This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/E7D3D36A406911EC83A0470DC4F9AE02.roa
File:                     E7D3D36A406911EC83A0470DC4F9AE02.roa (raw, json)
Hash identifier:          NyWXTCS8BpABeAm9HuB7/kUGpmDUT6s+5pftbugBH8M=
Subject key identifier:   D5:AE:6E:F6:75:04:67:2F:49:32:02:8C:4A:9C:C1:50:D3:64:56:0C
Certificate issuer:       /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547
Certificate serial:       25DF
Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/E7D3D36A406911EC83A0470DC4F9AE02.roa
Signing time:             Fri 28 Nov 2025 14:30:13 +0000
ROA not before:           Fri 28 Nov 2025 14:30:13 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     135566
IP address blocks:        209.15.96.0/24 maxlen: 24
                          209.15.97.0/24 maxlen: 24
                          209.15.98.0/24 maxlen: 24
                          209.15.99.0/24 maxlen: 24
                          209.15.100.0/24 maxlen: 24
                          209.15.101.0/24 maxlen: 24
                          209.15.102.0/24 maxlen: 24
                          209.15.103.0/24 maxlen: 24
                          209.15.104.0/24 maxlen: 24
                          209.15.105.0/24 maxlen: 24
                          209.15.106.0/24 maxlen: 24
                          209.15.107.0/24 maxlen: 24
                          209.15.108.0/24 maxlen: 24
                          209.15.109.0/24 maxlen: 24
                          209.15.110.0/24 maxlen: 24
                          209.15.111.0/24 maxlen: 24
                          209.15.112.0/24 maxlen: 24
                          209.15.113.0/24 maxlen: 24
                          209.15.114.0/24 maxlen: 24
                          209.15.115.0/24 maxlen: 24
                          209.15.116.0/24 maxlen: 24
                          209.15.117.0/24 maxlen: 24
                          209.15.118.0/24 maxlen: 24
                          209.15.119.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9695 (0x25df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547
        Validity
            Not Before: Nov 28 14:30:13 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6929b1f5-35b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ce:f1:7e:10:52:9c:0e:d7:0c:4e:07:5f:bc:
                    1d:69:1e:f0:cf:32:c4:d1:4e:76:e8:e2:89:9c:e7:
                    c2:9d:89:c3:4c:ad:20:68:32:9f:90:b0:59:7d:21:
                    79:35:dc:e4:f3:32:78:6b:55:9f:8e:ae:95:04:cd:
                    db:00:7b:04:2e:ed:c6:09:21:82:d3:63:38:03:80:
                    95:24:6f:5c:99:7b:b1:0e:96:3e:44:a0:17:56:d4:
                    cf:28:fc:42:93:a7:4f:3d:bd:91:2f:e2:0e:7d:4f:
                    96:87:71:ce:ee:1b:81:b3:5c:e8:e9:37:0e:64:00:
                    42:55:fa:03:0f:db:b9:db:01:5b:f3:5c:f8:ff:32:
                    5a:ff:f1:45:32:4f:52:f9:a7:0f:7d:dc:ff:0f:d2:
                    d1:8f:ef:0d:9f:e3:3e:92:5f:1f:77:08:c4:5c:b5:
                    dd:26:aa:60:1d:1b:c5:1d:ca:8e:06:7e:f0:a6:b7:
                    5f:fd:91:59:43:55:f9:0d:1d:6b:93:d2:43:ef:a1:
                    f4:62:0e:42:17:43:38:8b:57:bb:cd:14:02:bf:9c:
                    70:99:26:a4:eb:c9:94:2c:01:71:0c:62:d7:9f:af:
                    13:2a:ea:1a:04:34:e7:49:f7:ae:37:2f:f5:70:4c:
                    dc:28:66:e0:a7:a3:d3:89:d7:62:f9:56:b3:4a:f6:
                    ba:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AE:6E:F6:75:04:67:2F:49:32:02:8C:4A:9C:C1:50:D3:64:56:0C
            X509v3 Authority Key Identifier:
                keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/E7D3D36A406911EC83A0470DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.15.96.0-209.15.119.255

    Signature Algorithm: sha256WithRSAEncryption
         1e:2d:ef:5c:32:1e:48:f7:7c:aa:b1:3d:bd:e4:7d:c4:36:2d:
         49:74:cc:90:4b:a5:be:3a:5e:26:68:9a:58:b6:27:13:43:73:
         0d:f2:5b:f8:86:1a:61:bf:b8:26:61:1e:84:46:b7:89:1f:a1:
         11:97:1c:f8:41:9d:88:5f:70:ee:35:4d:14:2e:80:06:fd:7c:
         dc:6b:f8:9b:60:7f:9b:6c:5f:1f:6f:32:4b:82:22:2a:8f:79:
         fb:2a:df:7e:27:1a:22:a0:5a:62:62:f1:71:1e:2b:26:28:84:
         bf:6d:a4:d5:bc:50:13:d0:b9:7d:4d:dc:fd:08:cc:69:6d:a4:
         69:fb:c8:e9:0d:eb:d2:1e:cb:71:b5:e0:8a:3e:8d:6f:d6:d5:
         62:f0:09:e0:12:c0:d7:0b:71:b5:9e:f7:02:f6:7d:12:5b:cc:
         97:e6:6e:bf:b2:44:8c:5d:4a:45:6e:06:27:0f:3c:05:f3:f5:
         d2:3b:c7:dd:39:3e:12:03:bf:c2:91:f4:28:56:12:28:88:25:
         0d:31:04:9d:72:11:85:c3:64:1f:6c:11:49:9c:ec:62:9e:aa:
         90:63:dd:d2:b5:7e:3b:fa:4a:83:af:6e:0c:56:72:1f:78:99:
         ef:4a:e0:73:a4:40:da:29:c4:e8:06:ac:b7:58:26:c9:30:d5:
         b7:2e:e6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 14:24:33 2026 by rpki-client