This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/101569A41D3111EB9ED04852C4F9AE02.roa
File:                     101569A41D3111EB9ED04852C4F9AE02.roa (raw, json)
Hash identifier:          oMO8g+gWP/j4nQfNLWqjVngR4rvtEIlMOGFODn26dCk=
Subject key identifier:   69:25:A8:00:56:02:AF:86:E6:9E:01:63:6A:BA:87:BC:B4:C5:DF:CD
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       3768
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/101569A41D3111EB9ED04852C4F9AE02.roa
Signing time:             Fri 28 Nov 2025 14:30:46 +0000
ROA not before:           Fri 28 Nov 2025 14:30:46 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     9835
IP address blocks:        202.139.202.0/24 maxlen: 24
                          202.139.203.0/24 maxlen: 24
                          2001:c38:90a1::/48 maxlen: 48
                          2001:c38:90a3::/48 maxlen: 48
                          2001:c38:90a4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14184 (0x3768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Nov 28 14:30:46 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6929b216-0585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:54:8e:69:bb:0a:b8:83:60:96:ed:2d:22:8e:
                    34:54:41:3f:a5:17:93:f2:ac:47:07:a4:98:4f:8d:
                    a2:d4:8c:9d:03:11:9f:ab:ea:e1:9b:e8:f2:e5:f7:
                    8a:92:4b:a5:b4:85:55:c3:a1:89:fb:4d:b6:9a:a5:
                    b2:b5:19:41:63:0f:db:70:2b:ea:b7:ee:ad:e7:f9:
                    45:ef:b9:39:3c:af:69:b7:97:7d:4f:48:bb:c1:c3:
                    7d:5f:b6:6a:6e:b4:c7:0f:54:c5:05:c4:f3:07:bb:
                    a0:4c:23:17:c4:29:90:18:8a:3e:57:f6:5b:b3:f1:
                    cf:8c:80:52:22:a7:eb:4f:5b:92:94:49:40:c8:1a:
                    88:23:45:ae:58:91:af:b2:48:b3:1e:15:f3:37:64:
                    8d:63:eb:59:16:ba:89:47:26:f9:dc:91:0e:0f:2c:
                    9a:ca:26:68:08:6c:02:cb:0a:82:d5:75:fb:d9:db:
                    08:02:37:bd:16:b0:29:10:7e:61:2c:12:83:22:e0:
                    80:ef:7d:36:ce:70:95:49:ed:50:c1:e7:62:f3:90:
                    52:52:b8:72:d7:3a:48:57:ef:65:06:4c:01:4a:e2:
                    a5:dd:0a:4e:43:08:af:13:10:18:84:9e:8b:12:7f:
                    e9:28:01:02:8a:a7:f7:82:ad:0d:a6:c1:5d:cd:d9:
                    2a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:25:A8:00:56:02:AF:86:E6:9E:01:63:6A:BA:87:BC:B4:C5:DF:CD
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/101569A41D3111EB9ED04852C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.139.202.0/23
                IPv6:
                  2001:c38:90a1::/48
                  2001:c38:90a3::-2001:c38:90a4:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         44:8c:b0:85:eb:79:d0:50:50:fa:b1:97:03:51:4c:38:75:b1:
         68:7b:8f:69:61:ab:83:b6:26:33:7e:b3:21:0d:c9:aa:da:2b:
         4c:04:d9:f0:a7:6d:d1:e7:f9:1c:37:29:6d:20:13:21:c9:1b:
         9c:6c:42:92:42:ed:1b:4a:36:cb:3f:45:8a:a1:b2:19:15:3e:
         ac:e1:2f:9d:c4:5d:ce:64:27:d1:5d:c9:37:bc:0f:c5:85:c4:
         08:59:6d:d4:c3:ae:ac:44:07:34:8b:7b:34:58:98:75:71:f5:
         49:b1:77:dc:e6:c5:6c:66:6a:2a:56:6b:70:17:b6:0d:cf:c2:
         20:19:de:83:d3:cb:41:7c:ab:ba:b5:92:aa:18:eb:79:e9:44:
         48:3f:57:e2:a8:5d:6b:6a:17:a2:fe:5b:a1:99:44:68:3c:fe:
         90:6e:c5:36:bb:85:a9:fb:fc:b1:e9:0c:02:6a:e1:f9:ac:e9:
         e0:db:8b:4e:d1:41:3d:75:6a:23:8d:54:cd:f4:b7:64:84:62:
         fc:8f:b1:6c:f9:72:9c:1f:d4:a2:8c:db:33:c1:b4:1a:6c:84:
         e0:88:9a:4e:80:57:bb:eb:f8:8b:87:44:90:de:d6:55:95:59:
         e6:f3:4e:46:85:0d:ea:86:6d:18:2d:6e:2b:83:ed:31:53:48:
         60:0b:f8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----