This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3373DB98902C11EA898EFD7FC4F9AE02.roa
File:                     3373DB98902C11EA898EFD7FC4F9AE02.roa (raw, json)
Hash identifier:          B8/KO0lIMbj3euI2Xfl9/CHni7NK/he8YfpaSYZyetY=
Subject key identifier:   E3:2D:6A:2A:69:3D:1D:82:BE:9F:0E:A7:AC:39:EF:69:18:82:3D:41
Certificate issuer:       /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547
Certificate serial:       25E2
Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3373DB98902C11EA898EFD7FC4F9AE02.roa
Signing time:             Fri 28 Nov 2025 14:30:17 +0000
ROA not before:           Fri 28 Nov 2025 14:30:16 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     36492
IP address blocks:        159.192.27.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9698 (0x25e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547
        Validity
            Not Before: Nov 28 14:30:16 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6929b1f8-4030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1c:e0:b8:66:f5:7d:74:5a:9e:79:ae:50:29:
                    10:07:7d:8b:33:cd:54:e4:24:22:8e:1c:06:d1:79:
                    b6:7f:34:37:24:df:1d:3b:eb:84:78:2e:56:f5:5e:
                    c0:11:36:10:ef:6b:d7:96:22:ab:98:ae:d0:f6:81:
                    43:88:1f:f9:97:58:87:21:dd:b6:04:69:fc:f2:a6:
                    51:96:b1:7b:cd:47:e0:8a:33:a5:73:5b:af:0e:7c:
                    3f:a1:a9:db:0e:76:18:a3:c1:ca:64:b9:da:5c:12:
                    f7:3b:7b:01:7a:ec:77:de:f3:82:26:95:46:d5:7e:
                    00:7f:16:de:4d:bc:1f:ec:12:91:2e:0f:0b:72:ff:
                    d2:6b:36:4b:f7:8d:b9:65:25:db:dd:37:10:bb:da:
                    3a:bc:81:8b:61:81:ea:e2:de:fc:63:d5:77:d5:8b:
                    04:32:61:48:94:be:fc:3b:d8:73:2e:ad:f7:ac:3a:
                    99:74:b8:49:21:bd:4d:15:d5:5f:c1:98:34:42:f7:
                    b8:d7:df:f1:7e:82:63:9c:38:6e:fa:0f:38:25:71:
                    0e:6e:12:db:84:f0:05:5a:07:e5:59:50:14:d3:c5:
                    f8:a4:6b:10:6e:01:90:b4:ae:86:63:fc:3d:b9:34:
                    13:12:96:e1:2a:19:6e:d6:d1:74:66:1d:ce:e8:49:
                    ec:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2D:6A:2A:69:3D:1D:82:BE:9F:0E:A7:AC:39:EF:69:18:82:3D:41
            X509v3 Authority Key Identifier:
                keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3373DB98902C11EA898EFD7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.192.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:92:70:4b:88:c0:fc:9c:b5:4a:d6:09:99:c0:9d:c2:2d:a2:
         09:cc:b8:43:10:9b:0e:5e:af:bf:1c:28:87:7e:54:e7:be:91:
         e5:eb:e7:d5:9c:3b:fb:1f:52:c1:d3:7f:00:03:df:4d:8a:97:
         78:d0:72:c8:e4:df:24:1d:f2:44:7f:48:43:2c:6d:4f:13:28:
         d0:c3:08:e0:7e:66:4a:fe:aa:ba:75:01:26:11:11:96:b3:dd:
         e8:e9:06:71:ae:1f:e8:ae:83:a2:47:bb:a6:37:d0:fe:34:5e:
         69:03:6f:f2:f5:8d:1c:8e:e4:d0:8c:dd:7d:af:0e:24:37:f1:
         4b:43:a3:cd:f9:33:70:c5:49:b8:49:a7:6e:62:eb:61:f7:ed:
         e3:5a:45:6f:32:86:7b:4e:e2:cd:e3:f4:e2:21:67:e5:87:e8:
         d1:14:17:5e:d0:3a:16:00:b3:68:21:ff:a6:76:ee:5b:14:8f:
         d9:22:10:f9:36:bf:36:02:15:fa:cd:bd:de:57:2b:59:2f:25:
         18:56:99:fd:f6:f1:f7:dc:4a:d9:ce:4e:74:e4:5f:28:9e:25:
         ea:52:1e:d0:fc:57:c5:61:5d:47:1b:25:30:cf:8d:10:62:cd:
         a6:8e:d3:2d:63:1c:23:5a:d0:46:15:5f:ce:5d:21:ee:e0:85:
         a2:87:4e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----