This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa
File:                     3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (raw, json)
Hash identifier:          4M3Gj7VtwtPss7dq7bEuNaNtbKXrLCHIYjSN8LGXjK0=
Subject key identifier:   2F:40:FE:F3:BE:13:4A:3D:8E:69:F6:87:BC:8D:62:C9:DB:93:4F:1D
Certificate issuer:       /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial:       1F5E004158A642CA9E09D0FB98FB847C79C2E529
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa
Signing time:             Wed 17 Dec 2025 02:26:21 +0000
ROA not before:           Wed 17 Dec 2025 02:21:21 +0000
ROA not after:            Wed 16 Dec 2026 02:26:21 +0000
asID:                     9888
IP address blocks:        103.160.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 18:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5e:00:41:58:a6:42:ca:9e:09:d0:fb:98:fb:84:7c:79:c2:e5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
        Validity
            Not Before: Dec 17 02:21:21 2025 GMT
            Not After : Dec 16 02:26:21 2026 GMT
        Subject: CN=2F40FEF3BE134A3D8E69F687BC8D62C9DB934F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b9:21:f7:72:c3:9b:89:37:5e:bd:60:f7:2d:
                    63:0c:fe:aa:9c:f2:71:a5:7e:2e:bc:be:31:f7:8f:
                    67:0a:f3:94:7e:61:61:27:e6:90:bc:a1:a8:97:85:
                    96:59:bb:dc:bd:d1:80:bf:de:ce:46:84:ae:45:2e:
                    b7:b2:a7:47:9d:13:7f:95:38:ec:ab:e1:73:12:d2:
                    07:b8:02:40:59:0d:a1:d1:de:63:7f:42:cf:6c:97:
                    cd:cb:48:4d:58:a9:29:7f:cd:65:fd:b0:9e:07:62:
                    1c:0f:7d:10:e5:f4:10:16:24:5c:b8:ca:ee:54:86:
                    45:01:04:4c:ea:ce:5a:6b:21:66:9a:cf:74:c5:53:
                    d8:c3:f3:1f:f9:96:3e:6f:94:57:2d:1a:34:63:df:
                    5a:d1:57:51:0d:a0:23:30:3f:65:b2:ea:03:27:65:
                    7a:e4:44:2c:07:e0:47:0a:41:57:7d:63:e7:61:96:
                    30:1a:00:f9:ae:f0:32:9f:b0:c0:f5:76:44:d1:d9:
                    5e:1b:30:bd:4e:e9:5a:73:39:7f:07:c9:b2:c7:4f:
                    a3:58:e7:d2:da:b6:05:e8:4d:6e:dd:f4:45:75:ed:
                    1e:50:02:00:43:94:59:68:b9:56:fc:52:55:e5:62:
                    c0:76:9c:76:fe:11:c7:13:32:41:81:4b:5c:4c:b3:
                    b5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:40:FE:F3:BE:13:4A:3D:8E:69:F6:87:BC:8D:62:C9:DB:93:4F:1D
            X509v3 Authority Key Identifier:
                keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:21:4e:a8:20:fb:bb:5b:59:af:ea:63:fb:42:b5:ad:22:b6:
         c9:12:17:eb:82:bc:88:6d:af:08:e0:e3:02:1e:58:5d:c0:a6:
         8e:f7:47:7e:dc:35:22:8f:22:34:3b:81:30:8e:34:e0:91:ed:
         ed:95:a9:ee:6a:f2:96:c6:5f:bb:60:41:da:d9:b9:75:54:4b:
         38:52:9f:00:49:72:73:1e:ae:3f:99:5d:01:1f:80:f7:36:8b:
         5a:dc:84:c8:d3:5b:09:a7:4d:f0:0b:fe:11:b8:f2:57:be:64:
         c0:05:43:57:cc:ce:32:86:b0:e9:25:37:18:37:e5:37:e6:bb:
         3b:8d:54:ff:34:1c:09:ca:34:43:f6:40:db:ff:44:5f:5e:31:
         29:f9:25:d9:b7:ee:f6:f4:95:c7:fa:e7:3c:ee:52:6f:dc:81:
         ef:aa:e2:f2:28:da:55:3b:77:90:e0:b0:98:63:1a:90:9d:18:
         7c:51:51:68:3d:31:f2:b4:08:01:93:31:19:be:48:34:18:1a:
         ca:a4:ba:ab:43:88:48:d6:cf:4b:8b:9d:36:83:31:58:7f:9b:
         b8:56:77:15:e4:ef:dc:e9:88:e9:9d:3a:89:a2:12:41:59:27:
         29:09:13:d4:2c:d3:58:eb:df:89:e7:3d:b3:0c:17:80:83:ba:
         53:ad:f3:6c
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUH14AQVimQsqeCdD7mPuEfHnC5SkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTA1MzAwMDAwMTEwLwYDVQQFEygzMDM1NkVGNDZE
NTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwMB4XDTI1MTIxNzAyMjEyMVoX
DTI2MTIxNjAyMjYyMVowMzExMC8GA1UEAxMoMkY0MEZFRjNCRTEzNEEzRDhFNjlG
Njg3QkM4RDYyQzlEQjkzNEYxRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALW5Ifdyw5uJN169YPctYwz+qpzycaV+Lry+MfePZwrzlH5hYSfmkLyhqJeF
llm73L3RgL/ezkaErkUut7KnR50Tf5U47KvhcxLSB7gCQFkNodHeY39Cz2yXzctI
TVipKX/NZf2wngdiHA99EOX0EBYkXLjK7lSGRQEETOrOWmshZprPdMVT2MPzH/mW
Pm+UVy0aNGPfWtFXUQ2gIzA/ZbLqAydleuRELAfgRwpBV31j52GWMBoA+a7wMp+w
wPV2RNHZXhswvU7pWnM5fwfJssdPo1jn0tq2BehNbt30RXXtHlACAEOUWWi5VvxS
VeViwHacdv4RxxMyQYFLXEyztX0CAwEAAaOCAhEwggINMB0GA1UdDgQWBBQvQP7z
vhNKPY5p9oe8jWLJ25NPHTAfBgNVHSMEGDAWgBQwNW70bVlNpXx2lwERg6z/4EYT
4DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMC8zMDM1NkVG
NDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NRFZ1OUcxWlRh
VjhkcGNCRVlPc18tQkdFLUEuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH
MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1
MzAwMDAwLzAvMzEzMDMzMmUzMTM2MzAyZTMxMzEzNjJlMzAyZjMyMzMyZDMyMzQy
MDNkM2UyMDM5MzgzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6B0MA0GCSqGSIb3DQEBCwUAA4IB
AQA4IU6oIPu7W1mv6mP7QrWtIrbJEhfrgryIba8I4OMCHlhdwKaO90d+3DUijyI0
O4EwjjTgke3tlanuavKWxl+7YEHa2bl1VEs4Up8ASXJzHq4/mV0BH4D3Nota3ITI
01sJp03wC/4RuPJXvmTABUNXzM4yhrDpJTcYN+U35rs7jVT/NBwJyjRD9kDb/0Rf
XjEp+SXZt+729JXH+uc87lJv3IHvquLyKNpVO3eQ4LCYYxqQnRh8UVFoPTHytAgB
kzEZvkg0GBrKpLqrQ4hI1s9Li502gzFYf5u4VncV5O/c6YjpnTqJohJBWScpCRPU
LNNY69+J5z2zDBeAg7pTrfNs
-----END CERTIFICATE-----
Generated at Mon Dec 22 03:51:43 2025 by rpki-client