This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/35E6778C902C11EA898EFD7FC4F9AE02.roa
File:                     35E6778C902C11EA898EFD7FC4F9AE02.roa (raw, json)
Hash identifier:          02Gkr5GJa1KrCNBpvQk78P1EmEbJHWy09QHCgFUF+Mc=
Subject key identifier:   2B:87:73:F2:F5:9D:DE:CA:1D:3A:C8:17:A6:45:49:23:F0:E3:88:00
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       3753
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/35E6778C902C11EA898EFD7FC4F9AE02.roa
Signing time:             Fri 28 Nov 2025 14:30:26 +0000
ROA not before:           Fri 28 Nov 2025 14:30:26 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     135635
IP address blocks:        61.19.204.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14163 (0x3753)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Nov 28 14:30:26 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6929b201-431a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:95:4f:4f:c4:c0:06:92:8f:14:86:49:f7:c5:
                    93:8a:39:cf:c0:77:d3:92:9a:62:b7:c7:eb:cc:8b:
                    c7:b3:05:50:23:1b:b3:d8:84:0e:49:1e:02:69:47:
                    10:19:4c:5d:17:0c:42:f2:97:c8:a8:65:ee:39:ef:
                    56:db:03:30:ea:fd:2f:8c:b1:08:37:00:65:eb:34:
                    7e:a8:d6:e3:39:f2:98:05:0b:05:38:94:c6:44:00:
                    41:26:15:2f:07:a4:6a:0e:1e:d5:78:61:05:2d:18:
                    fd:e1:b9:91:c8:e9:b3:32:4c:c7:a5:aa:82:92:d2:
                    5d:cb:b7:60:8d:31:00:92:ef:b6:f5:07:6d:37:d9:
                    14:88:36:e1:02:04:04:c6:dd:5e:d2:11:73:f2:7d:
                    78:8b:51:97:16:3f:d6:85:c8:74:f7:81:a1:41:8c:
                    a4:97:51:11:7c:8d:c0:89:85:4f:e7:e9:86:52:2a:
                    8a:c3:83:56:54:40:ce:d1:13:57:1c:5d:c1:c0:ad:
                    5d:46:74:a0:4a:d8:f9:56:e2:3a:91:ff:c0:84:d2:
                    85:ef:73:f4:2e:98:47:b1:ae:79:1e:a7:78:3e:d6:
                    b8:a9:da:4a:af:20:16:5a:ca:0c:3d:de:c1:98:5c:
                    d0:d7:05:72:9d:d9:1c:eb:10:72:81:3b:7e:15:d4:
                    2c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:87:73:F2:F5:9D:DE:CA:1D:3A:C8:17:A6:45:49:23:F0:E3:88:00
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/35E6778C902C11EA898EFD7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.19.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:eb:1f:72:74:3b:c3:10:5a:34:dd:8a:8f:08:f6:a1:5c:05:
         f8:e6:c7:0e:28:06:c2:15:91:71:0e:c0:58:13:0e:b2:5c:3b:
         52:45:af:09:fc:dc:69:84:2b:32:cd:27:fd:5b:cf:77:7c:0d:
         c3:33:12:dc:10:c8:7a:b1:72:ef:c5:2b:cf:b6:25:87:7d:06:
         5b:69:b2:ea:a8:ef:bb:0c:c0:6b:33:55:c5:af:ae:89:9e:42:
         30:81:31:0c:2c:f2:2a:7a:ef:27:74:26:ca:fc:3f:e1:04:55:
         59:10:18:78:35:1b:8f:55:dd:ba:a0:50:b1:41:00:37:42:3f:
         c5:31:5e:c4:33:e2:a7:1f:ee:cf:5f:8a:45:c2:3e:e6:13:e8:
         21:3e:86:97:be:40:a0:bf:48:c2:c4:a4:d1:53:d8:4f:34:86:
         c7:82:40:ff:46:9c:27:e0:bd:9f:8f:db:7d:84:02:5b:36:73:
         1b:75:79:33:4d:d2:08:8a:a5:6d:e9:1f:e1:20:f1:63:7a:72:
         aa:9c:45:89:5e:27:8f:bc:6a:73:fa:6e:18:c3:eb:89:5b:d6:
         c3:ec:9c:a0:de:9e:fe:95:55:c9:87:81:2a:e5:3c:a0:9d:c9:
         8d:f6:97:53:bd:cd:6b:d1:cf:3b:16:a7:66:a2:24:99:94:6c:
         db:23:6b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:54:15 2025 by rpki-client