This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870000/0/3230332e3137362e3138392e302f32342d3234203d3e203635353336.roa
File:                     3230332e3137362e3138392e302f32342d3234203d3e203635353336.roa (raw, json)
Hash identifier:          3iDqAc9hY/zLmeYkbqhJdFzcJpDw2TPuxurT2FVTTXs=
Subject key identifier:   E4:05:5B:C4:C4:36:61:12:94:98:33:EB:46:B3:1C:2C:65:94:9A:62
Certificate issuer:       /CN=A918C2870000/serialNumber=B4A66791B91CC52F44FD2E5FE714A9833ED4A51E
Certificate serial:       51ECEC10FDBB85934545A011622DA30CDD91204F
Authority key identifier: B4:A6:67:91:B9:1C:C5:2F:44:FD:2E:5F:E7:14:A9:83:3E:D4:A5:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKZnkbkcxS9E_S5f5xSpgz7UpR4.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A918C2870000/0/3230332e3137362e3138392e302f32342d3234203d3e203635353336.roa
Signing time:             Wed 12 Nov 2025 00:38:39 +0000
ROA not before:           Wed 12 Nov 2025 00:33:39 +0000
ROA not after:            Wed 11 Nov 2026 00:38:39 +0000
asID:                     65536
IP address blocks:        203.176.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ec:ec:10:fd:bb:85:93:45:45:a0:11:62:2d:a3:0c:dd:91:20:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C2870000, serialNumber=B4A66791B91CC52F44FD2E5FE714A9833ED4A51E
        Validity
            Not Before: Nov 12 00:33:39 2025 GMT
            Not After : Nov 11 00:38:39 2026 GMT
        Subject: CN=E4055BC4C4366112949833EB46B31C2C65949A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:08:c5:91:3f:3a:e4:73:35:0e:ff:88:a3:
                    d2:28:62:38:04:29:57:df:60:a4:34:37:ca:17:b0:
                    d0:d6:ec:92:b4:77:10:d8:32:4b:51:e5:7d:ff:fa:
                    3a:81:31:69:d5:cf:29:34:ea:f7:47:b3:0f:bf:a7:
                    24:13:a7:71:0c:98:38:16:f0:65:8f:cc:b5:2f:0d:
                    c5:db:b8:3a:06:3e:d0:cb:02:2d:c5:a2:c6:04:e0:
                    6b:d9:6f:50:21:51:be:a4:e3:06:34:68:cc:37:13:
                    2e:e3:ca:4f:5c:8a:51:07:cb:3a:30:f9:8c:01:cb:
                    4d:8c:e4:5a:97:89:eb:e4:d3:e2:19:9c:27:9b:1e:
                    3e:09:af:de:3a:3e:15:a7:70:d9:e1:94:07:a5:0c:
                    81:6e:50:59:6a:b0:7c:5e:ab:f2:b0:ea:1c:11:77:
                    e7:7d:de:70:fd:93:39:9c:3c:12:3e:cc:cf:2c:7b:
                    fa:57:f4:2a:a9:e5:5e:6a:b1:68:27:66:43:5a:34:
                    00:a1:50:0d:98:8c:49:e8:41:21:e4:63:db:d9:a5:
                    11:bb:01:05:00:7c:67:ff:0d:28:23:ec:f0:b3:40:
                    8a:31:ca:96:c4:6f:69:b5:4e:bc:c1:df:b0:d6:d9:
                    c3:b5:02:ad:6b:ff:93:5a:a8:e5:3f:a4:d9:dc:da:
                    2a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:05:5B:C4:C4:36:61:12:94:98:33:EB:46:B3:1C:2C:65:94:9A:62
            X509v3 Authority Key Identifier:
                keyid:B4:A6:67:91:B9:1C:C5:2F:44:FD:2E:5F:E7:14:A9:83:3E:D4:A5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/B4A66791B91CC52F44FD2E5FE714A9833ED4A51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKZnkbkcxS9E_S5f5xSpgz7UpR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/3230332e3137362e3138392e302f32342d3234203d3e203635353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.176.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:60:d8:39:ea:b1:09:9a:3b:57:d6:7e:f2:5c:ac:fb:65:4e:
         8d:71:ba:c3:e5:be:f6:b3:8d:28:0a:11:ca:ff:43:38:55:68:
         1b:1c:1a:6a:6f:71:08:56:02:cc:e1:da:71:1e:1d:6f:f8:b8:
         d3:31:59:b1:43:10:08:e8:4b:dc:2f:bc:29:94:cf:15:d9:1d:
         c4:2d:bc:e4:12:fe:09:59:4a:80:3c:fe:b1:a2:03:63:89:39:
         a2:1d:c9:0f:1d:fd:bf:f8:99:90:6a:16:15:33:06:5b:e6:7a:
         72:a3:14:17:8b:b4:21:d0:17:8e:89:e1:b8:23:5e:a3:7b:10:
         92:9a:ee:81:d2:c6:60:3a:9b:43:01:b6:b5:a7:26:e1:33:26:
         b4:b0:56:c6:95:d5:1c:7e:8c:ee:3a:2c:c4:8c:62:19:63:f6:
         55:3e:a9:8d:1d:ce:ed:8c:76:2f:f4:92:57:1f:2d:69:f2:ee:
         62:43:cc:14:0c:44:8c:db:f1:8e:0f:54:c9:60:ab:a8:4e:7b:
         84:f8:09:93:cd:39:fc:fb:74:e2:5a:04:cb:54:1b:96:9b:be:
         71:2e:4d:7d:fd:71:4a:c8:3f:f5:90:95:41:50:26:99:be:67:
         5f:b6:ea:4f:57:d8:74:e8:65:be:a5:98:d3:04:c6:93:1b:53:
         6b:6c:18:7f
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUUezsEP27hZNFRaARYi2jDN2RIE8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOEMyODcwMDAwMTEwLwYDVQQFEyhCNEE2Njc5MUI5
MUNDNTJGNDRGRDJFNUZFNzE0QTk4MzNFRDRBNTFFMB4XDTI1MTExMjAwMzMzOVoX
DTI2MTExMTAwMzgzOVowMzExMC8GA1UEAxMoRTQwNTVCQzRDNDM2NjExMjk0OTgz
M0VCNDZCMzFDMkM2NTk0OUE2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALDBCMWRPzrkczUO/4ij0ihiOAQpV99gpDQ3yhew0NbskrR3ENgyS1Hlff/6
OoExadXPKTTq90ezD7+nJBOncQyYOBbwZY/MtS8Nxdu4OgY+0MsCLcWixgTga9lv
UCFRvqTjBjRozDcTLuPKT1yKUQfLOjD5jAHLTYzkWpeJ6+TT4hmcJ5sePgmv3jo+
Fadw2eGUB6UMgW5QWWqwfF6r8rDqHBF3533ecP2TOZw8Ej7Mzyx7+lf0KqnlXmqx
aCdmQ1o0AKFQDZiMSehBIeRj29mlEbsBBQB8Z/8NKCPs8LNAijHKlsRvabVOvMHf
sNbZw7UCrWv/k1qo5T+k2dzaKtUCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBTkBVvE
xDZhEpSYM+tGsxwsZZSaYjAfBgNVHSMEGDAWgBS0pmeRuRzFL0T9Ll/nFKmDPtSl
HjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE4QzI4NzAwMDAvMC9CNEE2Njc5
MUI5MUNDNTJGNDRGRDJFNUZFNzE0QTk4MzNFRDRBNTFFLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi90S1pua2JrY3hT
OUVfUzVmNXhTcGd6N1VwUjQuY2VyMIGOBggrBgEFBQcBCwSBgTB/MH0GCCsGAQUF
BzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MThD
Mjg3MDAwMC8wLzMyMzAzMzJlMzEzNzM2MmUzMTM4MzkyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzNjM1MzUzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy7C9MA0GCSqGSIb3DQEBCwUA
A4IBAQDEYNg56rEJmjtX1n7yXKz7ZU6NcbrD5b72s40oChHK/0M4VWgbHBpqb3EI
VgLM4dpxHh1v+LjTMVmxQxAI6EvcL7wplM8V2R3ELbzkEv4JWUqAPP6xogNjiTmi
HckPHf2/+JmQahYVMwZb5npyoxQXi7Qh0BeOieG4I16jexCSmu6B0sZgOptDAba1
pybhMya0sFbGldUcfozuOizEjGIZY/ZVPqmNHc7tjHYv9JJXHy1p8u5iQ8wUDESM
2/GOD1TJYKuoTnuE+AmTzTn8+3TiWgTLVBuWm75xLk19/XFKyD/1kJVBUCaZvmdf
tupPV9h06GW+pZjTBMaTG1NrbBh/
-----END CERTIFICATE-----
Generated at Wed Dec 17 21:52:14 2025 by rpki-client