This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234372e302f32342d3234203d3e20323036333030.roa
File:                     31342e3133372e3234372e302f32342d3234203d3e20323036333030.roa (raw, json)
Hash identifier:          TQesARHszsgZra+Bxv9haJLLdNxK20Hb5OLe+W3KW0k=
Subject key identifier:   A4:F6:5D:BA:79:D1:D9:1E:A3:73:9B:5E:35:CF:38:66:41:1B:31:9C
Certificate issuer:       /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial:       369B5AA8329DB7BD70045942EAE0F85047783269
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234372e302f32342d3234203d3e20323036333030.roa
Signing time:             Mon 09 Feb 2026 16:02:29 +0000
ROA not before:           Mon 09 Feb 2026 15:57:29 +0000
ROA not after:            Mon 08 Feb 2027 16:02:29 +0000
asID:                     206300
IP address blocks:        14.137.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
                          rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 04:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9b:5a:a8:32:9d:b7:bd:70:04:59:42:ea:e0:f8:50:47:78:32:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
        Validity
            Not Before: Feb  9 15:57:29 2026 GMT
            Not After : Feb  8 16:02:29 2027 GMT
        Subject: CN=A4F65DBA79D1D91EA3739B5E35CF3866411B319C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:d1:76:ff:ca:0b:ee:af:fc:92:92:90:de:
                    56:b9:d8:c5:a5:f5:e0:35:f5:78:fc:d8:cd:36:d3:
                    1d:bc:7d:89:0e:f0:2d:cf:35:f3:50:39:a4:98:a6:
                    c2:93:08:ed:8f:28:cb:9c:7d:c5:64:02:04:c1:38:
                    e3:4e:78:60:2e:e3:54:5b:4e:4a:47:9b:11:b3:a3:
                    e4:a6:9c:58:dd:bd:1d:4b:dc:95:65:03:69:21:73:
                    ce:a5:3a:3b:f2:d1:12:38:6f:55:8c:b7:8a:e7:ab:
                    0d:96:db:12:8e:40:31:eb:01:d7:d9:aa:30:3a:88:
                    75:05:50:aa:27:93:77:1a:7c:56:36:25:77:39:d2:
                    f5:03:2d:48:da:56:a5:88:ce:7f:43:85:a9:08:02:
                    25:dc:c0:c2:24:6f:c9:8b:8c:24:e4:b6:69:bb:6e:
                    4f:24:0a:95:94:ba:b1:0b:02:b4:8a:94:32:bb:c6:
                    4e:5e:d1:a3:f1:e8:95:81:70:ea:5b:61:a5:de:3c:
                    87:db:39:ac:8d:d4:6a:37:78:1b:cf:00:59:81:2b:
                    ec:d1:e2:90:6d:e4:06:95:48:38:a7:bc:de:e0:b6:
                    07:65:fa:53:1a:d5:0b:e6:0a:e1:be:d1:ba:f9:99:
                    72:fd:55:b7:4a:23:63:fe:14:20:16:3a:40:aa:12:
                    a0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F6:5D:BA:79:D1:D9:1E:A3:73:9B:5E:35:CF:38:66:41:1B:31:9C
            X509v3 Authority Key Identifier:
                keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234372e302f32342d3234203d3e20323036333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.137.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:e8:55:c2:95:ac:68:c1:eb:8d:b2:38:03:17:d4:29:31:4b:
         85:0c:94:14:ba:13:94:37:5e:47:56:13:a7:d0:57:20:68:bf:
         f7:64:9a:97:a7:aa:21:06:ca:15:b0:83:6d:81:a7:1e:0f:8b:
         05:02:ee:d5:fa:c2:7d:50:de:61:9c:a8:44:24:e7:9c:c3:6b:
         2b:6b:44:f6:8b:96:e1:b5:2f:cd:f6:f7:54:95:47:14:39:cc:
         3d:71:ed:99:49:a3:1f:1b:6f:2e:b2:c3:36:c8:de:3d:28:15:
         ad:da:d8:b0:c2:d2:43:7f:33:df:25:80:37:0d:3f:8e:36:68:
         37:0e:ce:1e:bc:8d:e1:20:10:5e:ef:fd:8a:e5:38:75:b1:b8:
         69:f3:1b:51:07:37:72:8d:55:24:ba:e5:06:f5:bf:dc:5d:2a:
         a1:54:00:11:04:7e:24:80:be:76:99:83:c4:86:b3:a9:34:62:
         c5:e8:18:53:73:79:5b:49:38:eb:f9:dd:1c:44:81:55:96:40:
         96:fa:15:98:67:ef:0f:e5:88:3b:9e:fb:77:68:fd:a7:d1:73:
         34:8f:7b:29:bf:8f:05:31:2c:72:1d:3b:5c:d6:6f:da:60:5a:
         42:2b:bb:ae:04:6e:ea:a8:10:bb:95:01:3b:a4:b5:18:c6:fe:
         2a:7e:f4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:51:55 2026 by rpki-client