This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/34AB2020902C11EA898EFD7FC4F9AE02.roa
File:                     34AB2020902C11EA898EFD7FC4F9AE02.roa (raw, json)
Hash identifier:          vyQAg46x4nY45HFfqQQA5HjycVUpzI8ZspIwOnWS3pY=
Subject key identifier:   C7:5E:A0:D6:C7:C8:BC:F3:EC:D1:A1:81:E1:EE:88:D3:7B:1B:02:F2
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       3750
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/34AB2020902C11EA898EFD7FC4F9AE02.roa
Signing time:             Fri 28 Nov 2025 14:30:22 +0000
ROA not before:           Fri 28 Nov 2025 14:30:22 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     133888
IP address blocks:        122.154.109.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14160 (0x3750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Nov 28 14:30:22 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6929b1fe-59c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:88:59:c5:1b:8c:b2:cc:15:4b:ac:f9:79:09:
                    ef:03:3e:b7:ec:be:a5:ba:9e:96:fa:b2:f5:31:e2:
                    42:e6:06:72:63:52:ec:7e:7f:f9:0c:76:e8:0d:ee:
                    06:25:a9:ab:f3:20:3e:51:44:b5:56:09:e5:1d:94:
                    70:2b:03:26:b9:77:06:da:d1:d3:18:c7:11:55:3b:
                    78:e9:37:1f:52:47:e0:fe:cf:c6:38:9d:ef:3a:a0:
                    9b:f7:68:ad:3e:1b:dc:c6:6d:ed:8c:9c:63:a1:56:
                    3c:97:f8:2b:9f:33:ca:d6:04:7e:67:b1:5f:92:f6:
                    c4:a7:2d:69:c9:43:20:51:d2:35:d3:1e:db:e2:48:
                    6a:40:b1:2e:a4:9f:21:ad:89:3e:f8:39:7a:c5:94:
                    1f:14:84:79:e8:3a:38:10:ce:81:6b:cd:9c:5c:a2:
                    3d:8b:26:24:96:e5:d8:0c:e1:d2:13:06:02:eb:d5:
                    b9:c7:e2:7b:f2:e7:2a:c9:a3:4c:b8:32:4a:cc:d6:
                    a9:66:8a:29:55:0b:57:fe:aa:20:ce:2c:41:9e:79:
                    c3:5d:9c:9f:df:1c:d9:6d:64:ae:56:46:28:79:45:
                    98:44:0d:6e:69:07:1f:d2:60:4e:23:0f:72:6e:f8:
                    87:dc:00:ff:76:ec:08:47:8e:f1:c4:2e:1a:c9:31:
                    b0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5E:A0:D6:C7:C8:BC:F3:EC:D1:A1:81:E1:EE:88:D3:7B:1B:02:F2
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/34AB2020902C11EA898EFD7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.154.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:93:db:07:6a:d8:cc:c3:d0:f4:be:2d:0a:56:73:29:bd:28:
         0b:a8:76:49:a8:27:41:43:11:da:1a:56:42:1e:63:75:5b:69:
         3a:2d:05:23:58:4f:bc:2b:d6:c9:25:c7:f2:08:b1:89:cc:95:
         eb:5a:a6:66:79:24:9a:06:88:68:72:38:8c:89:4c:37:6a:78:
         5f:58:5e:42:46:03:b3:98:bf:58:bd:61:45:dd:18:2b:9e:53:
         06:ad:9b:ca:44:83:1f:f1:6b:0a:d9:11:83:ce:4f:93:15:24:
         cf:6e:73:bc:6e:56:46:6a:2d:05:6d:a0:88:eb:87:3b:ef:bf:
         78:fc:ec:ae:cf:06:c9:0f:0c:c8:dc:fc:56:1f:50:a8:a0:42:
         26:f0:dd:f2:eb:85:07:6d:3a:c1:d3:ae:8c:6d:c3:a5:99:7d:
         5d:5a:ed:5e:c2:2e:18:c0:9d:ac:18:db:28:26:53:25:c4:52:
         b2:4f:d6:95:08:6e:11:dc:19:03:7e:28:a7:d2:bd:50:6d:0d:
         20:96:76:df:7d:fc:08:ca:6d:9e:68:14:c9:b9:b2:30:5a:21:
         96:59:d8:5a:5d:e7:68:05:83:bf:59:8b:fa:c0:2f:1f:13:d4:
         d2:e1:0e:d1:fc:c2:33:32:fe:c6:e5:b9:63:3f:f3:a5:b1:1e:
         c3:e7:47:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----