This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/3130332e3230382e38342e302f32322d3332203d3e203631313338.roa
File:                     3130332e3230382e38342e302f32322d3332203d3e203631313338.roa (raw, json)
Hash identifier:          FjLx2GQm7zO0Ax8do1MldUsAWWJvi9/fJiwqLS8UXI8=
Subject key identifier:   CE:F5:76:9A:11:B5:31:85:42:D2:4A:DC:9C:68:F5:C2:D9:A4:BA:CB
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       15BB9688A7BF901C8BAF156A67DE7DC15BE95E77
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/3130332e3230382e38342e302f32322d3332203d3e203631313338.roa
Signing time:             Mon 15 Dec 2025 03:40:45 +0000
ROA not before:           Mon 15 Dec 2025 03:35:45 +0000
ROA not after:            Mon 14 Dec 2026 03:40:45 +0000
asID:                     61138
IP address blocks:        103.208.84.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 07:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:bb:96:88:a7:bf:90:1c:8b:af:15:6a:67:de:7d:c1:5b:e9:5e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Dec 15 03:35:45 2025 GMT
            Not After : Dec 14 03:40:45 2026 GMT
        Subject: CN=CEF5769A11B5318542D24ADC9C68F5C2D9A4BACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:0e:6a:f8:50:f9:81:94:9d:d2:6a:4b:25:
                    33:47:0f:e6:1e:cb:6c:7d:f9:6e:2a:3e:7a:b1:0c:
                    cf:e6:64:b2:83:22:bd:33:30:85:a6:a2:e3:3d:cc:
                    19:63:0d:f2:a4:b4:4a:c4:cd:10:ad:08:d2:ab:ae:
                    86:ce:d0:ee:22:ce:44:77:e8:f9:ec:05:6f:0b:c8:
                    92:72:32:0c:81:bd:5f:df:ca:16:e6:8c:42:63:e8:
                    df:a5:a9:db:1e:23:e7:01:fa:95:6c:7d:f0:09:32:
                    53:98:5d:b6:d9:5d:b2:17:8d:75:59:1e:94:f8:ba:
                    31:f0:63:c7:55:16:18:a9:22:d9:27:05:98:bf:a2:
                    1b:c0:10:36:6b:40:3d:85:98:0b:01:56:a9:51:79:
                    4c:8c:b9:09:ab:e2:c4:da:74:fc:33:8e:a3:5e:71:
                    99:f7:58:a6:b6:fb:5a:24:f0:25:be:79:c4:1a:ce:
                    fd:5e:09:69:2c:c8:4b:33:9f:cc:db:e2:f9:50:f3:
                    b9:dc:bd:f7:28:31:74:f3:7d:54:cb:a1:66:66:9e:
                    3a:59:6f:06:7b:9f:b1:b7:56:f1:1f:88:79:a6:8a:
                    88:db:db:f0:37:1a:6a:62:a4:e3:18:ec:59:dc:f9:
                    7a:62:0c:f0:37:a8:27:08:23:15:88:a1:26:1e:32:
                    a6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F5:76:9A:11:B5:31:85:42:D2:4A:DC:9C:68:F5:C2:D9:A4:BA:CB
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/3130332e3230382e38342e302f32322d3332203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:57:b1:25:39:54:37:15:11:31:fc:0f:af:95:c7:59:e9:39:
         4f:b6:fb:0e:1a:7f:09:c7:c4:fa:77:f8:6a:fa:f7:74:21:c3:
         c8:30:2b:82:36:9f:35:12:25:4b:8d:13:78:93:3e:40:c8:f4:
         7d:45:c4:52:1b:46:a7:be:c9:9a:b2:26:d8:0b:2b:f5:0f:f0:
         45:4e:e2:57:1f:87:2a:2c:bb:54:76:8f:6a:62:18:b9:f4:5c:
         8c:ed:bc:c2:c0:db:5d:ba:0a:74:75:e7:a7:5e:a7:6a:6b:fd:
         ff:f4:67:89:9e:a2:fa:6b:d3:e9:ee:ed:4b:5e:79:12:92:f8:
         4a:d5:5d:be:31:d8:76:8f:05:ba:7e:3f:58:a8:ef:64:17:e8:
         69:5b:15:81:76:0e:12:69:be:e9:b2:16:b0:e3:81:6a:f1:5d:
         a9:3d:36:60:80:a6:10:34:2e:78:de:d3:62:e5:4c:96:3a:e8:
         36:98:ac:39:31:f1:14:90:a9:c7:d0:90:5a:c7:23:a3:e2:9d:
         09:aa:d4:36:fb:99:9f:17:8f:c4:5f:f8:13:ae:44:0e:6d:62:
         f3:e0:22:3b:cd:65:96:10:bf:f6:a2:69:b2:55:92:ab:dc:26:
         6a:5f:92:a4:8d:90:d5:cc:65:9a:a0:01:d9:46:cb:f7:13:ca:
         ce:d2:46:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:17:06 2025 by rpki-client