This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/84094296EF5E11EF81B0790EC4F9AE02.roa
File:                     84094296EF5E11EF81B0790EC4F9AE02.roa (raw, json)
Hash identifier:          oEFEpYK6DqlrfVGPbYFroZctJAwYmcJzz3v8O3nGudA=
Subject key identifier:   CD:CB:BA:A5:6F:A9:28:F0:40:64:01:60:9A:68:69:C7:62:AA:1B:9A
Certificate issuer:       /CN=A9125475/serialNumber=52FE2B6B7F497F94F1D492D1917B486478BF59D6
Certificate serial:       02AB
Authority key identifier: 52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/84094296EF5E11EF81B0790EC4F9AE02.roa
Signing time:             Fri 28 Nov 2025 14:30:50 +0000
ROA not before:           Fri 28 Nov 2025 14:30:50 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     131090
IP address blocks:        2.57.124.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=52FE2B6B7F497F94F1D492D1917B486478BF59D6
        Validity
            Not Before: Nov 28 14:30:50 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6929b21a-b03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:38:90:93:db:34:bb:38:ec:1e:9c:cb:da:fe:
                    a2:64:4b:8c:b5:9b:c8:f5:7f:a4:82:74:31:de:f9:
                    fd:b6:14:0c:f0:a0:2a:4a:6a:95:a9:d3:ac:9a:91:
                    dd:f4:4e:ae:40:c0:ba:05:01:23:4b:c1:f7:86:52:
                    ff:f9:52:63:34:f9:b8:44:8c:f8:75:c4:df:bf:04:
                    13:de:3b:20:08:53:7a:43:65:d5:b9:0f:06:00:4f:
                    fb:eb:94:78:99:ef:7a:c1:ac:9b:d5:92:b3:69:0f:
                    95:a4:34:2e:bb:48:5b:30:8d:f3:c7:5f:36:d9:e0:
                    1c:a4:13:ed:d1:c2:ed:18:64:7c:e6:79:20:ae:9a:
                    fc:c3:a2:2f:84:e8:ae:e3:07:ef:c0:30:90:13:3e:
                    5e:04:37:f5:e4:c5:10:b2:c1:42:7e:6d:12:77:98:
                    60:62:77:cb:d8:1d:e2:7f:e8:a4:d0:23:b8:e6:d4:
                    61:6f:4a:df:54:fa:43:de:e1:db:0d:06:21:e1:25:
                    85:8a:fa:1d:88:eb:fb:09:25:4b:5e:54:12:76:31:
                    ec:4f:15:1c:4e:b9:a3:d0:e1:3a:27:40:cb:d7:7b:
                    19:76:7f:b4:05:59:d1:4e:6f:b9:ca:f4:31:93:12:
                    10:46:73:e7:71:89:49:5b:66:7a:09:e0:5a:b6:7e:
                    d0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CB:BA:A5:6F:A9:28:F0:40:64:01:60:9A:68:69:C7:62:AA:1B:9A
            X509v3 Authority Key Identifier:
                keyid:52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/84094296EF5E11EF81B0790EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:de:4a:7f:34:b3:58:fa:aa:ac:10:c7:d3:d1:c1:43:79:27:
         64:c1:d4:97:cf:7f:85:5c:59:de:82:39:00:10:00:5a:03:d0:
         a2:14:37:de:56:df:e6:a7:4d:6c:bb:c6:34:02:40:b3:13:e5:
         57:74:0d:20:b5:60:d8:2c:fa:ed:84:f5:04:d6:fb:65:d8:ff:
         ef:78:af:11:60:4e:51:fc:25:58:ef:c4:e5:6f:8f:3a:f8:ac:
         69:49:5b:a0:0f:1c:9d:7a:6f:e5:9c:82:39:01:39:13:cd:9c:
         d8:ec:9e:0f:5d:72:f3:5e:44:0f:72:a7:07:e2:f3:57:97:4a:
         c9:e5:81:94:a2:12:a8:38:c0:98:27:98:55:95:de:8d:9a:a3:
         89:67:8e:6d:be:81:b0:8d:20:54:21:38:2f:b3:a0:99:d9:77:
         67:ff:c6:c8:8b:61:6a:a7:39:cc:44:76:41:5b:ea:9d:bd:dd:
         cb:48:06:3a:02:63:de:87:7e:04:12:64:89:18:9c:9a:13:2b:
         05:91:ed:4b:87:b8:11:e5:91:7d:de:26:0e:d7:c4:e0:ff:c0:
         15:7a:a9:e5:d3:0b:73:d0:7f:35:b5:d2:08:52:a9:25:0c:02:
         8c:88:e3:40:3a:0f:f1:ae:40:e0:86:ea:5c:89:24:b4:91:83:
         05:bd:60:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----