This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa
File:                     3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa (raw, json)
Hash identifier:          UPtxGgoTJeMeU4gNLJxLVxED7CamvppwiFq3NJXyf2E=
Subject key identifier:   24:E2:2E:8D:34:1A:2F:A4:E8:97:39:F0:B0:CA:64:39:58:4C:8B:0B
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       345A558174C9E435D664FA1DD9899CC01E415E1A
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa
Signing time:             Fri 26 Dec 2025 06:10:41 +0000
ROA not before:           Fri 26 Dec 2025 06:05:41 +0000
ROA not after:            Fri 25 Dec 2026 06:10:41 +0000
asID:                     36002
IP address blocks:        103.238.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Jan 2026 22:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5a:55:81:74:c9:e4:35:d6:64:fa:1d:d9:89:9c:c0:1e:41:5e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Dec 26 06:05:41 2025 GMT
            Not After : Dec 25 06:10:41 2026 GMT
        Subject: CN=24E22E8D341A2FA4E89739F0B0CA6439584C8B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8c:e4:27:e7:e5:29:6e:a6:4a:f3:13:1d:81:
                    4c:46:59:7a:4c:f8:92:da:91:aa:cb:69:ef:61:87:
                    41:d6:e6:47:6c:de:71:e2:87:8c:26:c8:76:65:15:
                    19:b9:23:39:d1:44:4b:d8:02:ba:ed:0b:c0:9e:cd:
                    7a:ab:fc:94:70:1b:79:b1:fb:cd:09:57:53:ba:3a:
                    6f:29:a1:cc:e0:52:4e:79:20:bb:07:8e:a1:cd:d8:
                    f6:b9:ed:a1:8d:1d:27:38:27:6a:7d:36:b9:ac:e9:
                    cc:1e:8a:39:5c:8d:9b:03:9c:9e:87:83:a6:06:e3:
                    84:ae:66:85:a2:9e:61:cc:37:0f:ce:89:44:5d:0b:
                    f2:cf:45:5d:fa:ae:9b:80:a4:2e:09:ae:72:5d:79:
                    7d:3f:87:5d:dd:1d:7c:d5:2c:3a:5b:ef:5c:d1:fc:
                    e4:ec:07:f2:2a:39:18:4b:66:e5:a0:ea:15:56:08:
                    4c:86:5f:5e:3a:77:83:d0:a6:80:a5:31:34:04:28:
                    78:45:b4:66:ec:5b:83:f4:3d:56:e3:44:52:f5:d4:
                    3a:22:f7:c5:6b:4a:87:53:d4:e3:63:20:d9:7f:7f:
                    17:2c:fa:c0:fd:b6:24:a4:64:de:7f:7d:5d:bb:d5:
                    bd:ad:19:11:3e:88:e9:1c:2a:b0:78:53:a6:a4:e0:
                    f1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E2:2E:8D:34:1A:2F:A4:E8:97:39:F0:B0:CA:64:39:58:4C:8B:0B
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:8d:7e:e4:b3:8b:9e:88:c6:9d:fc:6b:66:82:2b:74:86:db:
         b5:de:ca:e0:e7:30:b1:59:52:13:be:37:e5:84:51:a7:85:02:
         54:6c:4c:84:54:8b:bd:88:ae:fa:1b:a0:7e:55:4b:e5:3e:97:
         2e:6f:84:70:0e:3c:0a:65:f0:dd:ab:c7:2e:62:a4:cc:ab:8b:
         ff:df:75:59:db:b5:d7:e9:30:d4:20:cd:8c:c9:07:f3:cb:89:
         ab:10:88:b9:76:e8:e5:da:b6:c0:c6:a4:67:d5:74:5f:43:90:
         a2:7b:84:ca:1c:92:be:35:83:00:95:84:56:d7:fb:e2:ca:f5:
         19:b9:67:ea:57:13:30:73:a2:13:7f:92:97:e4:be:34:b9:99:
         04:78:09:2d:c5:c5:92:e0:e4:e8:11:c9:3b:77:93:ba:9b:bb:
         31:33:11:0b:9e:e1:8a:71:f6:d6:fe:03:c7:ff:07:eb:b4:d4:
         69:a4:ae:e5:de:5d:cc:48:8c:3b:0c:de:c7:a7:d0:1c:19:f6:
         43:f1:4f:cf:b0:36:d1:77:74:9b:65:95:c8:95:dc:94:1d:5c:
         ce:ea:75:7b:73:d9:29:1e:71:a5:9d:45:42:f0:86:a1:cd:f9:
         d2:b9:1e:c9:c3:b0:00:f4:f9:88:a1:be:10:aa:5a:a0:0b:bc:
         1b:6a:04:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 07:31:10 2026 by rpki-client