CC3C849C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e4e0::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:bc:9c:b0:39:8e:fb:27:2c:f7:20:04:10:b9:44:42:04:ec:
         3b:f0:c9:f4:34:a2:b2:b4:9e:90:b8:6f:7a:c4:6e:a9:39:76:
         b3:34:a2:5e:38:ba:92:2b:93:05:eb:72:de:8f:53:37:76:10:
         50:f1:aa:75:b0:68:eb:80:7a:32:ee:01:d1:50:26:45:3c:b1:
         39:40:bb:c1:46:44:65:ab:d2:60:13:ab:9e:9c:01:00:22:4d:
         04:57:74:db:a6:1b:15:58:f8:75:35:54:df:b7:ed:78:5c:ad:
         03:c3:d8:32:b9:ee:73:4d:bd:4d:33:d8:c1:96:96:91:9a:6a:
         6a:29:aa:ed:be:19:be:db:35:a1:08:59:37:6a:7b:3c:3a:1e:
         b9:be:0d:0d:19:e4:5a:d7:be:29:f2:b2:8f:fb:7d:96:c6:3a:
         07:bc:e8:72:34:21:ce:4e:7e:f2:9d:4b:db:5e:ba:f1:91:47:
         c4:43:e0:ac:f0:49:2a:1a:fe:0d:e6:c8:c4:86:ee:74:0b:53:
         53:04:11:6f:a1:09:55:57:c3:80:90:33:03:cc:92:ab:9c:b4:
         18:88:3d:dc:16:54:6a:6b:10:5e:99:1e:55:4d:9a:c3:0e:3f:
         78:99:5b:f7:7c:60:f3:58:8b:d6:c0:2e:75:d9:a8:13:8d:fb:
         72:2e:f4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:55:58 2026 by rpki-client