This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e20313336373932.roa
File:                     3231362e3134352e3231372e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier:          fFTk8VzTgaxsdImWXG8/dd4ZEXiVSyKY/b0GjCalkjc=
Subject key identifier:   4C:0E:60:FC:8E:98:1B:AB:48:DD:CD:3D:B3:A1:50:0A:08:26:B1:7E
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       7DB43F70E21CE847C364AC88A32F24FF324EC008
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e20313336373932.roa
Signing time:             Tue 04 Nov 2025 23:54:50 +0000
ROA not before:           Tue 04 Nov 2025 23:49:50 +0000
ROA not after:            Tue 03 Nov 2026 23:54:50 +0000
asID:                     136792
IP address blocks:        216.145.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b4:3f:70:e2:1c:e8:47:c3:64:ac:88:a3:2f:24:ff:32:4e:c0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Nov  4 23:49:50 2025 GMT
            Not After : Nov  3 23:54:50 2026 GMT
        Subject: CN=4C0E60FC8E981BAB48DDCD3DB3A1500A0826B17E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c4:84:83:3e:f5:bd:bf:67:aa:0d:11:54:d0:
                    1e:55:81:08:3a:c9:88:90:f8:e3:4d:af:da:94:96:
                    c4:27:2a:26:02:25:4d:a8:45:ce:f4:9d:5d:2b:13:
                    ae:3f:6b:b5:c7:78:d9:d9:d6:76:46:2b:0b:ff:fd:
                    1e:a4:f7:56:30:73:77:e2:b2:1a:7f:2c:0a:71:76:
                    f2:68:f9:06:5b:a3:44:78:4b:be:42:18:8e:39:f0:
                    43:2c:7d:7d:33:c3:0a:e0:16:5b:7e:a6:05:a6:bc:
                    5d:97:c9:b7:b0:89:78:19:09:e0:41:25:4b:99:18:
                    b1:53:1a:98:45:9a:43:8f:7b:bb:0d:a5:f9:98:74:
                    c4:59:c8:10:1d:b9:e0:93:8f:5a:9c:d7:ad:35:5f:
                    c5:44:fe:78:b0:ea:ce:90:b7:76:f2:24:8c:cb:4a:
                    c6:3f:c6:bd:90:de:18:27:cb:a5:bc:52:4f:79:d7:
                    44:f2:5c:00:58:33:d3:ef:ae:9b:29:6d:83:da:b5:
                    bd:99:d6:81:57:55:b3:22:8b:82:47:4c:e1:c2:3b:
                    7e:c0:91:7c:d4:9e:7a:48:00:86:74:da:19:94:fc:
                    12:d3:bb:7c:47:48:f8:fa:5b:0f:d8:27:5a:2a:40:
                    33:3f:51:57:f1:cd:18:53:83:a2:61:ea:e0:a7:bc:
                    e8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0E:60:FC:8E:98:1B:AB:48:DD:CD:3D:B3:A1:50:0A:08:26:B1:7E
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:8d:fe:46:a0:8a:a6:03:78:77:ff:37:54:af:ed:4e:d6:7c:
         39:06:01:80:b4:3a:65:3e:d8:49:fd:bd:d7:ee:01:86:32:a1:
         d7:a7:1f:5b:8b:db:94:34:53:0d:50:5a:71:84:9c:fb:de:ec:
         1c:d0:ba:c5:07:35:2d:01:f8:98:84:03:b9:79:16:46:f1:37:
         a2:0b:44:73:2b:94:c5:7d:a3:01:ab:83:4e:80:23:ac:d7:08:
         89:62:02:ca:a0:0f:ea:c0:59:07:22:e6:9e:8d:6e:5c:36:c3:
         19:22:b2:74:62:70:3b:2c:1e:22:87:06:b2:21:51:2b:9e:b0:
         f4:b4:d8:a3:81:62:59:88:d2:2f:27:2a:4a:3e:a6:cd:82:d5:
         16:40:a7:68:1d:59:1a:e4:bd:3c:8f:41:a0:ec:cb:cb:f1:f3:
         d4:e6:81:5c:35:73:df:7f:58:cf:ac:8d:87:05:74:48:98:43:
         0c:9d:a9:da:6f:6d:f9:52:b5:4c:d1:45:64:22:ec:90:52:a3:
         2c:68:72:d3:f8:6b:8b:15:6b:0e:5c:25:2c:dc:8c:44:5e:f2:
         01:0f:4e:9f:18:84:f7:59:2b:0c:e2:bf:85:0a:81:19:40:44:
         c8:d0:4b:c0:ab:9f:a6:c4:6c:4c:6f:41:9f:73:26:e0:0c:9e:
         2f:0d:0a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:18:23 2025 by rpki-client