This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/87B992CE90E211EDB4035D5EC4F9AE02.roa
File:                     87B992CE90E211EDB4035D5EC4F9AE02.roa (raw, json)
Hash identifier:          NIlEQdl6PAFgsHqhcHh+K69dvSA0DFG1DmXarAAlQfY=
Subject key identifier:   4E:56:4F:EF:C8:DF:1D:70:7D:95:58:93:AD:61:0F:14:77:08:A0:12
Certificate issuer:       /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547
Certificate serial:       25E1
Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/87B992CE90E211EDB4035D5EC4F9AE02.roa
Signing time:             Fri 28 Nov 2025 14:30:14 +0000
ROA not before:           Fri 28 Nov 2025 14:30:14 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139888
IP address blocks:        45.157.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9697 (0x25e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547
        Validity
            Not Before: Nov 28 14:30:14 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6929b1f6-5c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:14:79:29:4c:60:09:14:4e:02:df:5e:d2:
                    0c:3f:99:ae:3c:a9:1f:ef:26:94:44:40:1d:c9:b1:
                    3b:dc:f5:01:f9:b7:a5:85:04:cb:fb:28:21:1c:bb:
                    e0:38:76:f9:6c:68:10:37:d4:45:66:57:57:8e:64:
                    de:53:0d:33:78:b2:d2:42:ac:5f:a4:f8:90:f5:7b:
                    5c:a5:f4:dc:83:be:af:bd:4d:03:24:0d:9e:7f:91:
                    c5:88:97:22:29:0c:c3:fc:60:71:07:40:ad:d6:33:
                    e7:9c:49:99:ae:5d:6c:94:46:65:53:54:a2:d6:14:
                    ce:e3:46:91:31:ef:13:63:e2:e3:14:5f:64:57:43:
                    7e:0c:44:eb:a2:aa:25:47:31:9f:5a:dd:7a:9a:9b:
                    b0:4d:07:f4:e6:d3:3c:df:84:ba:a5:ad:b4:c9:8d:
                    57:95:97:ba:d9:8e:22:75:cf:2a:d2:4f:fd:15:b7:
                    f4:7e:da:28:27:6a:a1:a2:c8:0e:76:ee:35:37:56:
                    cf:85:a5:ff:42:ff:52:a0:bd:fc:bc:ed:26:dc:66:
                    89:c7:5e:8c:01:05:3a:14:0b:65:41:31:c9:dd:af:
                    6a:25:5b:1b:a2:33:89:d5:18:2d:08:b1:d5:2f:7d:
                    2f:19:b4:c5:43:32:bc:0c:86:a3:dd:13:8a:4f:b9:
                    a0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:56:4F:EF:C8:DF:1D:70:7D:95:58:93:AD:61:0F:14:77:08:A0:12
            X509v3 Authority Key Identifier:
                keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/87B992CE90E211EDB4035D5EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:80:64:6e:91:d9:e5:d2:35:53:12:bc:32:31:6a:a6:8c:1e:
         f0:23:5d:e9:c9:be:c2:6d:8f:ea:d2:f3:97:63:85:dd:74:49:
         8f:30:2e:72:b0:bc:e3:0d:80:60:de:98:13:b5:c2:b5:09:0b:
         22:f5:f5:88:10:29:ba:89:cc:e3:ae:f2:da:2d:54:dd:98:96:
         90:91:87:dd:25:91:f3:95:a6:53:a5:5e:ea:2e:61:3b:15:a0:
         a4:a3:fd:78:02:37:fc:ea:1f:61:f6:e3:7f:23:2c:97:70:a5:
         8f:54:fc:4d:bf:9f:d5:aa:9a:0d:12:67:cb:b8:52:b4:50:6f:
         c8:9f:ba:1e:bf:de:2b:2b:c1:79:82:50:97:4b:50:2c:04:28:
         da:c9:f9:3c:d6:93:50:8b:9a:4b:91:5e:ae:e0:29:ba:51:0a:
         a7:b4:a8:d6:33:93:45:7f:d6:bc:ee:58:fa:9f:6d:1f:5b:78:
         d4:41:02:5e:04:3f:f9:0a:97:30:ce:16:e2:ba:98:02:8e:12:
         04:0b:b0:ca:3e:20:a6:41:05:28:ec:fa:7c:83:26:ab:8e:e3:
         f8:aa:92:b2:83:70:89:2f:cc:2d:13:4d:21:0f:e6:61:dd:1d:
         1e:33:04:2d:b9:9c:2d:99:41:ce:f1:b6:a2:45:ee:e7:82:8a:
         c9:86:0f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 19:13:41 2026 by rpki-client