This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa
File:                     3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa (raw, json)
Hash identifier:          6TVtRjMo6NdmFhAHDl8M0r+4lRhfrCtY1qBQoykIxG0=
Subject key identifier:   68:11:D7:18:4A:E5:79:CB:E5:8F:CC:8F:47:4D:5F:A6:8E:E4:B4:D7
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       53B21F2294F1A702FEA1C06A8C08A5B8AFA553DA
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa
Signing time:             Wed 19 Nov 2025 16:29:20 +0000
ROA not before:           Wed 19 Nov 2025 16:24:20 +0000
ROA not after:            Wed 18 Nov 2026 16:29:20 +0000
asID:                     51847
IP address blocks:        103.238.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 08:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b2:1f:22:94:f1:a7:02:fe:a1:c0:6a:8c:08:a5:b8:af:a5:53:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Nov 19 16:24:20 2025 GMT
            Not After : Nov 18 16:29:20 2026 GMT
        Subject: CN=6811D7184AE579CBE58FCC8F474D5FA68EE4B4D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:89:e2:64:e7:5a:91:11:9d:ef:3e:e7:fd:
                    20:9d:da:2b:b9:99:9b:8c:16:57:44:ab:9c:f7:1c:
                    95:7c:d0:fe:73:6d:1d:8e:27:42:ce:d7:26:e8:ce:
                    1f:5e:8f:54:14:41:ff:db:e5:e0:9b:2f:b8:75:4e:
                    1c:e3:34:91:7c:e5:e6:dd:86:55:0e:19:f9:b0:32:
                    4e:9f:a5:49:9c:da:7d:ec:f1:fb:87:fe:2c:5d:79:
                    82:81:da:e3:f3:24:1d:43:b0:b1:05:89:c8:bc:0d:
                    3b:cf:bb:bd:9a:66:73:3f:1a:4c:dd:ef:41:39:ec:
                    4f:d0:14:a6:a0:65:c5:f3:65:f3:02:3e:f5:54:0e:
                    b5:3f:e5:a7:c8:24:89:99:4c:60:5d:70:2d:13:92:
                    be:9c:a2:85:6c:d8:a6:c3:95:c0:de:e6:79:00:58:
                    e4:6a:c0:2d:fc:7f:7b:cb:17:42:2c:4f:c3:eb:79:
                    50:60:4c:c6:32:19:dc:9e:bd:09:08:7b:b9:3d:08:
                    5f:80:06:b1:37:80:53:f2:4a:a4:59:5b:98:4b:31:
                    0f:a1:4e:4a:3b:e4:69:8c:0b:74:89:5d:c3:fb:7d:
                    e0:b3:1e:b3:77:e9:4e:73:5b:f2:dc:5c:d8:cf:4b:
                    82:8d:37:8e:c9:be:fa:aa:6f:81:e8:3c:7c:fc:a7:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:11:D7:18:4A:E5:79:CB:E5:8F:CC:8F:47:4D:5F:A6:8E:E4:B4:D7
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:af:4f:0d:21:bc:22:21:53:5c:2b:90:69:f9:67:b5:45:87:
         dd:d2:86:fb:9c:1d:21:98:80:83:c1:80:dd:34:38:dc:ed:b9:
         40:d1:2f:4e:28:04:3b:f5:9b:01:31:43:3f:6c:fa:6f:7f:88:
         04:f8:3e:75:58:97:0b:f2:b8:7d:f5:7d:16:c2:b2:26:a2:de:
         19:32:a5:09:b3:67:a0:14:af:2a:c7:9c:84:c4:7e:ec:5a:aa:
         4a:4b:12:70:71:8f:e8:e3:de:a2:f2:42:7e:21:f4:40:bf:b2:
         b9:9d:1a:32:f1:43:6b:54:e6:be:7f:f8:e3:b5:0d:2a:6d:14:
         f0:55:a6:70:1c:b4:6c:70:36:b6:72:64:b0:d1:d1:e6:fa:50:
         42:b8:d6:ff:9d:b0:07:e0:33:4b:75:66:5b:47:aa:e4:92:92:
         8e:e9:c6:93:1c:25:df:e7:4b:04:6d:72:8d:e4:51:db:c8:4f:
         a0:30:a9:07:9f:00:bd:96:db:41:04:bf:66:14:cc:15:a2:83:
         1b:cc:75:5f:bf:d0:39:c6:a6:f4:66:a8:00:0b:f9:3b:9b:ec:
         88:83:43:eb:01:de:b2:6d:4b:75:75:72:1d:fc:b4:d5:08:cc:
         6a:4d:0a:1c:26:fc:24:8b:7c:6f:34:5f:6a:a9:9a:3c:d5:da:
         6b:bd:53:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:55:50 2025 by rpki-client