This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/FF54461CC7BC11EB9E6C9A69C4F9AE02.roa
File:                     FF54461CC7BC11EB9E6C9A69C4F9AE02.roa (raw, json)
Hash identifier:          YnlNqWXDSh7tYSnvwOL6SxBf5IWUOMlqNyX9O23bdMQ=
Subject key identifier:   7D:08:16:C6:BD:F6:41:D5:B1:3C:43:5D:04:E9:09:8C:6F:2D:71:E8
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       375C
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/FF54461CC7BC11EB9E6C9A69C4F9AE02.roa
Signing time:             Fri 28 Nov 2025 14:30:35 +0000
ROA not before:           Fri 28 Nov 2025 14:30:35 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     20940
IP address blocks:        61.19.5.0/24 maxlen: 24
                          61.19.8.0/24 maxlen: 24
                          61.19.11.0/24 maxlen: 24
                          61.19.12.0/24 maxlen: 24
                          61.19.13.0/24 maxlen: 24
                          122.155.239.0/24 maxlen: 24
                          2001:c38:500a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14172 (0x375c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Nov 28 14:30:35 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6929b20b-d863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a9:54:08:f3:39:be:af:95:ef:57:78:7a:d4:
                    3b:3c:18:d2:fe:d4:14:76:85:fa:5f:ce:aa:62:19:
                    51:b3:3e:f0:cf:f2:be:28:97:2c:9d:07:68:3a:32:
                    81:9b:92:46:21:37:72:4a:fd:17:d9:ee:3a:23:b3:
                    cb:2b:00:c7:ab:7a:8b:ce:4c:e5:5f:f7:9f:55:f0:
                    ef:9b:ee:66:33:82:6c:1f:5c:51:6f:ae:a3:ff:33:
                    88:74:f8:15:3d:20:ae:cc:62:b4:ef:d8:db:79:ee:
                    fd:ee:62:26:22:07:db:ae:4c:02:8d:d8:3f:7f:54:
                    91:c1:4d:d4:4a:f6:b8:fd:17:6e:db:89:e9:78:03:
                    e7:31:73:61:a8:f2:1d:ee:73:c1:f5:a9:7a:4b:e5:
                    94:f3:2d:73:b1:33:9b:7a:cf:c1:04:79:a5:bd:84:
                    ba:85:1f:b1:93:af:ed:fe:c6:17:da:17:c2:18:0b:
                    43:71:3a:16:0f:62:99:ba:6b:d5:eb:34:c0:37:33:
                    18:05:44:51:3e:50:2c:d6:5c:d1:59:9a:af:61:10:
                    a9:b7:d3:d0:cc:04:b8:41:ec:68:2f:b9:1f:81:ba:
                    a2:8b:8c:f4:ca:90:3f:a2:de:f0:60:06:5d:94:8f:
                    f4:f1:96:cb:cd:7c:c8:c5:ff:ab:db:06:48:12:54:
                    dc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:08:16:C6:BD:F6:41:D5:B1:3C:43:5D:04:E9:09:8C:6F:2D:71:E8
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/FF54461CC7BC11EB9E6C9A69C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.19.5.0/24
                  61.19.8.0/24
                  61.19.11.0-61.19.13.255
                  122.155.239.0/24
                IPv6:
                  2001:c38:500a::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:03:1a:bb:5d:08:f6:4c:b3:75:8b:06:a1:b1:3a:81:5e:16:
         76:d3:1e:51:39:f0:9e:7a:50:fc:37:98:e8:67:95:31:83:02:
         95:d5:4b:46:63:03:1f:43:c7:f7:0b:b1:5b:6f:91:cf:95:a4:
         9e:ab:e7:6b:12:2e:ec:76:a6:a7:4c:25:74:e5:e3:81:85:9f:
         c8:cf:c2:37:2a:2b:9f:99:25:bd:7a:f2:bc:be:3e:b2:15:6d:
         72:b2:5d:c4:e4:af:41:d4:f0:a7:34:3b:08:35:13:68:3e:a1:
         9c:3d:4c:7b:1e:e3:16:b9:a7:e3:00:f1:1e:ff:17:d8:85:6f:
         95:a5:59:73:4a:7c:52:5b:a6:76:6f:c0:36:98:7f:d3:65:00:
         fd:5f:de:85:49:35:9a:82:a9:1b:50:d7:fc:15:98:b8:88:9a:
         b5:43:99:96:ec:d8:85:a3:fd:98:1e:6a:2a:2b:14:81:40:ea:
         88:66:e6:ff:28:a2:21:31:de:51:b4:41:b4:19:86:d3:d8:8c:
         09:21:6b:9e:eb:d1:cc:dd:11:66:6e:06:84:7d:e2:d1:d4:83:
         13:12:a7:12:01:b1:25:1c:82:65:17:af:3b:ba:8a:ea:57:bd:
         35:bb:b7:e8:e4:f9:79:d1:45:7a:7b:fe:7e:e8:08:3b:cc:35:
         d2:1c:62:99
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgICN1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz
M0E4ODc1MEUwHhcNMjUxMTI4MTQzMDM1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI5YjIwYi1kODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA36lUCPM5vq+V71d4etQ7PBjS/tQUdoX6X86qYhlRsz7wz/K+KJcsnQdoOjKB
m5JGITdySv0X2e46I7PLKwDHq3qLzkzlX/efVfDvm+5mM4JsH1xRb66j/zOIdPgV
PSCuzGK079jbee797mImIgfbrkwCjdg/f1SRwU3USva4/Rdu24npeAPnMXNhqPId
7nPB9al6S+WU8y1zsTObes/BBHmlvYS6hR+xk6/t/sYX2hfCGAtDcToWD2KZumvV
6zTANzMYBURRPlAs1lzRWZqvYRCpt9PQzAS4QexoL7kfgbqii4z0ypA/ot7wYAZd
lI/08ZbLzXzIxf+r2wZIElTctwIDAQABo4ICwDCCArwwHQYDVR0OBBYEFH0IFsa9
9kHVsTxDXQTpCYxvLXHoMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE
NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjU0NzUvQUI0NDc5NzIxRDc4MTFFMkFEQjZGMkM0MDhCMDJDRDIvRkY1NDQ2MUND
N0JDMTFFQjlFNkM5QTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSgYIKwYBBQUHAQcBAf8E
OzA5MCYEAgABMCADBAA9EwUDBAA9EwgwDAMEAD0TCwMEAT0TDAMEAHqb7zAPBAIA
AjAJAwcAIAEMOFAKMA0GCSqGSIb3DQEBCwUAA4IBAQBYAxq7XQj2TLN1iwahsTqB
XhZ20x5ROfCeelD8N5joZ5UxgwKV1UtGYwMfQ8f3C7Fbb5HPlaSeq+drEi7sdqan
TCV05eOBhZ/Iz8I3KiufmSW9evK8vj6yFW1ysl3E5K9B1PCnNDsINRNoPqGcPUx7
HuMWuafjAPEe/xfYhW+VpVlzSnxSW6Z2b8A2mH/TZQD9X96FSTWagqkbUNf8FZi4
iJq1Q5mW7NiFo/2YHmoqKxSBQOqIZub/KKIhMd5RtEG0GYbT2IwJIWue69HM3RFm
bgaEfeLR1IMTEqcSAbElHIJlF687uorqV701u7fo5Pl50UV6e/5+6Ag7zDXSHGKZ
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:53:10 2025 by rpki-client