This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/B1078FAAF1C411F0A342834F396F56BC.roa
File:                     B1078FAAF1C411F0A342834F396F56BC.roa (raw, json)
Hash identifier:          ljAj7wTLxbbfYWdIEjjCoSCbzwYEXVcu5xylhBoKUaQ=
Subject key identifier:   81:08:C7:B0:FF:85:7A:F1:0F:51:D3:A0:E9:0E:0B:5D:DE:2E:56:6D
Certificate issuer:       /CN=A915B358/serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4
Certificate serial:       03
Authority key identifier: 85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/B1078FAAF1C411F0A342834F396F56BC.roa
Signing time:             Thu 15 Jan 2026 03:45:54 +0000
ROA not before:           Thu 15 Jan 2026 03:45:53 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     142200
IP address blocks:        2402:47a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.crl
                          rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 07:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B358, serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4
        Validity
            Not Before: Jan 15 03:45:53 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=696862f1-3b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:5e:8a:59:c4:70:69:d3:a9:fb:db:22:79:
                    ee:92:fb:f7:33:51:4c:53:b9:40:a7:9d:9a:4b:60:
                    8c:d4:88:c0:2f:89:69:6e:99:70:de:7a:df:29:8c:
                    0b:1c:2a:21:24:83:a6:6a:ee:01:cb:60:04:43:19:
                    b2:cc:37:7f:06:63:d4:b2:b0:e5:00:94:20:53:ab:
                    1f:05:3b:de:ce:68:78:0f:92:cf:53:29:82:a2:39:
                    56:1d:ad:37:e8:26:cf:2d:dd:f2:e8:8c:a2:f0:b0:
                    73:2b:4d:fc:02:2a:d9:77:fb:62:94:ac:3f:82:d0:
                    53:a4:48:98:5d:25:fa:a9:f1:e1:4c:76:bc:5a:39:
                    45:31:2a:2c:ed:59:b8:08:25:c6:3b:d8:ac:f9:50:
                    38:90:da:ed:08:c4:d9:74:e1:f3:55:17:9d:7a:1e:
                    03:79:f2:22:75:44:78:34:92:ef:96:62:7f:d7:cb:
                    42:c7:2e:c2:c8:9c:7b:50:b2:84:ce:a6:0e:02:35:
                    e1:eb:70:22:be:6d:f8:c8:ab:a0:5b:e0:93:0d:87:
                    32:58:4d:11:6b:0f:fb:b2:0a:fc:40:5a:01:9d:00:
                    5e:39:65:1d:29:51:a5:51:a1:bf:8e:6a:01:dd:2e:
                    61:a3:0e:19:8b:3a:98:19:bb:a7:ee:86:19:c8:5e:
                    d3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:08:C7:B0:FF:85:7A:F1:0F:51:D3:A0:E9:0E:0B:5D:DE:2E:56:6D
            X509v3 Authority Key Identifier:
                keyid:85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/B1078FAAF1C411F0A342834F396F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:47a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:88:b5:7e:19:91:54:b0:1f:38:01:04:64:a8:6f:99:57:a0:
         b3:c2:3f:82:1d:5f:72:c2:d8:1a:a4:c1:34:04:92:66:2e:c8:
         49:52:e6:f6:0e:0d:fa:14:c5:3c:92:b4:09:7e:8f:e8:0e:b5:
         29:37:12:e2:ab:13:77:57:3d:02:46:1d:b9:75:7f:74:99:5e:
         80:dc:fd:c8:22:4d:aa:01:8f:c2:77:96:61:11:d9:31:04:02:
         d7:12:ff:6c:67:26:ba:26:c9:7e:63:f8:09:ba:85:02:84:56:
         a1:ac:d2:ab:23:cc:7d:7e:1e:bb:68:93:6c:10:e5:78:fb:36:
         5d:4b:8c:7a:ff:90:8c:49:58:05:69:be:de:d6:69:8e:34:4d:
         63:d2:44:78:01:04:03:ab:38:12:c6:86:9b:af:7d:cd:35:05:
         be:fe:bb:2a:1d:58:b0:7c:cb:77:45:b1:3d:a6:e5:50:9b:10:
         c7:68:37:4e:9b:61:87:20:2e:f7:11:20:c5:2d:c5:ae:3c:78:
         79:93:3d:53:77:1c:fb:4e:65:0b:aa:88:32:74:30:43:bb:71:
         07:d3:34:c6:b8:21:c8:71:94:24:6a:74:bb:50:f4:63:1e:18:
         fb:6d:47:c6:27:3e:ef:f4:a7:30:86:8f:4f:97:52:c6:df:9f:
         9c:3b:66:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:19:01 2026 by rpki-client