This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/F46970C4354511EBB04ACA53C4F9AE02.roa
File:                     F46970C4354511EBB04ACA53C4F9AE02.roa (raw, json)
Hash identifier:          Ixw1wfrMnsxSEgWAtI2R2mPPZYgkkVTicD9+zVmMvYA=
Subject key identifier:   9F:B2:A7:71:EF:C1:FC:9C:52:3B:18:5D:3E:B3:11:3F:F4:15:30:F0
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       374E
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/F46970C4354511EBB04ACA53C4F9AE02.roa
Signing time:             Fri 28 Nov 2025 14:30:20 +0000
ROA not before:           Fri 28 Nov 2025 14:30:20 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     132866
IP address blocks:        122.155.135.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14158 (0x374e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Nov 28 14:30:20 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6929b1fc-e207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:94:c3:69:5d:83:a4:3c:a1:33:50:43:9c:2f:
                    86:53:6a:2e:d5:c7:b6:a0:0a:c3:0b:61:0e:1e:63:
                    12:a0:23:9c:15:f0:db:e3:fb:bd:d7:19:53:4a:94:
                    22:12:02:dd:fe:42:5b:0a:59:3b:be:1a:8f:1d:26:
                    95:9c:02:df:40:fc:40:5f:c4:ff:2c:48:6c:12:d2:
                    5e:88:92:e9:8d:ab:f9:02:ee:66:1f:e2:cf:dc:25:
                    ba:ff:28:71:32:db:c1:70:cd:b6:5d:0b:0b:54:50:
                    e5:4a:51:f8:aa:a5:cf:1a:30:89:72:67:7c:93:57:
                    cf:00:a9:2e:75:5a:de:cc:02:8d:15:b9:eb:bf:22:
                    0e:7a:ae:91:1f:84:e1:21:14:54:ed:b3:b7:26:ed:
                    85:1a:9c:84:63:33:03:10:5b:5c:c1:36:18:f6:0c:
                    c9:6e:9b:c8:fb:77:f4:4d:33:5f:da:11:9e:9e:71:
                    f2:d6:fb:3c:21:c8:b7:2b:01:ba:04:b1:3d:a2:41:
                    32:28:69:be:c0:af:41:57:9d:45:ef:17:e6:3c:fe:
                    bc:42:4d:a2:80:ec:3e:ba:af:78:c7:63:54:06:c6:
                    81:69:d2:fd:e4:42:ae:9d:af:f7:c8:7c:18:db:4c:
                    5b:ac:b2:f1:f5:3d:c2:06:a9:d0:d0:56:5b:54:b5:
                    02:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B2:A7:71:EF:C1:FC:9C:52:3B:18:5D:3E:B3:11:3F:F4:15:30:F0
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/F46970C4354511EBB04ACA53C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.155.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:c5:28:5b:11:a2:f6:84:f8:65:31:18:7b:01:1b:ac:4f:10:
         75:32:c8:8c:66:09:01:f3:d5:55:3e:ac:4a:7e:0e:2e:cc:e7:
         97:73:5c:c0:f2:06:54:9b:32:79:fe:3f:f8:b5:4e:2e:aa:60:
         c3:14:ca:d3:09:25:af:c2:03:6a:fd:09:49:b4:35:87:ee:20:
         58:57:e6:2f:a8:d4:88:b3:8c:69:a2:90:bf:b0:93:a7:63:c9:
         ba:3a:48:94:bb:d1:6b:89:59:fa:da:28:b1:90:b6:bd:d9:a4:
         7b:f0:0d:d6:94:c0:7e:66:b8:07:2e:5b:71:16:b1:23:d4:dd:
         a7:2d:3a:2e:3b:d8:4c:a1:12:20:f1:8a:93:87:60:80:f2:ae:
         9b:6a:f2:6f:16:c1:fa:a4:6e:1e:ec:d6:63:1d:ce:fc:d3:4f:
         73:fb:0b:6e:44:78:98:86:7c:0a:5a:5c:18:6a:42:0a:13:3f:
         89:4a:6c:7c:5d:e6:d1:c3:b5:93:b4:09:c7:da:cd:c2:3c:f4:
         25:54:7c:60:65:f5:a8:e8:31:ac:27:6d:c0:9f:79:b7:e7:d8:
         71:81:af:fa:86:5f:0d:13:e4:d8:9b:eb:8e:e2:44:af:d1:7c:
         b7:7e:b8:fb:15:b6:a4:61:09:c8:7b:cd:72:58:43:90:15:ce:
         b9:b7:af:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----