This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235312e302f32342d3234203d3e20383334.roa
File:                     31342e3133372e3235312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          ionfPt5il+BuSW6LkvuHZRmsrC8Xm7mCoB4610kzRzQ=
Subject key identifier:   32:58:5B:48:7E:CE:5C:F5:5E:1D:50:E5:B3:F7:03:49:46:36:55:52
Certificate issuer:       /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial:       773752D1AC31A004FCE37012BA70A96FE1CA66F2
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235312e302f32342d3234203d3e20383334.roa
Signing time:             Tue 10 Feb 2026 06:25:36 +0000
ROA not before:           Tue 10 Feb 2026 06:20:36 +0000
ROA not after:            Tue 09 Feb 2027 06:25:36 +0000
asID:                     834
IP address blocks:        14.137.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
                          rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 04:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:37:52:d1:ac:31:a0:04:fc:e3:70:12:ba:70:a9:6f:e1:ca:66:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
        Validity
            Not Before: Feb 10 06:20:36 2026 GMT
            Not After : Feb  9 06:25:36 2027 GMT
        Subject: CN=32585B487ECE5CF55E1D50E5B3F7034946365552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9b:70:4d:89:9f:e9:36:26:1d:95:34:c9:90:
                    12:f1:95:c7:f6:21:34:b3:5e:97:c7:c3:89:9b:57:
                    7a:6c:32:3f:d3:4d:0f:a0:60:bf:52:70:a5:c6:7d:
                    9d:3e:17:2e:12:15:74:dd:45:30:1f:0f:c1:46:fe:
                    d5:61:ea:48:2e:6c:9a:2b:4b:74:94:bf:f1:be:b3:
                    df:bc:22:5d:79:b2:93:79:4f:d8:e6:a1:3d:42:ea:
                    1f:52:08:fc:78:42:2d:27:e1:fe:42:7f:6a:59:6a:
                    a9:da:1f:b2:f4:cc:e9:62:67:fd:27:4f:1f:1d:6d:
                    8f:b3:b9:6c:77:f0:4d:7c:12:47:55:74:0c:33:19:
                    26:36:a8:a9:7d:20:0f:3b:97:9f:97:a9:5e:c1:eb:
                    3c:de:9e:51:61:a0:d4:cb:7d:21:9a:5a:74:ab:43:
                    ad:72:62:04:5d:33:69:d4:6e:99:77:bc:d5:06:0b:
                    08:2f:5f:d2:e6:78:92:1e:57:46:68:8b:2f:c2:a3:
                    84:f2:16:96:ed:6e:40:6c:05:da:6d:ac:e4:ed:47:
                    ef:95:3e:a4:59:74:fe:e0:16:8c:09:4f:69:29:9a:
                    43:f5:41:fa:4e:1f:2d:1b:99:52:2e:b8:b9:b5:16:
                    5a:92:47:f0:77:cc:8f:08:79:29:63:7c:25:4b:a7:
                    d0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:58:5B:48:7E:CE:5C:F5:5E:1D:50:E5:B3:F7:03:49:46:36:55:52
            X509v3 Authority Key Identifier:
                keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.137.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ce:94:b3:62:22:f4:97:2b:94:53:5f:de:e5:f5:8c:a7:1a:
         4f:12:3a:19:6b:8a:3b:3f:19:44:80:27:f6:85:6a:17:84:09:
         32:90:18:eb:31:4a:b4:c8:a3:21:f5:41:85:df:52:cb:78:98:
         f2:5a:0e:70:da:96:e0:be:be:b4:80:35:79:6b:17:6a:ea:86:
         6e:12:d2:31:0c:f0:38:39:e0:da:26:31:e7:ed:b2:fc:3e:ee:
         4f:3e:62:4c:aa:0f:30:1a:21:d0:ea:54:e9:19:d5:9b:22:87:
         47:de:57:80:45:9b:81:cf:c3:66:7b:a9:3e:77:07:96:0f:f4:
         36:42:8e:1c:50:d4:d6:38:c9:ad:16:d7:4c:1a:b9:e2:af:42:
         4a:05:db:6d:c7:db:c0:1b:bd:b3:76:b7:05:59:1d:5f:3f:62:
         9d:5b:95:5a:bd:29:5b:a1:83:0e:f4:40:46:e0:65:ae:69:e7:
         e6:75:ce:6d:88:14:84:c9:f5:6f:b1:3a:a7:85:28:d1:4d:96:
         06:f7:d6:05:28:8f:fa:20:fc:f0:cb:58:71:e3:cf:59:5d:64:
         19:67:dc:8e:a8:77:a3:fc:4d:dd:e5:6b:92:77:9f:e7:31:b0:
         59:f9:e3:25:55:17:e6:46:b0:0b:cb:4a:72:70:9a:69:78:88:
         92:1d:39:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:13 2026 by rpki-client