This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/DDE4B378619211EEB366AF27C4F9AE02.roa
File:                     DDE4B378619211EEB366AF27C4F9AE02.roa (raw, json)
Hash identifier:          2xkvuCVO2wKNfA0t4euDbW2J4+Bh/v0x6Idw84Dw4EM=
Subject key identifier:   36:83:28:6D:67:A7:60:13:E2:AB:FB:C8:BE:5E:E2:6A:66:BF:43:85
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       374D
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/DDE4B378619211EEB366AF27C4F9AE02.roa
Signing time:             Fri 28 Nov 2025 14:30:19 +0000
ROA not before:           Fri 28 Nov 2025 14:30:19 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     131090
IP address blocks:        61.7.128.0/18 maxlen: 24
                          103.10.228.0/22 maxlen: 22
                          103.10.228.0/24 maxlen: 24
                          103.10.229.0/24 maxlen: 24
                          103.10.230.0/24 maxlen: 24
                          103.10.231.0/24 maxlen: 24
                          110.77.128.0/17 maxlen: 24
                          110.78.128.0/18 maxlen: 24
                          116.58.224.0/19 maxlen: 24
                          119.42.64.0/18 maxlen: 24
                          2001:c38:b000::/36 maxlen: 36
                          2001:c38:b010::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14157 (0x374d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Nov 28 14:30:19 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6929b1fb-091b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b4:f4:b3:33:80:e3:bc:bf:41:a2:ae:da:17:
                    2f:94:9e:04:84:bc:ea:c2:ff:b8:47:f1:66:7a:59:
                    69:d5:7b:23:78:d9:2f:0b:e6:b5:dd:b4:80:40:46:
                    9a:a0:9a:d4:2b:13:52:db:02:cd:55:fe:11:fc:02:
                    04:8c:df:cb:93:2d:7a:7a:e2:4d:6c:d6:55:50:3b:
                    60:a4:e7:d0:e5:7f:07:3d:3f:c8:3a:b0:9a:cb:1c:
                    85:41:77:d4:e7:69:50:3a:0e:69:0a:0d:ce:7a:84:
                    78:3f:c3:e6:c4:7c:a2:0d:09:66:99:97:31:b8:8c:
                    2b:7c:c6:90:fd:4a:f1:29:13:2c:c4:e6:fc:09:d1:
                    ac:10:62:99:f0:c5:95:15:83:9b:39:a2:9c:11:d7:
                    13:2a:51:4c:26:71:b0:c4:4a:14:fc:5e:41:77:46:
                    33:d0:e9:82:00:9a:3c:66:7f:67:32:75:41:ed:d7:
                    38:e4:9f:d0:10:20:ff:17:41:48:64:f0:54:6f:82:
                    80:8b:c3:a0:67:60:e2:99:1c:50:c2:5c:71:0c:1c:
                    3b:b3:d8:dd:e3:a9:b8:15:fc:ef:1b:86:fe:88:3f:
                    8a:86:0a:c8:b5:a4:eb:e7:f0:72:30:0a:99:e4:97:
                    be:0a:7a:d6:e1:18:14:c7:1f:89:18:26:66:3c:14:
                    93:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:83:28:6D:67:A7:60:13:E2:AB:FB:C8:BE:5E:E2:6A:66:BF:43:85
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/DDE4B378619211EEB366AF27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.7.128.0/18
                  103.10.228.0/22
                  110.77.128.0/17
                  110.78.128.0/18
                  116.58.224.0/19
                  119.42.64.0/18
                IPv6:
                  2001:c38:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8e:ea:83:41:13:bd:7d:02:0c:17:a2:82:3d:e7:c6:0f:a2:6f:
         73:4f:6c:f9:bf:4e:40:2e:8c:8f:4f:32:1d:87:ac:ac:43:e3:
         ca:50:10:1e:72:5d:72:2c:68:e7:2a:1c:7f:25:03:25:ed:d6:
         64:69:f0:32:66:4b:04:a7:fd:7a:f9:2f:b1:d0:66:f5:cb:05:
         08:ad:fb:54:64:1e:87:4c:3b:b9:8e:7e:f6:56:bf:5c:61:ab:
         7b:e1:1b:45:00:ca:99:22:1f:bd:36:2a:e2:9f:d0:8b:12:2c:
         7f:ba:e2:e3:3f:2b:1d:bd:92:3f:18:ce:68:de:63:e1:2f:78:
         3d:9a:68:9f:09:e6:22:72:ad:ce:66:79:84:9a:18:d0:77:62:
         2f:b1:d7:66:c4:af:a5:eb:6e:63:4f:7c:3c:bb:e6:71:e8:43:
         34:f3:56:d1:9b:20:62:5a:2d:92:ed:9f:a6:c1:12:b4:86:a5:
         7c:24:9f:a9:bf:a9:62:10:ac:43:4d:fb:0b:35:01:4f:df:de:
         0e:05:aa:13:ff:37:cd:24:86:71:2a:16:11:34:ba:05:42:29:
         22:c5:44:a5:d6:80:c7:2c:1a:09:e9:5e:c8:02:70:04:4c:ab:
         01:8c:cc:c1:ef:72:37:f3:35:d3:98:38:8e:2f:c4:84:ee:c7:
         a3:27:ef:9a
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgICN00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz
M0E4ODc1MEUwHhcNMjUxMTI4MTQzMDE5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI5YjFmYi0wOTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9rT0szOA47y/QaKu2hcvlJ4EhLzqwv+4R/Fmellp1XsjeNkvC+a13bSAQEaa
oJrUKxNS2wLNVf4R/AIEjN/Lky16euJNbNZVUDtgpOfQ5X8HPT/IOrCayxyFQXfU
52lQOg5pCg3OeoR4P8PmxHyiDQlmmZcxuIwrfMaQ/UrxKRMsxOb8CdGsEGKZ8MWV
FYObOaKcEdcTKlFMJnGwxEoU/F5Bd0Yz0OmCAJo8Zn9nMnVB7dc45J/QECD/F0FI
ZPBUb4KAi8OgZ2DimRxQwlxxDBw7s9jd46m4FfzvG4b+iD+KhgrItaTr5/ByMAqZ
5Je+CnrW4RgUxx+JGCZmPBSTKwIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFDaDKG1n
p2AT4qv7yL5e4mpmv0OFMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE
NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjU0NzUvQUI0NDc5NzIxRDc4MTFFMkFEQjZGMkM0MDhCMDJDRDIvRERFNEIzNzg2
MTkyMTFFRUIzNjZBRjI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTQYIKwYBBQUHAQcBAf8E
PjA8MCoEAgABMCQDBAY9B4ADBAJnCuQDBAduTYADBAZuToADBAV0OuADBAZ3KkAw
DgQCAAIwCAMGBCABDDiwMA0GCSqGSIb3DQEBCwUAA4IBAQCO6oNBE719AgwXooI9
58YPom9zT2z5v05ALoyPTzIdh6ysQ+PKUBAecl1yLGjnKhx/JQMl7dZkafAyZksE
p/16+S+x0Gb1ywUIrftUZB6HTDu5jn72Vr9cYat74RtFAMqZIh+9Nirin9CLEix/
uuLjPysdvZI/GM5o3mPhL3g9mmifCeYicq3OZnmEmhjQd2IvsddmxK+l625jT3w8
u+Zx6EM081bRmyBiWi2S7Z+mwRK0hqV8JJ+pv6liEKxDTfsLNQFP394OBaoT/zfN
JIZxKhYRNLoFQikixUSl1oDHLBoJ6V7IAnAETKsBjMzB73I38zXTmDiOL8SE7sej
J++a
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:53:45 2025 by rpki-client