This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/BE713C72E06211F0BC8E94E0746F56BC.roa
File:                     BE713C72E06211F0BC8E94E0746F56BC.roa (raw, json)
Hash identifier:          RKdp+bSh2QRoDqf5bzJAloQt5eBfLvvA52nxNAFUChA=
Subject key identifier:   A2:83:21:B3:63:E7:0E:2E:90:BA:8D:71:D6:4E:E3:DF:62:38:5A:65
Certificate issuer:       /CN=A913059E/serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
Certificate serial:       B6
Authority key identifier: 72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/BE713C72E06211F0BC8E94E0746F56BC.roa
Signing time:             Wed 24 Dec 2025 00:51:55 +0000
ROA not before:           Wed 24 Dec 2025 00:51:55 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     13335
IP address blocks:        2401:c2e0:8000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl
                          rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 05:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913059E, serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
        Validity
            Not Before: Dec 24 00:51:55 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=694b392b-c9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7c:e1:de:3a:71:f1:6b:0c:be:2c:f4:8b:8a:
                    18:75:38:84:7d:a3:93:7a:b6:28:ad:b9:c4:08:37:
                    6b:d7:fa:63:2e:23:d9:b6:c1:c1:04:67:1b:5d:9d:
                    8d:2a:41:3c:4a:b5:75:5c:32:12:0e:75:9e:d8:0b:
                    ea:14:04:4b:02:96:a1:8e:4a:74:fd:5a:88:f8:91:
                    d6:c7:97:0c:a6:e8:24:17:93:e1:f5:09:a4:16:c3:
                    3b:7b:02:06:a7:f6:eb:9b:90:1e:14:c5:c9:ec:c7:
                    48:61:ab:9d:d3:6f:10:03:e1:9d:77:09:dc:ea:f4:
                    0e:86:80:6b:97:80:7d:3f:88:36:0e:78:56:89:80:
                    bf:74:3d:83:97:3a:51:0b:ea:54:ea:a2:3e:99:20:
                    bc:60:37:fe:23:ca:c9:5b:ad:d5:9b:b0:74:5c:69:
                    c6:5f:1c:83:bf:e2:db:4c:5b:2b:83:50:39:e2:aa:
                    7e:6a:15:51:64:7e:32:99:10:3f:95:5b:de:30:c2:
                    83:59:89:4e:cb:9b:75:d1:0e:30:ed:ab:d0:3d:db:
                    29:c9:e6:87:9c:e2:19:ed:48:5b:7a:ca:a6:f0:ec:
                    75:0b:ff:95:10:7b:ae:dc:97:dd:b4:5f:91:7e:2d:
                    b7:e0:d6:a8:4e:35:5b:96:ac:3b:aa:2c:e9:8d:58:
                    e2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:83:21:B3:63:E7:0E:2E:90:BA:8D:71:D6:4E:E3:DF:62:38:5A:65
            X509v3 Authority Key Identifier:
                keyid:72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/BE713C72E06211F0BC8E94E0746F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:c2e0:8000::/44

    Signature Algorithm: sha256WithRSAEncryption
         40:94:e9:12:ab:c1:25:c4:ac:e3:4c:36:1d:30:02:3c:fe:98:
         5f:bf:73:8c:d9:e5:96:69:18:a3:4a:9f:4e:21:88:40:7e:9c:
         66:01:fe:5b:cd:27:29:87:77:11:8f:2a:e2:bb:b4:ea:69:b9:
         10:f4:f5:f2:d5:ea:5f:19:b1:34:64:4b:75:12:69:0b:2b:56:
         c3:23:43:b3:64:1c:3e:6a:a6:43:74:01:82:a6:ca:74:e3:44:
         72:9e:9c:b9:d6:a8:05:f0:b1:d0:9c:d9:2a:3f:f5:47:3d:37:
         6e:5b:41:1b:bf:40:21:69:74:95:93:2c:2a:e2:01:ac:78:11:
         8a:91:ba:08:7d:27:f7:7d:50:51:d8:2c:a5:f8:65:d7:69:1a:
         d7:be:9e:5c:91:97:66:aa:0f:31:77:de:eb:da:73:b2:9b:69:
         f1:84:92:d0:12:31:e8:1c:80:5b:20:21:2d:8d:9a:0e:0a:82:
         b1:3b:b2:0c:51:86:90:9e:9c:8e:8e:dd:e7:5d:80:da:e7:e2:
         aa:1b:e9:a1:49:a5:b1:6f:3b:a0:6a:fc:02:8d:4f:34:d0:e1:
         8c:01:62:f2:95:68:9c:db:b6:d2:db:65:2c:8b:75:df:c6:75:
         55:2f:e8:19:de:4f:6f:2c:24:ac:e0:24:df:e7:91:96:a1:89:
         ee:38:91:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:22 2026 by rpki-client