This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/3136302e3138372e3132352e302f32342d3234203d3e2039383333.roa
File:                     3136302e3138372e3132352e302f32342d3234203d3e2039383333.roa (raw, json)
Hash identifier:          X2xp6uKIsNAWVyJ6WAzD1qj3ichPSAAnt4LFLuMhakA=
Subject key identifier:   30:43:07:47:8D:4C:C0:06:41:57:88:BA:48:69:08:03:45:44:79:64
Certificate issuer:       /CN=A917447B0000/serialNumber=BEC716379E148BA880231B055E3B034159DB8697
Certificate serial:       5E1814D84083FE76DC79EDF3BBC82A93241228AD
Authority key identifier: BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A917447B0000/0/3136302e3138372e3132352e302f32342d3234203d3e2039383333.roa
Signing time:             Fri 05 Dec 2025 11:19:19 +0000
ROA not before:           Fri 05 Dec 2025 11:14:19 +0000
ROA not after:            Fri 04 Dec 2026 11:19:19 +0000
asID:                     9833
IP address blocks:        160.187.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl
                          rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 04:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:18:14:d8:40:83:fe:76:dc:79:ed:f3:bb:c8:2a:93:24:12:28:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917447B0000, serialNumber=BEC716379E148BA880231B055E3B034159DB8697
        Validity
            Not Before: Dec  5 11:14:19 2025 GMT
            Not After : Dec  4 11:19:19 2026 GMT
        Subject: CN=304307478D4CC006415788BA4869080345447964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1d:a7:6e:fa:28:ec:7c:5e:e5:6c:f1:6b:2f:
                    c9:64:4b:a0:a3:37:a0:06:bb:b7:5a:77:0b:d9:b6:
                    58:1b:f4:db:b8:e1:2e:36:77:5b:b2:2f:0b:e1:8f:
                    20:e9:3e:52:ea:ab:be:c3:ae:1f:03:66:0e:84:6a:
                    79:b8:69:f0:8a:8b:c1:08:8b:ac:da:16:65:44:f6:
                    ee:6b:0c:00:7b:3d:9a:fc:59:51:83:eb:07:12:5d:
                    80:a6:42:6f:39:2e:c3:95:b3:aa:f5:fe:a3:a5:57:
                    a6:ad:a6:ed:fa:9c:52:6f:a1:22:52:8b:50:bf:e2:
                    f1:5a:2d:7e:40:cf:f8:6c:0e:f6:f6:70:7e:2a:fa:
                    44:cf:31:43:0a:0d:1c:29:b7:6e:54:2c:e2:a8:26:
                    c2:2d:4b:79:84:98:5b:af:c3:2f:bd:e4:37:db:ec:
                    fa:b1:83:8d:17:4b:5a:49:3b:19:19:fb:9e:84:b0:
                    0e:cf:fd:da:58:44:f7:d3:ae:e6:b0:64:4e:d4:8b:
                    4e:33:a3:af:8a:3d:4a:ca:d2:bf:db:13:9b:64:70:
                    cf:ae:e0:9d:fd:7c:5d:d3:6e:46:31:3d:c8:9a:d1:
                    59:c9:2a:60:38:8a:c6:a9:b3:1e:9e:57:8c:7f:99:
                    3c:20:17:2f:b3:e1:fc:2b:cc:1c:00:41:51:ea:d6:
                    4b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:43:07:47:8D:4C:C0:06:41:57:88:BA:48:69:08:03:45:44:79:64
            X509v3 Authority Key Identifier:
                keyid:BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/3136302e3138372e3132352e302f32342d3234203d3e2039383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:79:02:91:ce:16:b5:58:c8:4c:d0:1d:c7:31:ee:36:85:db:
         0a:cf:a4:71:9b:73:15:e7:51:95:be:be:36:d9:6e:91:80:db:
         3b:30:00:70:3f:6b:a5:bb:49:3c:38:11:b4:f6:20:67:e9:89:
         a9:26:4b:bc:06:13:14:8b:7d:e2:8a:92:d3:a3:98:9d:f5:80:
         82:56:48:21:4b:bc:68:a0:0d:a8:67:98:b9:c9:62:e0:15:90:
         07:e5:63:dc:1c:31:dd:51:8e:c4:dd:b6:a6:69:9a:8c:74:f9:
         c2:7c:9e:f3:c7:31:85:0a:b4:d8:bf:98:23:59:36:a9:d5:ae:
         70:54:f9:5c:89:88:5b:30:44:44:4f:01:82:31:10:ad:f4:43:
         e0:02:9d:2f:49:c6:00:5f:9a:b1:47:a0:57:b0:b2:37:c6:ab:
         bf:c4:c5:4d:16:88:fb:c2:4f:e6:8b:7e:d5:88:27:bf:e7:84:
         76:78:43:ff:45:ec:c1:d6:57:b1:ea:75:c3:6d:f0:1e:cb:1d:
         ad:5e:05:2f:e1:a1:62:05:06:31:5e:49:15:13:c4:c3:24:ae:
         26:a3:d6:58:a8:5e:a5:f9:16:60:35:bd:76:d0:ee:70:bb:fb:
         34:f4:e2:8f:18:16:23:62:84:f6:0a:12:99:51:f2:79:35:68:
         c8:4f:79:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:15:04 2025 by rpki-client