This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/353A7194902C11EA898EFD7FC4F9AE02.roa
File:                     353A7194902C11EA898EFD7FC4F9AE02.roa (raw, json)
Hash identifier:          ySRFmqrcePcv3WbBTT1VOUnuepqlCTpCqkTpELFy1Z4=
Subject key identifier:   31:F6:D4:6A:AB:1D:AF:9E:2B:A6:57:E2:D2:1F:A2:D0:57:E4:40:8F
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       3751
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/353A7194902C11EA898EFD7FC4F9AE02.roa
Signing time:             Fri 28 Nov 2025 14:30:22 +0000
ROA not before:           Fri 28 Nov 2025 14:30:22 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     134695
IP address blocks:        122.155.83.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14161 (0x3751)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Nov 28 14:30:22 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6929b1fe-41d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:da:d0:f7:e7:c0:3a:b8:e7:a3:2d:18:a6:
                    e2:77:6f:d1:2d:9f:2f:48:75:f5:09:65:f0:29:3c:
                    ad:ed:47:92:a0:5a:a4:a1:e5:c4:8c:66:a9:63:fa:
                    c3:c6:c4:d9:76:f1:b3:b7:18:fd:0a:02:da:62:84:
                    89:bb:83:fb:c5:b5:3c:15:5b:92:71:e7:e9:3a:46:
                    5c:8b:35:da:0f:9b:60:75:0c:95:d5:4a:e0:2e:d8:
                    11:c6:e8:74:34:6d:bc:be:9d:43:a7:84:12:39:20:
                    42:4c:73:0f:36:2e:37:0e:39:c0:60:10:2e:07:c4:
                    04:21:39:2f:30:7d:34:77:2b:f9:f0:eb:e0:c4:75:
                    9b:bf:f8:d1:26:3e:8c:7c:0c:31:14:c2:65:55:59:
                    d0:ac:3f:c8:66:a1:3e:33:b8:4e:35:9c:0c:80:57:
                    a1:72:83:0a:4b:30:51:8e:1e:d0:06:9e:8a:83:6d:
                    af:06:26:f4:92:b5:b4:2c:8a:92:fe:ff:14:1b:16:
                    d3:18:37:7d:36:dd:cf:a8:be:aa:d8:b3:94:66:cc:
                    11:49:c9:8b:2c:56:90:5e:c5:1d:43:15:41:5f:97:
                    02:d8:cc:36:bf:62:23:db:f8:75:be:33:bf:58:1f:
                    34:78:bb:12:b3:c5:d4:dc:16:29:4d:e5:24:aa:59:
                    85:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F6:D4:6A:AB:1D:AF:9E:2B:A6:57:E2:D2:1F:A2:D0:57:E4:40:8F
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/353A7194902C11EA898EFD7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.155.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:c4:83:3c:74:51:9f:e3:a1:b8:af:50:bf:99:03:43:de:19:
         49:9a:67:83:b7:44:99:a0:f7:a4:10:4c:77:27:c9:5b:4a:22:
         d0:f8:5b:b6:78:59:bf:b4:77:f9:0f:7e:ed:31:28:b9:f5:80:
         90:a9:75:c5:d0:66:be:1d:2e:58:47:76:d5:c4:8c:bf:1e:ff:
         08:b5:e6:20:b3:be:0c:1a:c3:7d:78:98:55:d0:f1:7d:d6:e1:
         b1:2e:d0:9e:4c:0a:df:50:7c:78:5e:28:91:bb:34:6b:de:2a:
         1e:98:02:09:bf:79:f6:a2:21:7b:76:21:b1:44:dc:0b:80:1c:
         92:2b:ea:5e:41:4c:f5:9e:2f:b5:1e:a0:ea:f9:a8:2b:ff:e1:
         d8:e3:ae:d3:86:7b:23:2f:80:ec:87:0d:32:91:db:5a:ba:71:
         1c:ad:b9:a2:21:78:b2:64:a9:92:f9:a3:36:99:29:78:83:05:
         25:ad:9c:76:c0:21:a5:6e:73:7f:9c:3d:88:7f:41:94:31:f2:
         a7:99:ae:b7:c2:81:68:7f:12:bf:f2:9c:d0:7c:3e:d8:0b:54:
         c5:3e:1b:6b:ae:52:e4:c1:56:e8:04:7d:eb:b8:9a:ab:6c:f0:
         ab:d1:b3:32:06:0e:a7:ad:65:01:d7:63:45:64:94:be:d7:6c:
         51:a7:ef:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:40:40 2025 by rpki-client