This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235332e302f32342d3234203d3e20313533393239.roa
File:                     31342e3133372e3235332e302f32342d3234203d3e20313533393239.roa (raw, json)
Hash identifier:          LfUIgUYiQxTJwSybYNLnkYvAWP+55CgFrfvjTRFRLBs=
Subject key identifier:   58:8A:E0:34:1F:81:C9:1F:40:80:DD:03:F4:C9:F7:45:CC:1E:A2:73
Certificate issuer:       /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial:       4EE6F02ACEA3FB25690224E1C6844ED2B32A39B3
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235332e302f32342d3234203d3e20313533393239.roa
Signing time:             Mon 09 Feb 2026 13:36:09 +0000
ROA not before:           Mon 09 Feb 2026 13:31:09 +0000
ROA not after:            Mon 08 Feb 2027 13:36:09 +0000
asID:                     153929
IP address blocks:        14.137.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
                          rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 04:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e6:f0:2a:ce:a3:fb:25:69:02:24:e1:c6:84:4e:d2:b3:2a:39:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
        Validity
            Not Before: Feb  9 13:31:09 2026 GMT
            Not After : Feb  8 13:36:09 2027 GMT
        Subject: CN=588AE0341F81C91F4080DD03F4C9F745CC1EA273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:a9:4e:e7:ca:5c:d0:fc:0a:6d:54:0e:36:
                    46:df:cc:a7:c3:54:c1:64:98:88:f2:35:c8:7c:63:
                    e0:8e:4f:87:65:2d:5a:60:4a:ea:9a:1a:7a:6b:21:
                    34:bc:b5:28:1d:85:d8:84:a2:1a:65:52:22:e9:10:
                    d3:53:3c:fe:cb:3d:b9:77:d2:64:57:16:66:b5:96:
                    da:51:c0:d4:55:1b:12:76:09:78:aa:37:a8:7f:7a:
                    e9:27:71:f0:20:17:83:26:7f:32:51:af:27:1b:64:
                    c1:ca:e7:d6:d7:e3:bc:d1:0f:a4:7e:2d:28:f1:6e:
                    93:78:38:04:78:53:59:55:0a:bf:b4:37:cd:de:4f:
                    2e:b7:2c:12:b3:bd:5e:11:52:29:b4:50:2f:50:5e:
                    c8:a6:89:8e:16:9d:be:5e:83:65:c8:b2:57:7f:0e:
                    3c:9d:90:b1:26:7e:6a:9c:22:aa:7e:6e:fd:d0:f4:
                    08:ca:7f:45:26:62:93:e3:9f:31:1d:6b:d3:2a:50:
                    22:56:00:9a:b7:df:91:db:84:3c:18:b5:09:d7:cc:
                    e3:a6:11:83:70:7c:c5:bc:c9:05:21:f6:9e:82:7c:
                    12:6d:bd:39:00:ad:15:5c:ee:14:a1:7d:0b:8e:47:
                    0f:ff:ea:19:81:ab:9a:45:00:0f:2e:9f:54:ed:d1:
                    62:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8A:E0:34:1F:81:C9:1F:40:80:DD:03:F4:C9:F7:45:CC:1E:A2:73
            X509v3 Authority Key Identifier:
                keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235332e302f32342d3234203d3e20313533393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.137.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:1f:f6:7d:72:93:73:0e:f8:c7:bb:65:6c:e1:69:b9:7f:30:
         72:46:76:93:52:fc:b7:fd:c2:51:15:38:ba:e0:91:24:ce:14:
         d0:b5:5c:44:db:97:64:a9:60:59:29:9a:a8:c5:c5:d3:8f:ac:
         e0:8c:61:66:c4:61:f3:91:94:2f:52:54:57:d0:79:18:95:c7:
         92:fd:e6:78:16:0a:48:df:7f:fb:6f:32:1b:05:fe:1c:7c:4a:
         50:a4:21:e4:87:55:6f:6b:ec:5e:79:26:ee:21:c9:19:5a:8a:
         7b:f4:bf:9b:7b:ed:27:38:ef:69:bd:3f:33:33:29:38:87:18:
         c4:4e:55:69:32:4d:88:8e:b1:65:8d:11:c8:92:ac:80:b1:e3:
         98:bb:f6:53:84:e8:32:f9:2b:80:fd:75:66:e0:d6:4c:ec:97:
         5b:13:d1:d3:c8:ca:61:d9:bd:d0:b6:59:b8:81:09:c0:59:2b:
         1d:8b:3f:ba:9a:21:54:5c:a5:a9:b1:9f:61:69:c5:8e:b6:02:
         87:1b:3a:3b:38:43:38:ea:f3:a1:49:57:25:1e:f7:14:56:a1:
         9d:3f:c9:df:70:b9:6f:72:ec:1e:a2:0b:2b:7b:07:50:bb:78:
         9a:ec:22:ac:b6:d9:3a:a0:b6:1d:a6:5b:a2:97:73:1c:ae:ad:
         9c:0c:51:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:52:15 2026 by rpki-client