This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/401EA996B5B511EABB640052C4F9AE02.roa
File:                     401EA996B5B511EABB640052C4F9AE02.roa (raw, json)
Hash identifier:          WIfEILLO3ZbLl/lffoMAurh+q1z7U259glTs8CGzWmQ=
Subject key identifier:   3F:9F:DE:A5:1C:CB:E9:BB:AC:ED:93:23:04:74:70:D8:05:09:36:D2
Certificate issuer:       /CN=A91F6E7D/serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
Certificate serial:       0A2C
Authority key identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/401EA996B5B511EABB640052C4F9AE02.roa
Signing time:             Tue 30 Dec 2025 19:16:13 +0000
ROA not before:           Tue 30 Dec 2025 19:16:13 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     14061
IP address blocks:        139.59.0.0/16 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl
                          rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 19:11:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2604 (0xa2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6E7D, serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
        Validity
            Not Before: Dec 30 19:16:13 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=695424fd-b5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:aa:94:7f:4e:9f:d0:1c:9a:5b:c8:e3:1b:13:
                    2c:c1:57:3c:75:dd:77:72:a0:5c:df:fc:13:f8:a6:
                    31:40:3a:f2:0c:25:a8:a6:15:70:47:78:87:d0:46:
                    b5:b8:da:31:c6:f3:50:6f:d7:b4:7d:71:cc:3f:4e:
                    67:34:c5:1c:fd:5b:6e:d5:7d:d1:2a:b8:d9:a4:b9:
                    03:3b:24:36:6b:5e:80:1b:ea:d3:df:bc:e9:f8:56:
                    23:9d:da:20:a1:d3:50:ac:4d:89:3f:c5:6a:80:9d:
                    ba:47:10:a1:27:5f:73:c5:a3:b3:a7:89:a5:36:42:
                    db:7e:83:06:5b:7f:20:29:11:21:b5:3e:44:c4:70:
                    84:e0:ae:80:4b:98:86:25:8f:ce:47:80:46:1c:ae:
                    25:ba:93:7d:0a:8d:7b:ca:5b:54:9a:9c:de:b9:34:
                    c4:60:7f:43:dd:32:da:e5:75:b0:0a:79:85:d2:dc:
                    98:95:96:c6:03:09:63:a0:24:cf:ad:7a:82:8b:ff:
                    8d:e5:71:3b:d4:bd:fc:da:cf:dd:d6:9d:1b:a4:ff:
                    86:a4:b4:5c:37:7a:ff:60:3f:c2:d7:1d:30:c4:a9:
                    c4:30:35:78:d1:50:c4:26:26:ad:00:e2:4a:00:2f:
                    ab:d4:5b:aa:a1:13:8d:ef:62:dc:42:1c:0c:a7:ec:
                    86:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9F:DE:A5:1C:CB:E9:BB:AC:ED:93:23:04:74:70:D8:05:09:36:D2
            X509v3 Authority Key Identifier:
                keyid:06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/401EA996B5B511EABB640052C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.59.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         86:b1:a2:2c:65:fe:d1:4f:2a:9d:c6:20:11:04:78:86:b8:cb:
         87:11:e6:03:96:a5:2b:3a:9f:f2:90:03:d5:6e:41:1b:b9:f5:
         a1:bb:18:5f:aa:11:f5:b3:13:15:d9:ad:cc:57:8e:d1:9e:99:
         ac:3d:cc:e0:5f:dc:59:36:8b:32:60:ca:33:6d:71:dc:b6:6b:
         c4:6c:71:31:ae:7b:34:82:1a:7e:8d:1b:01:1e:5c:e5:34:82:
         38:7c:5c:d1:ec:e6:eb:c0:3f:75:3d:d1:f3:c6:fe:18:63:3a:
         35:7d:83:51:a2:e6:ce:07:49:3e:22:0a:2c:b6:87:1f:51:74:
         95:18:4a:09:40:ce:35:00:d7:77:29:b3:db:6a:1d:05:e7:51:
         ce:56:d6:96:68:eb:25:94:63:e6:ac:3f:95:37:b0:89:db:69:
         23:58:09:7f:8b:51:e8:0f:74:a5:c4:c3:65:8f:e3:06:fc:55:
         71:13:3b:e7:df:08:a8:4c:91:29:8d:64:4b:cf:65:59:88:50:
         80:f8:9a:d5:b4:94:88:bb:ef:84:5f:aa:4f:c9:5f:13:91:12:
         73:cd:6b:75:14:b1:52:94:71:67:48:5f:bd:71:ed:a9:27:3e:
         7f:35:04:7c:52:de:4a:ba:1e:1e:4c:d8:0a:f8:48:04:c6:29:
         00:9e:ab:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 17:52:36 2026 by rpki-client