This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
File:                     3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (raw, json)
Hash identifier:          jVcOrp1Iy42pZaDS6p+KVYqdrmg7VQyHwsaOeViUh90=
Subject key identifier:   DE:53:66:65:21:AF:E1:BF:F5:FD:FF:B8:85:E2:C3:E8:9F:E3:22:74
Certificate issuer:       /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial:       1A661C15976C405D42040F26ADDA571A6AD1682F
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access:      rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
Signing time:             Sat 06 Dec 2025 12:00:01 +0000
ROA not before:           Sat 06 Dec 2025 11:55:01 +0000
ROA not after:            Sat 05 Dec 2026 12:00:01 +0000
asID:                     45163
IP address blocks:        203.147.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
                          rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 13:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:66:1c:15:97:6c:40:5d:42:04:0f:26:ad:da:57:1a:6a:d1:68:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
        Validity
            Not Before: Dec  6 11:55:01 2025 GMT
            Not After : Dec  5 12:00:01 2026 GMT
        Subject: CN=DE53666521AFE1BFF5FDFFB885E2C3E89FE32274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8b:3b:0c:3d:75:44:3c:a2:6a:c1:76:24:33:
                    d8:03:53:ed:28:82:d5:d7:f4:b6:f2:b6:16:b6:7f:
                    fe:44:2d:58:d2:73:6c:fb:14:48:1d:8c:2b:34:f4:
                    0c:98:d4:64:96:7a:5d:ab:7b:16:51:31:1c:c1:63:
                    a9:fb:a8:4d:c8:ca:12:39:c8:8e:87:2b:fa:ec:c9:
                    07:f9:48:74:db:d5:bf:af:be:c9:47:56:1c:9e:64:
                    0f:5c:cf:c4:cc:61:8a:fe:c4:6c:fc:a1:2d:66:8f:
                    f0:94:72:78:5e:76:8c:55:98:ee:2c:0e:66:4d:e6:
                    44:d6:7a:66:af:59:32:2a:d0:41:a7:cb:c3:fc:01:
                    b5:49:ad:49:c9:55:62:7b:9b:53:d7:27:7b:6f:dc:
                    2c:6a:4e:2c:1c:43:2e:73:02:81:4a:00:e3:8d:f5:
                    b0:d0:73:e2:b2:8f:96:2b:e6:94:48:70:69:8c:3c:
                    db:84:ee:86:5b:e0:13:a4:f6:56:d6:76:d6:b4:8e:
                    63:48:9c:09:cb:cd:0a:7a:cb:a4:2e:d3:74:ae:2e:
                    60:60:84:e6:2c:e7:0e:b1:c3:6b:52:86:18:6d:de:
                    c4:c8:e5:be:7f:d6:63:70:fb:d9:51:2e:bf:0c:72:
                    98:4a:c3:0e:74:0e:5a:a6:09:bc:7a:b6:43:70:5f:
                    67:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:53:66:65:21:AF:E1:BF:F5:FD:FF:B8:85:E2:C3:E8:9F:E3:22:74
            X509v3 Authority Key Identifier:
                keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.147.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:0c:8b:bb:a9:b1:05:66:ec:be:aa:04:41:c4:62:1b:f3:35:
         af:d5:76:22:7d:f9:10:28:03:57:b8:9f:d5:3b:39:fa:c5:40:
         75:cf:bb:98:af:ac:60:59:51:8b:74:c0:a0:0c:51:94:15:b6:
         b8:22:16:bd:14:a7:47:9b:cb:71:3e:2f:05:9e:bb:02:e2:df:
         16:4b:22:79:c8:15:93:64:e0:1d:09:89:66:b9:01:2f:f6:57:
         d3:94:64:ac:5f:4f:ca:66:a2:3f:0b:02:7d:c6:43:1d:39:c9:
         ae:91:1f:fe:97:a8:b4:56:2c:d3:7a:27:10:9c:e3:56:59:7c:
         a6:63:3c:04:f1:f0:bd:88:b4:5a:81:01:00:cf:1b:8d:07:06:
         89:88:5c:0f:98:02:87:c2:c6:60:4b:33:3e:65:d5:31:df:14:
         72:e3:d0:d6:f2:bc:3a:39:aa:13:aa:9a:2b:66:c2:59:c7:7d:
         de:50:8d:41:a8:f9:ba:90:26:71:09:da:b5:a1:88:06:09:89:
         1d:89:83:9b:c9:47:b8:0d:3f:1a:92:53:b2:9c:ec:31:36:76:
         2b:35:81:3f:66:dc:cb:11:99:84:47:07:30:8f:9e:d7:19:82:
         ae:4d:38:52:32:d4:15:10:36:0a:95:0e:43:9b:6e:7e:62:37:
         e3:fd:15:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:25:42 2025 by rpki-client