This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3E939EC8902C11EA898EFD7FC4F9AE02.roa
File:                     3E939EC8902C11EA898EFD7FC4F9AE02.roa (raw, json)
Hash identifier:          UuhWNF7ataQadV1hdwDKxlwT9a7iWTOUvT9OXm/c4Jo=
Subject key identifier:   24:E8:EC:65:7E:75:8F:1A:DA:64:72:6B:C1:D3:67:61:75:64:F2:6C
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       3765
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3E939EC8902C11EA898EFD7FC4F9AE02.roa
Signing time:             Fri 28 Nov 2025 14:30:43 +0000
ROA not before:           Fri 28 Nov 2025 14:30:43 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     7715
IP address blocks:        61.19.222.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14181 (0x3765)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Nov 28 14:30:43 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6929b213-a17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:2c:fb:37:0a:ee:1e:ef:bc:15:b4:48:75:
                    e2:b9:c5:5f:3e:f3:11:4d:88:18:98:0e:d8:b9:cd:
                    b0:61:43:bc:2b:c8:7b:c0:7f:e2:15:91:c5:4e:b0:
                    46:24:50:a3:e1:e7:c5:20:6d:3c:01:6c:83:87:8b:
                    44:e0:1e:3c:91:6b:1f:59:7c:4a:22:8b:61:0d:20:
                    14:d9:d4:dd:70:41:0a:e1:c9:d0:94:e5:9c:fb:fe:
                    59:f6:2d:df:3e:4e:23:4d:04:dc:c7:b2:22:13:19:
                    2e:ee:a3:34:cf:e2:c2:16:9f:79:8d:79:a4:f8:b5:
                    dd:39:bd:57:a0:c3:75:91:1f:73:33:68:2a:aa:37:
                    dc:72:fe:d2:c4:f7:f8:fb:cc:95:93:e2:09:32:47:
                    b9:2a:da:c8:e9:fc:a1:46:04:e7:be:36:e0:51:38:
                    fb:c1:c3:10:ff:0a:24:0e:14:67:67:e7:a2:86:f2:
                    ea:36:f2:5e:72:2d:15:06:1c:47:c3:4d:b2:86:a3:
                    e3:00:e8:9c:73:fe:ae:20:b3:8d:ca:f1:66:9f:18:
                    92:69:4e:cd:d7:08:3d:b2:b1:79:23:b3:4b:66:1f:
                    23:87:d3:62:68:7d:26:d6:0b:17:c8:3d:33:26:01:
                    54:60:b9:ec:e4:b1:ea:8d:ae:51:be:7a:b9:df:a1:
                    80:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E8:EC:65:7E:75:8F:1A:DA:64:72:6B:C1:D3:67:61:75:64:F2:6C
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3E939EC8902C11EA898EFD7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.19.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:46:52:05:3e:33:b6:41:c7:75:29:b8:f3:f9:90:bd:ce:18:
         d1:45:d8:0f:1e:02:ef:07:11:05:e5:79:81:2d:b5:11:fb:91:
         f1:f8:ad:8c:75:76:8d:0e:d8:52:24:cb:6e:3f:46:38:4a:5c:
         ce:95:ee:e0:14:bc:e3:5a:03:2f:44:69:0c:44:b1:6e:98:c2:
         74:0c:3b:84:a8:d8:4f:5b:74:bb:0e:de:3a:fa:a5:47:42:c5:
         02:4c:53:e7:00:80:fc:6f:d7:4f:13:5a:f9:0b:39:bc:cd:26:
         6c:29:a3:95:04:60:2d:32:d1:2b:da:25:33:c3:f9:9f:eb:3f:
         74:e1:b2:03:15:93:8a:62:08:c4:7c:4b:7a:0d:b0:3a:c4:80:
         ba:fb:64:7d:94:f0:f6:3d:1e:b5:9b:ba:67:18:5a:47:59:0f:
         17:9b:c2:a4:d3:23:e6:20:3b:82:cd:4b:70:66:52:63:a8:b9:
         28:34:72:3e:6c:ef:a0:f1:98:94:ac:62:62:24:ef:53:bb:cc:
         73:c1:42:4b:1f:3f:7c:9b:a1:3e:31:d2:3f:26:9f:72:c4:f1:
         d2:47:89:e0:9f:94:b1:63:69:99:4e:72:e2:46:66:41:38:f2:
         4b:92:ac:91:b0:ff:f1:5f:c3:d9:25:a9:e7:db:93:45:5c:88:
         bd:6c:dd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----