This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/96862188486111E8AA9B1B45C4F9AE02.roa
File:                     96862188486111E8AA9B1B45C4F9AE02.roa (raw, json)
Hash identifier:          0Lj1qBr5IOnvq5yikKxB/3z4CHBcS3+CKBZz/GIClC0=
Subject key identifier:   87:95:CA:D9:E0:A4:59:B0:6B:EB:90:43:6F:7F:F1:37:39:0D:25:91
Certificate issuer:       /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Certificate serial:       2220
Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/96862188486111E8AA9B1B45C4F9AE02.roa
Signing time:             Fri 30 Jan 2026 16:13:46 +0000
ROA not before:           Fri 30 Jan 2026 16:13:46 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     58621
IP address blocks:        2400:6d80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
                          rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 02:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8736 (0x2220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
        Validity
            Not Before: Jan 30 16:13:46 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697cd8b9-bd9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d2:d7:be:31:0a:8e:fc:2b:8b:17:54:11:68:
                    69:cc:0e:3f:c9:45:ab:eb:20:3e:be:46:0d:b7:e7:
                    8c:36:3d:f6:60:bc:4d:fe:f8:22:a4:dc:da:2b:8e:
                    3b:90:a5:7e:42:e3:cc:c0:56:33:63:7a:ea:9d:5f:
                    ac:9b:4f:f1:a9:37:53:04:b1:fc:b6:8b:90:e9:99:
                    56:91:8b:0b:6c:ec:0f:30:cf:9e:7d:69:26:57:1f:
                    8e:42:86:3e:33:92:32:52:df:80:06:ee:e2:d4:bc:
                    89:3e:06:ae:44:d5:50:15:11:f8:cd:5f:1b:eb:18:
                    20:b0:1f:4b:3f:aa:6f:09:f5:15:d1:ba:28:f3:4a:
                    62:26:7c:ee:00:9b:87:fc:7d:fe:8b:33:7d:7f:ae:
                    f4:18:b4:4e:cb:cb:33:80:18:f4:d3:1b:61:a6:7b:
                    3b:5f:4d:4a:c1:f8:19:a7:bc:ae:7b:e9:31:f3:d3:
                    85:23:55:7e:f3:82:69:d2:77:79:ae:b3:e6:73:fc:
                    36:a4:b5:43:ca:da:dc:ea:f0:eb:79:8b:f7:ea:db:
                    4e:9e:08:b9:63:57:b4:41:96:bd:e8:51:a2:61:46:
                    15:d5:08:65:2e:69:ea:54:e2:c3:22:83:e2:59:83:
                    d3:03:a1:80:93:cf:17:b7:18:06:79:39:95:9c:92:
                    21:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:95:CA:D9:E0:A4:59:B0:6B:EB:90:43:6F:7F:F1:37:39:0D:25:91
            X509v3 Authority Key Identifier:
                keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/96862188486111E8AA9B1B45C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:6d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:47:96:14:fe:71:92:01:a8:9b:bd:c0:91:27:c1:15:40:bb:
         34:78:a8:8e:bf:1e:d1:c6:f4:b4:4a:04:f3:a4:c2:4d:79:fe:
         f5:3f:cb:8a:cd:64:76:9f:e1:b1:3e:32:7e:ba:01:e0:b3:f5:
         e2:86:f0:a1:6f:ba:c2:09:01:8f:90:97:f7:81:f1:6f:ba:39:
         39:6b:84:92:86:e9:0c:2b:c3:03:0a:25:5f:f1:8b:fc:f5:77:
         62:3c:24:20:cf:af:0e:d8:9f:db:46:40:91:5c:a9:41:31:52:
         bf:b7:52:f0:2f:29:26:db:64:bd:42:30:55:7b:87:0d:85:63:
         46:f7:fb:15:41:04:3b:4f:aa:f8:b2:3e:ff:ea:f5:da:7c:00:
         0d:e3:44:87:a7:f5:8e:f9:04:1b:47:81:37:4b:4b:93:fa:ef:
         71:d2:f6:b7:ae:7e:50:47:70:70:3e:68:ca:a3:48:de:0e:51:
         61:d9:9a:05:56:a3:20:3a:a2:9d:9e:0b:42:29:00:99:33:d1:
         2a:1e:fa:85:14:20:a5:ea:b1:33:64:7c:cf:5c:bd:ee:15:2a:
         88:03:cc:58:3b:86:05:27:39:5e:e0:da:b0:88:27:26:23:31:
         3f:76:d1:cf:0b:84:90:74:45:d3:33:44:5e:ac:7e:ae:2a:bf:
         b2:bc:af:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 05:59:15 2026 by rpki-client