This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234372e302f32342d3234203d3e20393739.roa
File:                     31342e3133372e3234372e302f32342d3234203d3e20393739.roa (raw, json)
Hash identifier:          JijQtrikwQFPV3nBE7gVebd8f3AN5KxakYIvZCbezdY=
Subject key identifier:   33:C3:2A:D0:62:69:CB:05:E0:35:DD:06:95:D4:2E:CA:E9:08:EF:E5
Certificate issuer:       /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial:       5CECA71E1B199672D4698D54511D21C585EE9132
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234372e302f32342d3234203d3e20393739.roa
Signing time:             Mon 09 Feb 2026 16:02:29 +0000
ROA not before:           Mon 09 Feb 2026 15:57:29 +0000
ROA not after:            Mon 08 Feb 2027 16:02:29 +0000
asID:                     979
IP address blocks:        14.137.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
                          rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 04:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ec:a7:1e:1b:19:96:72:d4:69:8d:54:51:1d:21:c5:85:ee:91:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
        Validity
            Not Before: Feb  9 15:57:29 2026 GMT
            Not After : Feb  8 16:02:29 2027 GMT
        Subject: CN=33C32AD06269CB05E035DD0695D42ECAE908EFE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8f:d6:ad:fc:76:1e:25:02:40:72:d8:87:00:
                    9c:d5:f2:09:2d:5d:0e:67:31:d1:53:de:21:5d:96:
                    2b:a8:ec:8b:60:89:80:ee:7b:65:97:d9:37:87:1f:
                    05:b7:62:0a:2a:a3:b0:b2:fa:56:e5:86:0a:0c:3f:
                    2a:f3:4e:4d:72:36:cf:de:5c:2e:5e:7f:fe:36:92:
                    1d:b5:58:46:5b:ca:7d:9a:fa:ec:b7:a6:85:2e:98:
                    e8:ae:92:d4:66:a3:68:16:da:95:d1:5b:43:a1:f7:
                    3c:28:03:c8:5a:f6:0e:ef:82:3f:73:d7:5b:53:7d:
                    c8:3f:d1:fe:a2:fb:f6:e2:cc:00:7f:83:b8:17:4e:
                    74:d2:f3:35:5a:98:1b:85:da:1d:61:a8:34:7f:df:
                    74:e2:81:99:b1:4d:c3:1e:14:2f:01:91:00:5c:a9:
                    c8:fd:a1:bf:87:0f:c0:cd:11:d1:d5:9f:02:c7:27:
                    d2:15:53:81:30:33:cf:97:04:34:d6:f7:db:fb:43:
                    d2:0b:6e:33:c8:69:54:1f:cf:17:50:de:db:8f:24:
                    05:2a:4b:3f:70:76:75:2a:b2:8e:18:d0:d9:9a:7c:
                    5c:39:a5:62:0f:42:7b:40:cc:b8:c1:d9:33:40:9c:
                    0e:b8:8a:23:98:ff:f1:b9:c5:8c:0e:ab:6f:10:e6:
                    13:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C3:2A:D0:62:69:CB:05:E0:35:DD:06:95:D4:2E:CA:E9:08:EF:E5
            X509v3 Authority Key Identifier:
                keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234372e302f32342d3234203d3e20393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.137.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:45:ad:6d:35:28:e5:14:cd:d1:fc:ee:0e:dd:20:33:72:52:
         0a:a3:62:05:92:4d:79:8e:71:9b:b9:d5:e3:18:49:0b:b2:e2:
         8f:2f:5d:f9:83:68:8c:32:eb:1b:b9:7d:67:3f:9e:55:9f:63:
         ff:ca:e0:a0:95:13:05:76:8b:e8:2d:b2:02:1e:86:e2:44:34:
         25:0a:6d:9c:eb:cb:74:67:4d:67:3a:58:64:55:9d:bf:db:62:
         0b:77:b0:93:29:36:05:b0:35:8d:5c:7a:d7:fb:02:25:5d:9e:
         0a:2b:23:15:39:e3:62:c0:4a:1e:6f:09:6d:29:c4:6c:e9:4c:
         fd:32:45:34:75:b1:b6:e0:09:08:81:bb:88:57:70:b1:46:6f:
         e5:d6:d6:1c:c7:82:f5:a7:82:a1:bc:82:ef:0e:67:d9:76:4c:
         34:0b:0e:b1:7d:28:e8:78:49:cf:fd:48:83:b6:d1:b1:41:e9:
         05:f7:e7:b7:6b:8b:1e:26:95:04:26:c4:fb:ea:3f:b3:16:04:
         08:32:7f:14:a1:c7:de:a3:fe:6c:71:6f:15:77:93:fc:cb:82:
         ee:e7:55:4f:ba:53:57:38:93:f6:0c:39:c4:9f:09:47:44:dc:
         62:ea:ba:ab:52:d9:e3:ef:05:f1:05:df:6a:a1:b7:aa:cd:32:
         5f:ae:98:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:51:56 2026 by rpki-client