This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38332e302f32342d3234203d3e20323030303137.roa
File:                     34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (raw, json)
Hash identifier:          bxrme3yCQy0K1fVaXgEiZ2u7es4gexTuZheK4q43s/0=
Subject key identifier:   7F:0B:9C:B7:EE:3C:C4:BC:DE:F4:74:86:38:5D:3D:9D:16:45:69:D1
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       5EF421B412EB4B8906F8BAFD77D50A1BF3FF9389
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38332e302f32342d3234203d3e20323030303137.roa
Signing time:             Thu 13 Nov 2025 07:29:20 +0000
ROA not before:           Thu 13 Nov 2025 07:24:20 +0000
ROA not after:            Thu 12 Nov 2026 07:29:20 +0000
asID:                     200017
IP address blocks:        43.255.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f4:21:b4:12:eb:4b:89:06:f8:ba:fd:77:d5:0a:1b:f3:ff:93:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Nov 13 07:24:20 2025 GMT
            Not After : Nov 12 07:29:20 2026 GMT
        Subject: CN=7F0B9CB7EE3CC4BCDEF47486385D3D9D164569D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:aa:8b:f8:7c:b3:bf:df:9c:59:10:2d:9d:eb:
                    bb:d9:7b:40:43:ca:10:cf:56:a9:6c:78:15:43:06:
                    4c:26:89:87:f7:9e:10:69:b2:75:27:71:3f:42:93:
                    5a:ac:4f:90:a7:0e:b4:69:d2:19:b2:cf:ad:21:e1:
                    54:ee:7e:17:0f:98:5b:fd:85:82:75:1e:a2:c6:36:
                    c7:6e:de:2f:f5:08:af:e6:63:5c:a1:4c:c1:5f:d4:
                    70:0a:2a:be:f6:1a:d1:53:44:7e:72:b0:7c:ac:78:
                    12:e7:5c:86:4d:94:f0:0b:db:58:e6:9b:6b:6a:a9:
                    16:61:3d:bd:34:3b:00:64:78:7e:67:4d:e6:11:8d:
                    45:73:84:f4:5d:33:4f:95:9f:95:45:dc:6f:ac:87:
                    5f:ff:c5:1e:78:a6:45:8a:4b:9c:1c:37:f2:ff:eb:
                    77:c1:f1:48:d2:50:4a:e1:bf:81:14:d6:d7:23:75:
                    3d:37:c5:a1:1a:52:42:04:d7:dd:5c:a9:1c:93:71:
                    33:a5:f9:d0:53:c2:8f:42:20:54:c3:3e:ac:13:ff:
                    f2:05:d2:c0:f3:ae:df:42:57:1e:08:de:c2:ee:d5:
                    cb:2b:87:eb:53:cf:a7:6d:22:61:90:80:58:fb:8a:
                    2c:85:07:a0:52:43:de:e9:d6:d8:5e:52:7a:04:82:
                    09:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0B:9C:B7:EE:3C:C4:BC:DE:F4:74:86:38:5D:3D:9D:16:45:69:D1
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38332e302f32342d3234203d3e20323030303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:75:a0:e9:d8:b7:a6:de:8b:31:c5:1d:0a:d9:67:da:6d:e9:
         31:4d:82:a0:0a:02:15:bc:74:df:a1:48:5a:22:8d:bc:05:fc:
         67:dc:0f:63:77:aa:0b:d7:88:03:cd:9c:90:7a:1e:aa:6c:94:
         73:3c:5e:cd:d9:3e:1c:a3:4d:90:fa:41:98:32:b0:fd:c3:e4:
         23:76:bc:b1:bb:a8:a1:55:f0:84:46:86:6e:38:01:0d:8f:b6:
         ca:55:33:64:f7:a8:61:e8:9f:57:a4:e5:e4:33:6c:8c:7c:88:
         3d:16:dc:a0:a9:1d:6a:45:39:b7:b6:c2:2a:84:0a:cf:63:4e:
         78:20:4e:43:ad:59:d3:1d:32:7a:45:ef:a2:f5:cd:4b:b2:df:
         c1:cf:b2:6a:af:56:61:19:f3:b2:fb:dc:90:16:1e:67:88:b2:
         b2:ff:b0:31:a0:96:77:d7:c5:a9:ea:92:a1:4d:42:1c:15:f7:
         91:7b:b8:ba:b1:13:c3:eb:c4:de:86:8e:f8:30:93:37:48:00:
         24:47:96:c9:d0:16:e2:0a:11:3f:d1:a1:f1:cd:b5:2c:1a:7f:
         6f:45:da:97:35:c5:ce:75:99:63:c3:bd:f4:63:f2:67:0d:c2:
         3e:f5:b4:3a:f1:ce:f7:27:d9:bd:33:22:36:ee:5e:ef:bb:29:
         33:27:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:51:04 2025 by rpki-client