This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/38B031A6902C11EA898EFD7FC4F9AE02.roa
File:                     38B031A6902C11EA898EFD7FC4F9AE02.roa (raw, json)
Hash identifier:          VvE+/mDPV/2YkwwmDvvWutlWIWHFTW8vbdya/8gmrF8=
Subject key identifier:   57:E2:34:DB:E4:FD:C7:05:9D:37:45:9E:63:6A:BF:C5:D5:E0:AA:D4
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       375A
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/38B031A6902C11EA898EFD7FC4F9AE02.roa
Signing time:             Fri 28 Nov 2025 14:30:34 +0000
ROA not before:           Fri 28 Nov 2025 14:30:34 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     18197
IP address blocks:        61.7.194.0/24 maxlen: 24
                          110.78.7.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14170 (0x375a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Nov 28 14:30:34 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6929b20a-69fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:4e:61:03:75:8f:29:8a:04:e4:5d:69:b5:
                    24:f8:40:b2:e5:54:86:40:c7:f9:de:a3:03:e8:8c:
                    56:14:82:1c:c2:77:c7:c7:8e:7a:4b:df:a2:2a:ec:
                    f8:94:ef:43:88:51:e4:9d:2a:5e:f1:21:b0:1c:41:
                    e3:93:67:a0:31:16:57:bf:88:7c:63:72:68:08:96:
                    82:2c:5e:51:b5:56:a1:d4:49:a6:7e:80:86:10:ac:
                    cf:78:ba:13:0b:a1:a2:3d:72:4c:2d:6b:29:fe:7d:
                    5c:f4:df:b0:d7:7f:14:28:47:70:f7:e8:7c:6f:0a:
                    03:73:08:ef:e5:c8:2f:2f:4d:83:21:7a:6a:ee:7e:
                    d6:5e:4d:e7:0e:90:ae:d1:08:f3:15:2c:21:ee:8f:
                    6a:bc:22:7a:19:f3:40:31:77:ce:a9:2f:71:cd:fb:
                    d6:88:a5:e5:6c:dc:6d:be:21:a0:87:b7:e1:90:17:
                    8c:f7:e7:08:69:c4:94:42:de:36:d4:91:45:e1:13:
                    44:80:27:1c:76:77:4f:d4:1a:71:e8:a6:97:c3:c7:
                    46:f5:25:0e:4f:75:c4:02:26:04:b8:b0:08:0d:46:
                    69:fa:8b:72:b4:dd:ac:8f:07:1f:25:8a:a9:a2:4a:
                    4c:6f:9b:07:34:4d:2b:c0:b5:22:5b:5f:87:03:2e:
                    db:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E2:34:DB:E4:FD:C7:05:9D:37:45:9E:63:6A:BF:C5:D5:E0:AA:D4
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/38B031A6902C11EA898EFD7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.7.194.0/24
                  110.78.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:51:be:b5:74:2a:f1:91:3a:76:54:25:b9:d0:53:2a:33:62:
         83:48:39:ed:b2:29:71:e8:66:f6:d4:6c:ff:c3:d0:2e:8a:d7:
         11:a2:98:50:74:e2:b2:95:17:af:69:b3:94:32:f6:bf:25:3f:
         21:47:4d:a3:47:69:88:cc:69:76:9b:96:49:c1:5e:01:2e:17:
         db:0b:a4:5d:25:b9:a3:e5:50:1c:f3:f3:ff:47:b4:d4:59:f8:
         35:82:a4:9b:84:45:49:ed:b2:60:2a:69:d5:17:9b:e6:eb:0f:
         43:6a:c9:94:81:fe:af:fb:ea:53:ae:b4:e9:34:38:bf:35:d0:
         dc:66:71:17:81:3f:8c:6e:48:a9:71:13:1b:4b:3f:47:2d:5d:
         bb:db:07:fc:b8:1a:0c:c8:d8:71:f3:52:9f:7e:ce:56:2d:33:
         cc:cc:ce:12:40:c5:10:e5:37:d2:ea:9c:c9:f6:6d:0d:28:f9:
         cb:56:3e:c0:06:45:05:67:6b:4b:1c:fe:5f:98:c4:79:95:c5:
         cc:13:6c:08:00:58:0e:cb:e3:7c:f0:99:2b:da:0b:7b:c9:8d:
         5b:cf:09:b1:a1:7d:29:c0:35:f3:0e:fe:13:22:29:f5:fa:d0:
         2a:7f:64:6e:c9:fa:32:08:b9:d0:2e:72:8b:47:60:8b:23:1c:
         16:33:84:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----