This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38322e302f32342d3234203d3e20383334.roa
File:                     34332e3235352e38322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          icPb5M6Y/CPwkJET9vdKSzs0dBOYlGKaymEwUa2ujW8=
Subject key identifier:   31:FA:34:C5:AF:89:40:88:2F:11:51:05:96:D8:31:4E:33:8E:EA:8C
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       067C9F6DFD62C070EAFE1FE02BD3ACBD7BBEB081
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38322e302f32342d3234203d3e20383334.roa
Signing time:             Thu 15 Jan 2026 06:45:26 +0000
ROA not before:           Thu 15 Jan 2026 06:40:26 +0000
ROA not after:            Thu 14 Jan 2027 06:45:26 +0000
asID:                     834
IP address blocks:        43.255.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 01:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7c:9f:6d:fd:62:c0:70:ea:fe:1f:e0:2b:d3:ac:bd:7b:be:b0:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Jan 15 06:40:26 2026 GMT
            Not After : Jan 14 06:45:26 2027 GMT
        Subject: CN=31FA34C5AF8940882F11510596D8314E338EEA8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:b4:f9:69:ee:49:5d:1f:8e:9f:ed:25:43:
                    f4:43:4f:a8:9f:ce:4f:ec:18:2d:47:a0:08:93:8b:
                    a4:32:f0:59:4c:2d:7e:f4:e2:45:c7:4d:fe:ea:eb:
                    16:ce:6d:3d:65:6a:81:42:9e:b3:f0:20:81:66:e6:
                    ac:ff:f1:45:7b:37:95:06:1d:fe:7e:72:e5:38:60:
                    bd:4d:cc:28:e4:db:53:4b:61:ce:3a:ea:60:05:87:
                    8d:49:f6:67:69:97:e9:d4:f5:51:d8:47:f5:c9:a4:
                    ee:03:f9:e7:f0:7a:4a:42:84:41:3c:ec:20:66:84:
                    63:55:79:0e:10:20:2b:ef:3b:05:8f:da:01:d5:2d:
                    6b:a3:0a:cf:fc:41:ed:02:b5:0e:08:83:7b:f4:8c:
                    a3:77:37:81:cc:73:63:f3:1d:22:a5:7a:28:ff:af:
                    34:84:5b:87:21:21:f4:5a:fe:48:cc:3e:d9:f8:bf:
                    90:d6:22:89:66:b3:fb:b8:f2:9a:fb:1b:f1:af:4b:
                    a5:78:9d:21:d8:d0:0b:1d:e4:c5:cc:b8:51:fd:d7:
                    22:c2:94:73:37:8d:18:31:6e:00:bf:c7:9f:57:70:
                    4e:e1:65:ce:ad:ef:31:91:d8:3c:5e:72:d9:86:58:
                    5b:cb:bb:e3:51:07:4d:61:23:b3:8f:7e:9b:78:d0:
                    cc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FA:34:C5:AF:89:40:88:2F:11:51:05:96:D8:31:4E:33:8E:EA:8C
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:66:0b:db:2a:d0:8f:d5:9e:16:5d:c1:ed:f0:97:c1:ec:41:
         f7:07:10:ce:e5:1f:12:46:bb:61:74:68:c2:5a:20:83:4c:fc:
         9d:c2:06:74:03:12:84:1f:52:9f:8d:f9:77:cf:5a:1e:3d:cb:
         50:2b:5c:77:3f:b6:e2:61:5a:ac:0a:9c:0a:f0:e7:bc:11:61:
         cb:cf:3c:66:c2:d2:75:9c:11:2e:6b:40:ba:8c:43:eb:56:42:
         2b:24:24:70:4d:85:36:05:9c:55:ca:2e:5a:6e:c0:ba:b9:0d:
         78:45:98:4e:28:3c:52:59:21:3b:d9:f8:9b:b6:24:91:43:d7:
         f9:86:65:a8:c6:42:ed:bd:2b:ad:de:16:35:dc:28:f2:02:f4:
         27:7d:5d:f4:01:85:59:20:21:5b:50:56:8e:ce:4a:f2:a6:3e:
         43:b5:b2:52:75:ec:19:d9:13:eb:1f:dc:d4:8d:57:d1:d1:8b:
         f6:a1:a6:55:a1:49:f4:90:e1:1c:24:a5:58:75:7b:1c:ec:85:
         47:63:90:7a:10:92:d1:46:d1:bb:92:be:7a:a4:ac:75:7e:c3:
         e0:7c:16:1e:8a:a1:7d:f6:6d:07:d3:fa:b2:b0:6e:26:13:1c:
         b5:b7:7e:3b:f3:2b:32:55:f0:11:21:14:95:3d:ae:db:b2:7b:
         f8:2d:26:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:18:57 2026 by rpki-client