This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313534343038.roa
File:                     3130332e3233382e3132382e302f32342d3234203d3e20313534343038.roa (raw, json)
Hash identifier:          /3IEW/L0xD5c+gjtCpGu3f4OnNilISvSgo/f0RfHoCg=
Subject key identifier:   D2:03:8C:A5:E7:D8:07:07:60:00:DB:F9:9B:91:B4:58:15:E7:BE:39
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       188D02A62313112453720CF846A5C9F7D175BE90
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313534343038.roa
Signing time:             Mon 15 Dec 2025 15:28:17 +0000
ROA not before:           Mon 15 Dec 2025 15:23:17 +0000
ROA not after:            Mon 14 Dec 2026 15:28:17 +0000
asID:                     154408
IP address blocks:        103.238.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 03:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8d:02:a6:23:13:11:24:53:72:0c:f8:46:a5:c9:f7:d1:75:be:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Dec 15 15:23:17 2025 GMT
            Not After : Dec 14 15:28:17 2026 GMT
        Subject: CN=D2038CA5E7D807076000DBF99B91B45815E7BE39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:84:bb:9f:6f:b2:c3:c0:6b:e5:25:9f:fc:f4:
                    60:6b:37:ae:1d:bd:75:7f:c8:e7:78:aa:48:29:c8:
                    c0:20:bf:b5:37:dc:8e:79:0c:97:32:c7:42:51:cd:
                    89:29:cc:27:8b:b3:1b:14:1f:8c:19:a4:8b:e3:be:
                    84:32:b9:97:32:52:d1:5c:52:3a:a6:cd:5e:a8:dd:
                    60:37:45:12:ea:07:b8:7f:ee:c5:81:76:f3:94:07:
                    de:f4:87:da:0a:63:6e:09:ca:22:35:65:b6:77:e6:
                    1e:17:f5:14:10:57:0e:35:31:f9:55:17:a5:aa:0d:
                    56:10:56:a3:ec:dd:0f:28:cc:e9:ba:83:52:fa:83:
                    94:ed:22:fb:55:fe:e3:ba:ed:11:61:6e:b4:e0:eb:
                    f8:65:9b:d9:c2:44:8c:98:ee:31:06:15:30:39:ea:
                    7b:88:eb:de:75:39:9b:7f:09:fb:0f:89:da:f4:e0:
                    1f:0c:92:05:bc:76:0d:2e:2a:ad:66:28:50:51:ac:
                    68:2b:d8:ea:f1:d8:60:32:83:bb:fb:27:e5:01:9e:
                    81:91:1e:0b:99:2e:4e:81:7b:c8:41:bc:f4:fe:7c:
                    e4:44:fb:90:13:8b:39:9b:69:64:20:f4:62:2f:62:
                    6e:1b:76:2f:ab:53:ea:85:b9:fa:d6:12:be:6d:45:
                    af:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:03:8C:A5:E7:D8:07:07:60:00:DB:F9:9B:91:B4:58:15:E7:BE:39
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313534343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:cb:89:3f:33:7d:e3:8d:d8:cb:e4:9b:61:6b:16:8b:4f:d1:
         db:e1:c7:5a:2a:8c:cf:5c:5b:19:05:be:ed:e7:c0:01:9e:58:
         f4:40:79:73:6c:2a:94:c2:e6:52:24:50:8f:c2:4a:f9:0d:ec:
         1a:68:6f:b8:82:a9:82:ac:60:5d:a3:a7:97:f9:1d:63:7d:8f:
         4f:f9:f0:0b:7f:f6:ad:6f:47:63:a7:13:a7:14:a2:0d:ab:d2:
         99:5c:ec:d8:68:b1:2f:f3:2c:da:0d:48:73:b6:4c:44:e5:8f:
         3a:e3:84:47:6a:0a:42:4d:41:67:68:2e:91:5b:1e:94:57:87:
         8d:d9:0f:6f:3c:1d:0b:81:a3:34:31:7d:02:4d:39:7a:31:98:
         01:12:cd:b1:a3:2e:c5:a9:5c:08:d1:03:9a:73:dd:19:b6:91:
         d6:e8:fd:07:c9:28:85:0b:4b:ee:af:14:2d:e9:d3:e7:de:6e:
         c1:71:50:cd:ce:09:db:3b:65:3b:01:1e:7a:b9:b7:e1:7b:1e:
         5b:77:49:8a:17:6b:96:52:55:19:09:7e:e7:16:a8:a7:0f:9c:
         56:95:f1:12:65:d4:3b:a3:6e:9a:b4:5f:85:bd:41:70:ef:b9:
         ed:d6:05:19:0b:37:6d:98:c5:03:9c:08:9d:a7:63:b0:fa:90:
         f8:e5:c0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:49:48 2025 by rpki-client