This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20323133373131.roa
File:                     3130332e3233382e3132382e302f32342d3234203d3e20323133373131.roa (raw, json)
Hash identifier:          G2Zoq8FyHmareWmxTdUUlZYsXury5Z4QqjB48I3Qp9c=
Subject key identifier:   C3:7B:76:31:90:BC:F7:DB:8F:8C:00:9D:E2:CC:0F:88:89:4C:EC:66
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       5BAE6E0D84208E9200F26899C811852A21541C08
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20323133373131.roa
Signing time:             Sat 15 Nov 2025 11:30:53 +0000
ROA not before:           Sat 15 Nov 2025 11:25:53 +0000
ROA not after:            Sat 14 Nov 2026 11:30:53 +0000
asID:                     213711
IP address blocks:        103.238.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ae:6e:0d:84:20:8e:92:00:f2:68:99:c8:11:85:2a:21:54:1c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Nov 15 11:25:53 2025 GMT
            Not After : Nov 14 11:30:53 2026 GMT
        Subject: CN=C37B763190BCF7DB8F8C009DE2CC0F88894CEC66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8d:1c:6b:ee:71:7f:c5:dc:75:55:68:cc:58:
                    8c:f6:d3:13:c5:ef:f8:4d:6d:46:d2:5b:e3:b4:18:
                    01:11:5d:a6:0e:20:5d:80:8a:55:97:34:18:68:c9:
                    fd:ea:6a:6f:fe:99:b2:8a:9d:f8:d7:eb:82:9b:44:
                    b3:d4:e2:cb:d8:15:69:15:0a:fe:bf:08:45:6e:1d:
                    4b:c8:d7:93:3f:ab:8a:33:95:e3:29:5f:cd:1b:7f:
                    83:5f:7a:15:50:0a:e1:37:2f:e5:ec:9d:99:ec:02:
                    29:ae:57:f0:1c:c9:f6:13:ac:48:a0:c1:64:28:dc:
                    73:03:9e:03:1f:f0:60:23:e4:7c:f7:43:77:64:00:
                    0f:50:20:ce:6c:d3:b6:e3:22:db:d8:32:a4:de:ee:
                    96:20:46:2d:43:15:ec:a0:db:df:7c:37:61:a6:dc:
                    87:04:96:6c:34:e9:7a:ed:e0:df:a0:5a:5b:e5:c7:
                    25:69:07:f8:59:33:73:4c:c6:a2:c0:3c:1d:6f:f2:
                    5a:fc:17:bc:96:53:a1:22:79:bf:bb:9a:a5:21:33:
                    28:c5:ae:1a:42:10:33:08:3e:11:c1:1b:72:01:e6:
                    44:92:f7:d6:73:88:f8:17:ab:e3:00:18:1e:3b:68:
                    9f:8b:61:a4:1d:b7:71:26:35:cb:c7:f3:81:c1:23:
                    9e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7B:76:31:90:BC:F7:DB:8F:8C:00:9D:E2:CC:0F:88:89:4C:EC:66
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20323133373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:dd:2e:03:25:80:1f:b8:08:ec:07:fd:2f:de:6a:a1:ad:4d:
         e9:de:1a:8a:2e:ea:5c:4c:21:5a:58:5f:0e:ee:98:b7:b4:41:
         c6:b0:ef:15:17:0d:c0:a1:e6:e3:b4:65:42:5f:d6:76:38:57:
         73:4f:34:e1:5b:c6:c1:25:9f:92:ea:1f:8b:b9:df:8d:52:a9:
         18:9e:7a:10:0a:dd:96:c2:51:e4:e7:88:37:d3:21:ba:81:af:
         93:92:89:60:e1:6e:16:32:f6:05:86:26:3b:a8:5d:65:cd:e9:
         0f:8d:66:21:28:b1:af:68:69:0e:f1:47:9a:ba:69:9e:7d:a8:
         16:56:86:23:f2:03:d8:8c:83:b1:a8:04:78:90:5c:47:6c:8b:
         b5:02:72:5d:6c:ca:23:78:bc:66:37:f7:14:1a:eb:b3:0c:ea:
         12:1e:23:ed:79:ac:07:9c:5d:a4:e9:3c:05:a1:b4:0b:bd:41:
         f6:50:3e:8c:3e:9b:05:5e:49:11:e7:76:8b:9a:06:4b:5f:c4:
         e4:5b:93:e2:b9:ac:5b:4c:ae:e7:10:e6:d8:49:96:a7:bb:7c:
         eb:60:ca:9e:d2:6e:7c:70:c8:3a:e4:7f:f8:44:bd:3e:f1:56:
         98:54:58:ab:7d:b8:4f:e3:2b:93:35:42:ad:f2:3d:a5:d3:de:
         1f:2b:48:67
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUW65uDYQgjpIA8miZyBGFKiFUHAgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4
NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI1MTExNTExMjU1M1oX
DTI2MTExNDExMzA1M1owMzExMC8GA1UEAxMoQzM3Qjc2MzE5MEJDRjdEQjhGOEMw
MDlERTJDQzBGODg4OTRDRUM2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOSNHGvucX/F3HVVaMxYjPbTE8Xv+E1tRtJb47QYARFdpg4gXYCKVZc0GGjJ
/epqb/6Zsoqd+NfrgptEs9Tiy9gVaRUK/r8IRW4dS8jXkz+rijOV4ylfzRt/g196
FVAK4Tcv5eydmewCKa5X8BzJ9hOsSKDBZCjccwOeAx/wYCPkfPdDd2QAD1AgzmzT
tuMi29gypN7uliBGLUMV7KDb33w3YabchwSWbDTpeu3g36BaW+XHJWkH+Fkzc0zG
osA8HW/yWvwXvJZToSJ5v7uapSEzKMWuGkIQMwg+EcEbcgHmRJL31nOI+Ber4wAY
Hjton4thpB23cSY1y8fzgcEjnscCAwEAAaOCAhcwggITMB0GA1UdDgQWBBTDe3Yx
kLz324+MAJ3izA+IiUzsZjAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64
ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4
QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2
dkhRY0JmTm1ITGV0cU91QUEuY2VyMIGRBggrBgEFBQcBCwSBhDCBgTB/BggrBgEF
BQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFB
NjEzMTAwMDAvMC8zMTMwMzMyZTMyMzMzODJlMzEzMjM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTMzMzczMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+6AMA0GCSqGSIb3DQEB
CwUAA4IBAQB+3S4DJYAfuAjsB/0v3mqhrU3p3hqKLupcTCFaWF8O7pi3tEHGsO8V
Fw3AoebjtGVCX9Z2OFdzTzThW8bBJZ+S6h+Lud+NUqkYnnoQCt2WwlHk54g30yG6
ga+Tkolg4W4WMvYFhiY7qF1lzekPjWYhKLGvaGkO8UeaummefagWVoYj8gPYjIOx
qAR4kFxHbIu1AnJdbMojeLxmN/cUGuuzDOoSHiPteawHnF2k6TwFobQLvUH2UD6M
PpsFXkkR53aLmgZLX8TkW5PiuaxbTK7nEObYSZanu3zrYMqe0m58cMg65H/4RL0+
8VaYVFirfbhP4yuTNUKt8j2l094fK0hn
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:53:34 2025 by rpki-client