This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa
File:                     3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa (raw, json)
Hash identifier:          3XBxA+HuJWdSueJFSLvSDWfHwlrm0e9fb9EGVWHwsCU=
Subject key identifier:   2A:94:75:19:CC:E4:3A:02:E3:56:7E:CC:A0:19:AF:AC:E7:BE:43:55
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       6C16BB6F1CC615645A5E7C22ED8BD5183B6AB5C5
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa
Signing time:             Thu 13 Nov 2025 07:29:20 +0000
ROA not before:           Thu 13 Nov 2025 07:24:20 +0000
ROA not after:            Thu 12 Nov 2026 07:29:20 +0000
asID:                     198100
IP address blocks:        103.238.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:16:bb:6f:1c:c6:15:64:5a:5e:7c:22:ed:8b:d5:18:3b:6a:b5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Nov 13 07:24:20 2025 GMT
            Not After : Nov 12 07:29:20 2026 GMT
        Subject: CN=2A947519CCE43A02E3567ECCA019AFACE7BE4355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:9e:35:53:f8:f9:13:e7:05:11:54:02:be:
                    b3:df:0c:16:46:93:85:ab:81:58:0d:68:2c:0b:f5:
                    b3:1d:9a:a9:c3:0d:a2:da:21:80:ce:c7:6f:63:99:
                    72:07:3b:c6:22:4a:a3:d2:4a:c6:cd:80:cd:6e:b0:
                    00:77:4f:74:3a:dc:af:8e:36:57:9b:d7:78:86:b3:
                    3c:c7:af:56:11:81:a0:a2:0c:69:29:f4:20:95:01:
                    86:d5:49:12:c9:7b:70:95:c4:8e:62:48:e3:d8:d0:
                    94:9b:b2:01:4c:50:ac:bc:f4:ee:58:b6:1d:aa:c2:
                    ad:81:6a:28:9d:eb:c3:d8:10:3f:ec:b9:7d:74:23:
                    3d:1e:04:78:92:24:49:4f:c0:67:82:5c:99:75:78:
                    28:eb:8f:22:40:ec:c9:26:c3:5f:d8:ee:16:74:fd:
                    2f:4c:e0:83:16:e4:56:57:ae:23:ae:08:19:1c:20:
                    d9:fc:6c:37:47:f8:9e:5f:41:d0:fa:3b:bc:2a:9c:
                    08:e6:50:bd:40:96:ce:12:ff:ef:ad:b9:e2:1d:5e:
                    31:f0:18:cd:e0:c8:ed:04:a3:9a:cf:39:e0:02:df:
                    45:49:d8:5c:d6:94:f1:41:a0:c1:64:a7:ab:79:b7:
                    8a:41:07:19:f4:ef:31:8e:0c:24:0f:13:cb:c6:67:
                    8d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:94:75:19:CC:E4:3A:02:E3:56:7E:CC:A0:19:AF:AC:E7:BE:43:55
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:4a:24:e4:3e:7c:6e:28:61:7b:39:8d:d7:47:47:88:cc:50:
         dd:80:34:56:97:e5:29:d8:e0:67:9f:39:12:d0:ed:92:7d:7d:
         38:10:81:3d:73:61:4f:f1:35:f3:28:2e:42:2c:f1:13:b5:96:
         77:70:40:65:da:6b:fc:85:bf:ff:8d:43:b8:2f:41:a0:2d:59:
         22:0d:48:06:fa:70:70:44:0d:e6:70:41:cb:16:d7:f1:2f:93:
         37:16:a5:73:26:02:be:23:11:a0:cc:e0:2f:48:c6:cd:b7:c7:
         06:f1:e9:02:cb:13:58:a8:f3:99:ac:64:80:84:ad:e8:46:ee:
         bf:58:95:bd:1f:22:30:a5:a9:a4:b0:a6:e6:d5:e1:3c:90:0e:
         c3:36:ff:f6:5f:a1:85:f5:89:9a:30:9e:06:78:c2:ee:7c:04:
         8e:1f:f8:62:18:31:5e:3c:43:72:b4:cc:6f:73:b1:89:32:1a:
         19:f0:73:29:d8:57:14:1f:a1:da:38:6d:75:d9:bc:d8:65:47:
         c3:d4:40:e1:45:50:5d:16:9e:a3:0d:26:c6:1c:74:09:a5:1e:
         42:53:b2:f8:4d:9b:72:42:91:41:c9:6d:b6:b3:9c:d1:bb:ec:
         c6:80:7c:36:d2:69:86:e5:da:7c:8e:34:3e:ce:bf:44:74:b7:
         e6:06:50:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:07:36 2025 by rpki-client