This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313338333634.roa
File:                     3130332e3233382e3132382e302f32342d3234203d3e20313338333634.roa (raw, json)
Hash identifier:          jaYCwKUfN1ahphjmuCip8Xd6KyVekTXlh6eiv1lr6wE=
Subject key identifier:   EE:D1:68:B0:A0:5F:30:A9:FB:8E:EC:91:5C:65:3F:99:14:05:83:0D
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       4EEBD94EF0D4458A8336FEEC37879D29E86EE6E0
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313338333634.roa
Signing time:             Fri 16 Jan 2026 17:53:43 +0000
ROA not before:           Fri 16 Jan 2026 17:48:43 +0000
ROA not after:            Fri 15 Jan 2027 17:53:43 +0000
asID:                     138364
IP address blocks:        103.238.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 01:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:eb:d9:4e:f0:d4:45:8a:83:36:fe:ec:37:87:9d:29:e8:6e:e6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Jan 16 17:48:43 2026 GMT
            Not After : Jan 15 17:53:43 2027 GMT
        Subject: CN=EED168B0A05F30A9FB8EEC915C653F991405830D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:60:3d:19:91:4c:f0:a9:f0:ac:1a:be:5d:b1:
                    6d:db:7d:60:a3:a5:93:1a:9f:34:e1:ba:b9:3e:fe:
                    f3:7b:ff:1f:92:ea:d4:b6:31:03:f7:af:7c:07:97:
                    a3:fc:41:21:d4:ae:ae:1d:fb:81:ba:6e:39:4b:fd:
                    7b:29:67:2c:ce:0d:1c:82:62:9a:98:fe:4f:37:9a:
                    eb:58:b8:65:fc:8c:26:79:bf:0f:9c:5b:1a:5b:4f:
                    9d:9e:56:0f:62:22:04:ef:6a:48:e2:67:ab:26:27:
                    5e:9f:8d:2e:80:20:4a:f3:7b:5b:25:98:0a:20:2f:
                    fc:b3:ac:8a:de:97:e3:db:39:3d:f2:73:3f:ed:f9:
                    e9:cd:50:84:23:26:db:f7:67:14:80:f6:02:4f:b4:
                    4e:d4:8c:b2:86:59:f8:cf:b4:1e:5b:9b:21:62:4d:
                    0d:3a:da:7c:6f:62:1d:c9:7a:4f:00:3b:5e:d7:db:
                    b8:f5:a3:a3:8e:23:57:62:1d:af:c6:9f:af:7a:61:
                    b8:64:cf:3f:e6:98:3c:28:4f:34:a3:a0:b1:81:df:
                    cd:bb:ba:57:5d:34:99:86:bf:37:5a:90:8e:a0:1c:
                    13:15:c9:9c:e4:04:1d:d8:b8:35:7c:32:b8:05:bb:
                    51:21:a0:9f:9e:8e:c2:2b:33:c8:e0:92:33:d9:dc:
                    52:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D1:68:B0:A0:5F:30:A9:FB:8E:EC:91:5C:65:3F:99:14:05:83:0D
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313338333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:75:cd:0b:9f:7e:52:db:88:f0:f9:0c:30:70:7a:19:ae:03:
         41:6b:d8:c5:fe:ff:89:31:db:fb:0f:d8:7a:67:f1:28:35:55:
         90:cf:48:7e:0b:4f:ea:08:89:f1:1d:7d:16:bc:d7:f1:3e:43:
         bb:82:a6:3c:2a:36:48:53:a2:b7:2c:24:59:9e:5d:ae:92:ea:
         c1:02:53:72:dd:0b:1a:b5:44:38:77:3c:da:b8:23:df:d9:6f:
         ff:61:72:79:fc:70:45:9e:30:e2:29:e2:9b:0b:06:7e:80:22:
         34:58:6f:91:d7:13:6b:0a:f5:b8:59:e7:fb:79:01:ec:b5:0e:
         60:bd:68:a8:2d:2d:a8:c3:41:58:b4:42:99:2c:92:ae:54:5f:
         4e:61:1e:8d:b8:49:18:65:b5:4c:c6:f9:13:b9:75:e2:26:71:
         1b:ae:38:22:c0:e2:42:4e:a8:43:d0:2f:37:8d:26:e5:c1:76:
         a8:de:1d:2f:5e:d3:17:92:86:cd:da:a1:62:3e:53:75:8b:e9:
         0f:ca:fd:ca:dc:f3:45:9b:32:78:5e:3c:42:84:c4:82:69:dc:
         1e:cc:fa:33:9f:52:45:83:d7:29:1a:9b:e9:d6:1a:4a:d1:3a:
         85:0f:38:70:6a:e4:0b:0d:bf:a3:ea:a9:3c:3d:cd:40:80:84:
         77:58:35:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:18:20 2026 by rpki-client