This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/39F7B4EE902C11EA898EFD7FC4F9AE02.roa
File:                     39F7B4EE902C11EA898EFD7FC4F9AE02.roa (raw, json)
Hash identifier:          ykljmTM/I9l9FWDS1Bg+CmZhH5ju4Wd/tp6dxcRv8Qw=
Subject key identifier:   F0:98:15:FF:BA:49:0A:E1:38:0A:C0:5B:C1:27:01:B1:D1:22:36:08
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       375D
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/39F7B4EE902C11EA898EFD7FC4F9AE02.roa
Signing time:             Fri 28 Nov 2025 14:30:36 +0000
ROA not before:           Fri 28 Nov 2025 14:30:36 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     24042
IP address blocks:        61.19.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14173 (0x375d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Nov 28 14:30:36 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6929b20c-c825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:6a:47:26:2f:ca:47:d4:1e:46:47:b4:20:
                    ce:65:63:5b:69:d2:9e:10:03:c5:d3:d4:8c:d6:50:
                    3d:09:b0:b8:76:ba:5b:48:bd:e8:d8:ba:c0:9f:74:
                    5c:30:3c:6b:d2:07:19:64:27:9f:ec:2d:63:a2:39:
                    2d:86:ad:e1:5c:c2:43:c7:56:54:7f:47:29:eb:49:
                    f8:a8:d4:b7:80:79:3c:42:f4:7d:55:cb:6b:9c:88:
                    ed:32:76:7d:07:20:c7:f0:26:e4:47:af:74:49:d3:
                    b6:bb:e2:20:d5:78:03:ae:ab:f0:94:ed:56:8d:6c:
                    ec:02:51:a7:89:8a:f4:7a:d8:df:b7:43:fd:48:2b:
                    5c:fc:06:1e:bd:71:fc:cd:c1:4d:9c:40:59:2b:07:
                    82:a8:7d:62:e6:08:10:20:f3:e6:2f:9d:ae:53:89:
                    99:ef:f4:9e:7a:e4:eb:31:56:56:e9:0e:f0:4b:09:
                    da:6a:c8:41:74:26:ff:b7:ad:aa:9e:62:19:6f:42:
                    bf:12:0a:64:e0:70:9c:c4:ed:56:d9:2e:fe:00:2c:
                    ce:91:86:9d:c4:82:0e:7c:35:23:74:be:16:ac:2b:
                    37:74:50:12:09:3a:98:4a:6c:c4:d0:cf:71:64:58:
                    4a:b1:c9:b1:f5:18:c8:72:b7:74:ec:b1:1e:b1:12:
                    71:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:98:15:FF:BA:49:0A:E1:38:0A:C0:5B:C1:27:01:B1:D1:22:36:08
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/39F7B4EE902C11EA898EFD7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.19.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:b7:8f:98:49:93:67:ab:b1:42:fe:32:89:d1:4c:a7:72:40:
         8a:6f:93:bb:2b:74:98:aa:f7:b0:61:a1:76:8d:1b:83:2b:f6:
         18:1e:e7:1f:1d:5c:80:d6:f2:5d:53:f6:c5:95:e5:a4:27:be:
         21:2c:91:8f:78:58:ea:d0:33:04:8c:46:9d:8d:ec:c7:59:0f:
         e8:bb:98:75:c1:70:b6:e1:30:f1:50:2b:bd:41:db:8a:7e:39:
         83:d5:03:af:fe:3d:00:06:be:43:02:2d:bd:9d:03:a6:06:c8:
         94:7c:55:c7:01:41:80:9f:9e:70:fc:e3:b4:5b:a0:b0:fb:2f:
         1f:1c:ef:4e:53:ed:3e:eb:eb:66:10:89:52:51:4e:44:5d:20:
         98:fd:21:2f:4d:c5:70:87:a8:f8:98:58:52:46:36:3c:39:81:
         40:35:97:cf:62:d3:d8:ff:a4:83:56:52:fd:b9:2d:9e:1b:96:
         8f:1d:06:b8:20:0e:84:d1:97:ba:ae:60:df:54:de:dd:66:81:
         06:22:3b:8a:76:b3:dd:47:aa:29:4e:a4:8c:20:3e:f4:14:fa:
         f9:7f:7f:e1:de:4e:ad:28:29:61:4f:b9:f6:be:55:a6:04:41:
         6c:54:49:78:6e:4f:25:93:fe:03:7c:7b:d6:46:7f:27:91:36:
         83:2a:a1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----