This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3AC61D98902C11EA898EFD7FC4F9AE02.roa
File:                     3AC61D98902C11EA898EFD7FC4F9AE02.roa (raw, json)
Hash identifier:          CY3Sic8GWz16OHD33Ascn6Zju8aGKufjwKsd57bJLAo=
Subject key identifier:   98:79:0B:66:71:B8:E7:AC:A7:FF:B4:0A:B8:82:6B:9E:EF:09:A6:63
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       375E
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3AC61D98902C11EA898EFD7FC4F9AE02.roa
Signing time:             Fri 28 Nov 2025 14:30:37 +0000
ROA not before:           Fri 28 Nov 2025 14:30:37 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     24328
IP address blocks:        122.154.50.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14174 (0x375e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Nov 28 14:30:37 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6929b20d-c36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:15:b6:26:0f:48:d9:da:9c:d7:a1:6b:01:ab:
                    b7:bf:84:90:3d:d7:a5:aa:6f:f6:17:cf:a4:27:bb:
                    eb:af:00:84:a1:28:72:d8:7b:42:38:62:bd:e3:52:
                    b8:46:db:1b:46:55:a0:4b:e1:6d:69:15:d1:24:f2:
                    23:1c:77:34:e6:29:b9:9a:2b:29:69:a7:90:2f:2e:
                    4a:b1:f2:b7:06:2a:9a:1c:9f:dd:b4:bf:d7:4d:5c:
                    5f:e5:ee:1d:75:08:89:cb:98:32:0e:22:4a:97:cd:
                    86:fd:3e:27:3b:11:20:e5:19:8c:76:46:ce:ad:32:
                    cf:e4:06:b3:cf:c0:14:4f:94:24:ea:24:b1:7e:49:
                    48:72:ec:7c:4c:06:41:e4:99:3d:de:e0:e5:14:68:
                    96:1b:87:4d:b1:1f:5a:23:e6:1c:25:6f:37:24:58:
                    33:ea:78:c4:a4:75:5d:3b:b6:d3:48:62:fc:22:66:
                    45:35:a6:cd:36:f3:f7:76:73:c0:d4:a5:f4:bc:d4:
                    61:59:49:f9:73:9c:a8:5e:08:45:82:69:2c:db:99:
                    d5:fc:c4:ee:36:3a:91:26:84:df:67:38:3a:7e:fb:
                    d7:dc:7a:1d:c5:5f:e5:5a:9e:22:a1:7c:0e:ef:ef:
                    ce:f7:6a:2b:29:e4:c9:66:b0:b5:66:aa:01:51:cc:
                    d3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:79:0B:66:71:B8:E7:AC:A7:FF:B4:0A:B8:82:6B:9E:EF:09:A6:63
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3AC61D98902C11EA898EFD7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.154.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:49:8f:20:66:8c:22:cd:85:61:51:ff:84:63:10:2b:9d:94:
         43:06:36:08:03:13:aa:9a:78:2c:af:71:6a:cc:ea:7b:d4:8c:
         74:6d:6d:2b:f1:e1:48:49:84:83:33:54:52:40:8b:d9:e8:66:
         fb:92:3a:16:5f:3f:50:3e:76:e5:ed:3d:be:1f:8f:0b:ad:a8:
         05:d7:ba:c9:4f:21:11:ed:73:44:8e:bc:1f:5c:5f:52:f9:49:
         d4:a9:12:1b:53:3e:d7:7d:ea:ab:f9:74:32:12:17:e7:d4:54:
         ff:b5:b1:6d:4b:08:05:95:12:1d:75:ba:43:75:12:0b:30:8b:
         f2:50:91:aa:b8:f5:be:3a:a8:1d:23:56:bd:95:cf:c4:99:01:
         c6:ff:42:01:60:ac:f3:98:23:cb:da:9b:c6:b3:6d:96:0d:9d:
         00:d9:7b:d7:2e:41:1b:f4:4d:54:37:6d:3f:f9:0c:de:fa:62:
         90:e5:cc:31:99:5c:01:3a:79:cc:54:8c:24:3b:22:86:ad:35:
         7a:fc:d2:c4:5e:70:7d:d3:7e:63:bb:c6:d7:17:0e:52:55:a6:
         0b:00:e3:a7:88:2a:ae:02:d0:1d:44:0e:1b:c3:5e:1d:72:9e:
         19:71:87:65:66:c1:18:50:91:18:1c:a8:6a:ff:0d:a8:3f:58:
         ac:26:3a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----