This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa
File:                     3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (raw, json)
Hash identifier:          s58DHhE9SjYhgkw2iMqyvGmhibi6oV792nJ7vjMQEcI=
Subject key identifier:   06:35:98:D1:CD:05:82:E0:53:A5:6E:BA:E6:49:69:D8:6C:98:B0:1F
Certificate issuer:       /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial:       7481B5E4A3FCD93D93A6FF91822E543F32593E6C
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa
Signing time:             Tue 23 Dec 2025 00:26:25 +0000
ROA not before:           Tue 23 Dec 2025 00:21:25 +0000
ROA not after:            Tue 22 Dec 2026 00:26:25 +0000
asID:                     9888
IP address blocks:        103.184.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 02:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:81:b5:e4:a3:fc:d9:3d:93:a6:ff:91:82:2e:54:3f:32:59:3e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75
        Validity
            Not Before: Dec 23 00:21:25 2025 GMT
            Not After : Dec 22 00:26:25 2026 GMT
        Subject: CN=063598D1CD0582E053A56EBAE64969D86C98B01F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d3:ab:2e:76:38:4e:59:67:19:ed:78:17:8a:
                    f5:9c:bf:de:44:29:75:97:f1:aa:7a:6c:b7:52:f6:
                    45:78:23:81:33:9e:c2:16:96:a1:a4:e4:22:68:6f:
                    98:3b:bb:46:9b:44:dc:51:aa:46:74:98:bf:75:4f:
                    90:38:92:4a:05:a8:c0:31:5b:ce:53:62:bd:21:e8:
                    e6:67:96:84:d3:c4:28:ad:ef:b5:0d:d4:e1:ed:90:
                    61:52:92:c6:ed:96:13:6d:2a:f5:f5:20:b1:28:4b:
                    3e:90:0c:02:97:63:1e:65:b8:9b:9f:da:de:3c:a9:
                    12:11:09:18:e5:4c:ef:d8:e3:fd:56:52:d4:eb:a8:
                    d6:da:e7:82:04:12:00:4b:8a:8a:f5:34:1b:b0:f7:
                    62:3b:b7:5b:88:de:a0:27:95:b4:06:44:04:2f:b5:
                    53:2b:eb:e5:5f:2f:0b:9d:2c:d3:c8:69:52:81:47:
                    3c:a0:f8:e1:dd:51:0f:bb:da:55:bd:39:8d:bb:01:
                    b8:5e:51:29:84:82:f0:87:83:d8:f1:77:2c:83:92:
                    b8:f7:70:64:d2:ac:e4:e4:30:4b:21:03:0c:f4:7e:
                    ae:0e:0f:a9:03:70:49:94:d5:49:25:f2:ff:55:4e:
                    36:99:be:c5:82:eb:85:7b:09:7b:50:d2:01:2c:3e:
                    98:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:35:98:D1:CD:05:82:E0:53:A5:6E:BA:E6:49:69:D8:6C:98:B0:1F
            X509v3 Authority Key Identifier:
                keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:e8:8d:4d:f8:8c:8c:37:ab:d7:07:da:64:61:5e:92:01:74:
         13:db:09:d6:4d:fc:42:f3:9a:69:2e:b2:a5:8b:40:f7:f8:a8:
         31:d1:12:ee:45:89:22:5e:27:96:20:f6:0e:ed:99:a9:83:9b:
         ef:7b:3b:29:20:fb:77:db:44:1d:b5:5a:4c:03:c4:a5:ac:96:
         e5:14:14:0d:1d:66:82:f1:2a:d1:f9:49:05:a9:6b:32:69:cb:
         93:7f:d4:79:6f:ef:c0:3e:52:8f:94:3d:2e:87:87:77:4c:bf:
         83:c8:e9:56:90:d3:97:ee:59:5a:d5:28:0e:9a:e3:3c:6c:b5:
         69:34:4c:aa:18:02:ae:bc:08:4e:49:d7:3f:f3:30:7e:88:06:
         d8:42:2e:21:a3:56:f0:7a:5d:3c:50:bc:57:24:5f:b0:55:38:
         0f:db:c6:fa:dc:07:5c:58:ee:0e:5a:0d:3e:6a:7b:a8:52:e5:
         4b:7f:39:dd:e0:8f:00:7d:66:eb:c5:ae:32:cc:46:52:1c:5c:
         59:0f:4f:d1:77:0a:77:d2:da:fa:5d:72:e1:1d:5b:97:ac:09:
         0c:2f:82:59:a0:22:fc:11:cd:2c:49:ab:7a:ed:30:74:c3:36:
         b2:c9:e0:a5:bc:04:01:35:50:78:f6:4e:6f:6b:ac:ed:0a:05:
         cb:ee:70:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:18:09 2025 by rpki-client