This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/2574266EAA4911F09A71D135C4F9AE02.roa
File:                     2574266EAA4911F09A71D135C4F9AE02.roa (raw, json)
Hash identifier:          8T+wYZi1TfCvfRn0HQQWPV4yHg+cP+EUKR6Bk2S22hM=
Subject key identifier:   5A:FB:52:99:51:A8:E9:09:5A:09:E2:1A:BC:32:61:3E:15:51:F2:F1
Certificate issuer:       /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Certificate serial:       07AB
Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/2574266EAA4911F09A71D135C4F9AE02.roa
Signing time:             Sun 04 Jan 2026 21:17:33 +0000
ROA not before:           Sun 04 Jan 2026 21:17:33 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     55201
IP address blocks:        2402:3220::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
                          rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 20:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1963 (0x7ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186513, serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
        Validity
            Not Before: Jan  4 21:17:33 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=695ad8ed-1f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fc:41:04:b1:1f:f8:56:ff:da:f9:58:83:12:
                    fb:92:ee:ab:e3:53:06:03:38:28:8d:b5:4a:f2:a8:
                    03:86:56:20:ee:fe:9a:17:b1:3c:2d:b3:18:bd:76:
                    b4:d7:34:a8:96:50:67:7e:d7:db:e1:9d:fc:0d:56:
                    af:62:e2:48:dd:71:9c:9c:27:a5:a5:83:0f:e7:2b:
                    f4:43:7b:f2:c2:04:30:17:f2:64:b6:59:80:69:34:
                    00:fa:2a:97:9b:33:77:2b:c7:c6:e4:10:09:1c:98:
                    ff:5f:47:f9:b7:37:1b:c3:3d:36:4e:e3:51:51:b3:
                    d8:23:e0:3d:51:53:8a:98:6a:90:99:54:d7:99:2b:
                    bc:76:c9:9c:2c:31:63:83:8b:83:3f:ec:bf:61:be:
                    cc:89:d9:da:7d:14:f2:f9:c6:f8:ff:64:d6:13:89:
                    8d:62:14:a8:ec:8b:5e:1a:d6:84:14:80:3c:a3:8c:
                    06:ba:5b:c0:cc:11:6a:8d:19:6c:66:fd:fa:c7:c3:
                    3f:ef:8b:2d:9c:e6:00:94:77:cf:7d:45:2a:b1:f6:
                    98:15:0a:c0:c9:7f:d2:15:58:14:99:97:19:d1:c1:
                    8e:59:c2:ba:93:de:9f:6a:d8:b7:aa:f4:c3:d2:f6:
                    53:ba:95:08:54:c0:60:cd:d8:2f:92:ea:58:e0:f6:
                    1d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FB:52:99:51:A8:E9:09:5A:09:E2:1A:BC:32:61:3E:15:51:F2:F1
            X509v3 Authority Key Identifier:
                keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/2574266EAA4911F09A71D135C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3220::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:ad:43:5f:41:cf:c4:2b:06:f2:61:1c:8e:9f:75:22:0f:63:
         bc:9e:9e:04:de:9e:b6:21:36:f0:b9:8f:f4:9f:a2:2a:0f:3e:
         34:2c:98:75:09:7d:d8:51:ed:63:23:ba:e8:c6:82:74:61:cc:
         77:f2:b2:91:95:70:a6:4a:76:17:2d:41:0b:32:25:a5:dd:4c:
         3c:26:78:c1:3a:a2:86:d5:20:b1:a9:06:5b:b3:a6:78:1a:7a:
         15:b5:a2:8d:c4:b0:ec:bc:df:c5:ee:a7:0c:d4:bf:93:eb:a4:
         8e:4b:8d:16:61:f3:fe:3a:ec:8b:ec:5f:9e:b8:d5:d6:13:83:
         b5:d9:8b:16:df:ed:56:f5:df:1c:95:54:98:59:7e:92:ac:8b:
         23:8c:e3:fb:8d:d7:08:b1:53:13:73:bb:71:08:1c:6c:6b:7a:
         d6:25:ec:9f:87:6b:c0:6d:ac:b1:17:61:bc:b0:b3:ad:7b:4a:
         f8:08:aa:c7:51:dd:30:90:3a:01:98:78:a5:c5:95:97:5a:50:
         b0:6b:b8:69:12:b6:6a:e3:94:c4:04:43:45:f0:cd:34:84:12:
         4b:b7:0b:38:59:7f:28:24:70:6d:80:ee:13:e8:57:70:54:15:
         ca:02:7e:f8:83:a4:1a:04:b4:ad:5a:b5:f9:6d:79:e4:1c:59:
         06:de:c7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 11:16:40 2026 by rpki-client