This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/C40F099A1E7411EF818FAE6CC4F9AE02.roa
File:                     C40F099A1E7411EF818FAE6CC4F9AE02.roa (raw, json)
Hash identifier:          w5NAwwcfp5jSAzjluHzaCOTn0gyDxdKa0iABDN7SxIY=
Subject key identifier:   61:AA:6B:B4:8D:71:B2:A8:13:DF:DC:87:72:A8:FA:53:E8:2C:4A:C6
Certificate issuer:       /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547
Certificate serial:       25E0
Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/C40F099A1E7411EF818FAE6CC4F9AE02.roa
Signing time:             Fri 28 Nov 2025 14:30:13 +0000
ROA not before:           Fri 28 Nov 2025 14:30:13 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139591
IP address blocks:        209.15.120.0/24 maxlen: 24
                          209.15.121.0/24 maxlen: 24
                          209.15.122.0/24 maxlen: 24
                          209.15.123.0/24 maxlen: 24
                          209.15.124.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9696 (0x25e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547
        Validity
            Not Before: Nov 28 14:30:13 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6929b1f5-442c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cf:3f:83:15:e8:6b:66:65:68:04:16:e9:91:
                    ff:fd:ee:c5:aa:d7:de:55:23:95:40:43:e3:fd:26:
                    01:67:3c:68:97:94:34:54:29:95:a9:4f:7e:db:b2:
                    67:36:1f:e0:45:98:0f:53:de:a8:3d:ae:03:d9:bf:
                    c8:15:ed:77:7c:28:bb:00:89:9e:2e:7c:f7:52:00:
                    70:93:b0:9d:82:ca:e6:4a:3d:4e:8c:52:f4:ab:fc:
                    a4:7e:52:ea:79:70:0d:c2:4f:82:7c:9d:3d:14:fd:
                    6a:ad:f7:b4:d9:62:b0:fc:74:ee:1d:a9:44:6b:84:
                    65:4f:80:8a:85:de:11:8d:8f:9f:6f:7d:e1:f7:3a:
                    f0:7c:64:09:0a:88:7f:4f:58:19:3f:96:4f:64:01:
                    41:4d:18:10:a7:26:95:21:86:00:8f:8c:d8:76:e7:
                    43:b2:11:43:5a:4d:8f:5b:16:e6:c1:6b:f2:54:6b:
                    37:b0:91:4e:39:f5:11:60:ff:7c:ea:a4:97:c6:1f:
                    f7:76:6a:4f:01:a4:03:2c:f1:80:be:1d:58:3d:2d:
                    91:a9:88:48:28:33:bc:87:73:6c:f4:28:97:5e:15:
                    a2:fe:17:40:32:e6:49:03:88:69:eb:7d:b7:1d:6a:
                    a3:3a:ed:ab:06:fb:13:6f:b0:82:9d:5d:d1:b9:6e:
                    55:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AA:6B:B4:8D:71:B2:A8:13:DF:DC:87:72:A8:FA:53:E8:2C:4A:C6
            X509v3 Authority Key Identifier:
                keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/C40F099A1E7411EF818FAE6CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.15.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:89:41:79:4a:ea:80:92:12:e9:27:ba:2a:c3:e4:e3:9e:e4:
         b1:48:78:dc:36:cd:e0:b9:3d:f3:7c:13:bb:8e:f4:89:55:69:
         89:ff:18:5e:77:0c:d8:5f:8e:e4:53:ad:d0:d3:03:31:4e:ef:
         4c:a7:67:d8:3b:4b:b0:75:ed:3f:98:7c:1b:e5:c8:68:98:7e:
         77:cb:a5:0c:e7:40:04:25:d0:f5:71:4b:ff:e6:17:b2:b7:d5:
         a8:99:49:aa:91:08:40:b5:76:a4:8f:24:f7:13:47:85:f6:a7:
         c8:75:02:80:00:47:fa:59:bc:a2:1f:ff:28:da:c3:f4:39:68:
         de:81:35:b6:74:f7:e7:79:85:0e:42:c4:b0:24:df:f8:0b:2a:
         bc:b4:4b:80:0a:d0:b7:1c:91:92:9e:24:4a:4e:14:d9:31:68:
         c7:e6:f1:21:69:2e:e9:34:f6:a7:38:9a:21:07:d4:ca:e8:1c:
         fc:cc:b4:cb:42:e2:26:58:0d:be:a3:f3:bf:37:e3:7a:a9:af:
         6a:eb:5c:58:6b:dc:b4:64:46:83:fa:43:f0:43:4e:46:4c:f9:
         24:63:0d:ba:a8:4b:eb:cf:65:2c:f7:84:52:54:7d:33:2f:41:
         45:4b:b2:bf:65:e0:2f:61:10:51:d6:45:4b:4d:31:ad:df:91:
         6e:73:3a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----