This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/C1B7F140EF6811F09BA576A7586F56BC.roa
File:                     C1B7F140EF6811F09BA576A7586F56BC.roa (raw, json)
Hash identifier:          4jZh/AUohlYOypPBvV6z3q4rXnhSp14Z18jcZ4dgFT8=
Subject key identifier:   15:58:13:8F:02:24:DF:9B:EE:5D:F0:16:AC:C0:D8:29:B1:3C:1B:68
Certificate issuer:       /CN=A91E855B/serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
Certificate serial:       05
Authority key identifier: 6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/C1B7F140EF6811F09BA576A7586F56BC.roa
Signing time:             Mon 12 Jan 2026 03:42:45 +0000
ROA not before:           Mon 12 Jan 2026 03:42:45 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     142192
IP address blocks:        2001:df6:8f40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl
                          rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 07:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E855B, serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
        Validity
            Not Before: Jan 12 03:42:45 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69646db5-137c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:b5:0c:0e:1c:b7:d7:e4:96:84:da:b8:b7:
                    b2:63:d7:b8:83:51:41:c0:8b:89:4b:73:bc:1b:02:
                    eb:14:34:b5:8a:2e:9b:14:f9:37:c5:fb:6c:b6:5f:
                    73:6f:b7:9a:d0:eb:66:b2:c3:33:ca:67:ff:5c:68:
                    29:27:fb:62:40:bf:65:58:55:1b:50:fa:2a:5d:f5:
                    d1:9c:ed:83:54:3f:ef:45:9d:75:f6:67:8c:ed:13:
                    69:8e:d4:fc:36:f6:1c:ae:70:83:1b:40:f6:bd:ff:
                    40:8e:b7:ba:61:da:a1:e6:98:b8:8d:7d:9c:3f:75:
                    ab:33:45:19:b8:65:60:18:b1:59:06:c3:a1:27:3f:
                    91:04:8e:ac:69:b7:8b:77:fc:8f:43:97:af:45:e8:
                    ee:7c:c1:2c:de:a4:fb:d3:fe:e0:22:d1:f9:37:18:
                    13:cc:27:b9:3e:09:1d:88:76:41:dd:b2:d1:75:41:
                    6b:cc:d3:d4:61:01:81:a0:a5:72:aa:13:ec:1e:9b:
                    6f:00:b0:66:5a:d3:54:04:8c:99:6b:b6:f5:d4:37:
                    96:28:cf:8f:99:39:47:e2:b5:f4:a6:6b:e3:2e:bc:
                    59:99:0b:b3:f3:65:eb:16:59:2c:1d:ce:c9:c9:85:
                    d8:6a:bb:3d:f0:80:00:15:5a:10:5c:a3:0a:1e:9d:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:58:13:8F:02:24:DF:9B:EE:5D:F0:16:AC:C0:D8:29:B1:3C:1B:68
            X509v3 Authority Key Identifier:
                keyid:6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/C1B7F140EF6811F09BA576A7586F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:8f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:a0:ee:c5:a1:83:c2:98:a4:06:c0:cc:c6:d0:84:8a:18:bd:
         55:63:a4:44:fc:a9:da:35:0b:93:ba:84:fb:a5:cc:79:2e:69:
         aa:8f:00:0a:89:2d:10:4a:fc:62:e6:67:01:94:00:79:f9:d0:
         e0:e5:ee:ad:c2:6e:cc:3f:cb:35:a6:77:b5:ca:d3:60:f3:39:
         a6:5c:60:ce:d6:d1:c3:2f:ef:93:b4:7a:c2:6f:2e:c1:b5:f6:
         39:68:84:a5:20:47:9f:8f:a1:e3:2a:f0:25:61:db:8c:9b:7f:
         70:f0:15:c8:16:ee:de:b5:30:5d:7f:92:ca:df:a0:b4:f3:9f:
         75:f0:3b:8b:90:20:19:7e:51:f8:83:b7:14:d2:22:fa:a7:bf:
         4c:f3:f3:26:21:40:2e:ab:9f:2b:cb:7b:37:39:46:bb:12:b1:
         fc:7a:58:e6:b6:2a:40:54:50:d2:7f:a9:b9:b8:e7:46:a8:d0:
         6e:9c:e8:e7:20:e5:39:83:6d:9d:65:f0:34:d9:57:e6:99:7c:
         cf:93:a9:28:48:1b:39:b3:20:5a:69:4b:94:c2:33:4e:09:13:
         a0:cc:d0:1f:c7:fa:44:51:4e:69:02:6c:fb:40:a9:5b:8b:1a:
         6b:ee:6a:56:e3:52:83:0c:17:a6:90:b6:af:97:a4:2c:bd:d3:
         d0:ed:5d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 07:20:48 2026 by rpki-client