This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/B945666A66B111EEA69EB059C4F9AE02.roa
File:                     B945666A66B111EEA69EB059C4F9AE02.roa (raw, json)
Hash identifier:          nMvHzoy9GDqB+vkb8ceyx8/u8hgzHqbqw3KAl8j/nX0=
Subject key identifier:   C2:79:9C:C2:2A:3E:45:4F:8C:F6:0A:2F:DA:D5:41:29:AD:29:5D:F3
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       374C
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/B945666A66B111EEA69EB059C4F9AE02.roa
Signing time:             Fri 28 Nov 2025 14:30:18 +0000
ROA not before:           Fri 28 Nov 2025 14:30:18 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     131089
IP address blocks:        61.19.16.0/24 maxlen: 24
                          110.78.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14156 (0x374c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Nov 28 14:30:18 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6929b1fa-737f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9f:39:84:66:da:d6:e5:fc:bd:3f:27:a8:e5:
                    1f:96:08:d0:dd:b1:ca:10:2a:36:d5:66:ab:43:f1:
                    9a:46:26:f1:ed:86:cf:cc:f3:d3:bc:2d:78:3c:af:
                    c9:70:4c:85:9c:a7:5a:c1:79:b3:44:1f:af:cb:95:
                    cf:f0:2e:56:06:37:38:96:81:2d:fd:29:72:38:82:
                    53:fb:ff:1f:cf:b8:50:83:49:fd:74:44:7d:70:e3:
                    db:98:35:92:c3:39:91:21:6c:ec:a5:25:34:7a:5f:
                    bc:19:37:84:01:47:e0:6f:b9:1f:99:51:16:8a:8c:
                    63:fe:8c:c4:67:f7:b2:05:2e:f9:d1:c6:96:1b:98:
                    0b:bc:9e:a3:53:b7:dd:8d:71:c3:af:65:f6:38:7b:
                    4a:ed:6b:9b:f0:86:77:e9:52:bf:59:9d:31:fa:f5:
                    4a:36:8b:b7:52:f4:d0:33:77:f2:0a:0d:2b:f2:b4:
                    ea:42:59:a9:b4:1a:fa:8c:73:59:e8:71:0a:ef:ca:
                    24:bc:22:dd:ef:f9:d2:a8:e4:55:62:29:7d:20:54:
                    22:93:c1:74:09:52:70:77:87:7c:65:ad:27:a9:7d:
                    42:a7:31:2d:92:e7:59:5b:8f:a8:ac:e3:d7:19:3c:
                    76:ec:99:55:80:ba:92:b1:d5:15:52:72:6c:45:78:
                    89:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:79:9C:C2:2A:3E:45:4F:8C:F6:0A:2F:DA:D5:41:29:AD:29:5D:F3
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/B945666A66B111EEA69EB059C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.19.16.0/24
                  110.78.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:a1:80:a9:10:9f:9a:4c:67:24:e6:42:65:16:5e:87:1f:39:
         37:a2:a9:3f:6c:c0:d0:f6:f9:6f:ca:03:54:19:ee:22:29:51:
         d6:ec:92:01:46:f3:a2:db:94:c6:bd:e2:72:bf:b9:2b:17:c0:
         ec:8b:dc:d4:78:c4:46:f0:29:e9:37:96:24:d9:24:29:b8:1d:
         21:19:d4:da:3d:41:f0:e4:59:82:c4:00:ad:48:4a:85:d5:df:
         45:97:5d:ac:66:6a:5b:e4:bc:3a:76:11:02:71:2e:30:c6:d1:
         9a:26:ef:02:e5:06:43:fc:d5:5f:21:23:65:ed:9d:69:9e:a4:
         19:df:1c:c9:32:28:12:0d:6e:ee:03:16:1d:47:84:c4:6f:ff:
         ce:9e:3a:8a:29:ac:58:ed:68:06:7b:8a:13:af:fa:2d:0b:f2:
         03:28:be:14:d2:bb:3b:63:4c:17:40:18:39:70:19:ad:b9:fb:
         46:f1:e5:13:ea:b6:96:98:6d:a0:e8:5b:fe:ac:28:3d:19:ed:
         31:72:e6:55:f6:6e:8c:90:de:b6:79:24:1f:c7:e9:ae:17:06:
         4d:10:9b:8e:42:6b:e8:8c:f3:9d:90:62:8d:91:a3:c1:0d:bb:
         96:a1:6f:94:7b:87:29:98:7b:8a:85:76:38:e7:8f:b6:a3:6b:
         e4:df:69:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----