This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/2E56630C741611EE98997122C4F9AE02.roa
File:                     2E56630C741611EE98997122C4F9AE02.roa (raw, json)
Hash identifier:          FTdksYAPtL6KxVRO7wBS43WZULmUppcGY8r0gij6vk8=
Subject key identifier:   9A:7C:43:6A:46:1E:6F:3C:DB:32:3F:2A:B5:65:7B:62:99:30:AC:01
Certificate issuer:       /CN=A91A1AC4/serialNumber=1F092BF0E367FDA5146D287D8102B26EC8FB82B5
Certificate serial:       0320
Authority key identifier: 1F:09:2B:F0:E3:67:FD:A5:14:6D:28:7D:81:02:B2:6E:C8:FB:82:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/2E56630C741611EE98997122C4F9AE02.roa
Signing time:             Thu 09 Oct 2025 01:27:53 +0000
ROA not before:           Thu 09 Oct 2025 01:27:53 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     137409
IP address blocks:        202.73.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800 (0x320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1AC4, serialNumber=1F092BF0E367FDA5146D287D8102B26EC8FB82B5
        Validity
            Not Before: Oct  9 01:27:53 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68e70f99-47d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:22:b7:4f:ef:97:45:2d:6e:8e:9e:99:70:cb:
                    fa:16:c1:c7:2d:20:5a:26:81:a7:c0:c5:d7:05:93:
                    1b:27:18:67:4f:a5:5c:97:c8:6a:1d:ea:71:ef:40:
                    bc:c7:2c:9e:6b:7d:a0:91:a6:23:8b:33:71:92:4b:
                    54:a9:48:48:26:ef:64:17:29:68:b4:ae:f6:15:93:
                    90:fb:6c:ad:98:9d:d5:48:63:d5:54:ff:f3:ac:77:
                    b8:d6:75:3d:5d:d3:0b:2a:a6:d1:82:82:7e:13:7f:
                    91:28:3e:5e:5e:fa:d9:c4:49:ea:dd:d9:ec:67:43:
                    02:cb:be:21:fd:8a:77:b9:ab:c4:ae:f5:a2:42:de:
                    e2:c0:db:7d:9e:59:8c:87:87:43:24:bf:64:03:72:
                    f4:a0:35:c1:63:71:a5:0c:c9:40:47:52:bf:3f:79:
                    94:75:76:62:bf:28:79:61:fe:cd:64:35:81:65:64:
                    5b:b4:58:3e:b5:22:81:52:1f:56:ab:65:a5:13:91:
                    89:75:dc:eb:e3:24:4e:15:4e:61:eb:21:cb:4b:bb:
                    6f:c0:85:11:3a:e4:ba:9d:10:81:36:c2:1c:b1:c3:
                    99:68:5d:19:c2:a0:33:13:27:2b:a5:f5:21:a8:ad:
                    9f:66:aa:f4:c2:f1:50:aa:18:60:9f:46:dd:61:58:
                    65:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7C:43:6A:46:1E:6F:3C:DB:32:3F:2A:B5:65:7B:62:99:30:AC:01
            X509v3 Authority Key Identifier:
                keyid:1F:09:2B:F0:E3:67:FD:A5:14:6D:28:7D:81:02:B2:6E:C8:FB:82:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/2E56630C741611EE98997122C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.73.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:2e:a8:53:a2:30:76:7d:b3:14:52:91:03:d7:d2:e6:d2:8b:
         ee:9e:53:e9:ce:df:11:c7:07:5a:a5:d0:55:da:59:a1:36:e2:
         97:49:5d:b1:39:48:ae:cc:2a:96:e0:d0:a8:03:15:08:a0:83:
         75:5d:21:7e:ae:40:cb:f7:62:a4:b0:05:82:b8:a1:7c:d0:dc:
         e5:91:4c:55:ef:cb:9b:2b:69:e3:34:50:01:6b:68:0e:91:36:
         44:ee:80:13:e5:7b:c7:9e:35:96:a8:31:75:97:7d:6b:63:58:
         d5:b4:0f:cb:09:a3:c1:3c:ab:53:47:a7:ca:28:3c:7e:20:7a:
         ac:36:98:be:3f:7d:43:9f:73:27:aa:7d:da:20:ae:cf:91:ea:
         0e:6b:73:09:62:3c:78:f6:4a:30:61:60:62:b0:0a:18:e2:cb:
         0c:29:0d:d6:1c:be:f8:1e:33:ca:04:05:49:31:7c:ca:ae:59:
         8e:1b:01:29:a1:67:a6:ef:77:22:cf:18:6c:4d:6f:09:9b:83:
         0c:ce:48:1c:de:83:a6:e6:78:22:c8:5b:86:c4:52:a0:44:39:
         ce:62:78:7c:bd:37:1f:44:a9:94:71:fa:c4:15:f5:80:00:b7:
         88:0d:64:8f:69:cd:df:15:10:5d:dc:17:f4:57:1a:52:78:60:
         c3:90:de:f4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTFBQzQxMTAvBgNVBAUTKDFGMDkyQkYwRTM2N0ZEQTUxNDZEMjg3RDgxMDJCMjZF
QzhGQjgyQjUwHhcNMjUxMDA5MDEyNzUzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGU3MGY5OS00N2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0SK3T++XRS1ujp6ZcMv6FsHHLSBaJoGnwMXXBZMbJxhnT6Vcl8hqHepx70C8
xyyea32gkaYjizNxkktUqUhIJu9kFylotK72FZOQ+2ytmJ3VSGPVVP/zrHe41nU9
XdMLKqbRgoJ+E3+RKD5eXvrZxEnq3dnsZ0MCy74h/Yp3uavErvWiQt7iwNt9nlmM
h4dDJL9kA3L0oDXBY3GlDMlAR1K/P3mUdXZivyh5Yf7NZDWBZWRbtFg+tSKBUh9W
q2WlE5GJddzr4yROFU5h6yHLS7tvwIUROuS6nRCBNsIcscOZaF0ZwqAzEycrpfUh
qK2fZqr0wvFQqhhgn0bdYVhllwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJp8Q2pG
Hm882zI/KrVle2KZMKwBMB8GA1UdIwQYMBaAFB8JK/DjZ/2lFG0ofYECsm7I+4K1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUFDNC8xQ0I1M0YzMEY2
QjExMUVDOUNBQUIzNERDNEY5QUUwMi9Id2tyOE9Obl9hVVViU2g5Z1FLeWJzajdn
clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h3a3I4T05uX2FVVWJTaDlnUUt5YnNqN2dyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTFBQzQvMUNCNTNGMzBGNkIxMTFFQzlDQUFCMzREQzRGOUFFMDIvMkU1NjYzMEM3
NDE2MTFFRTk4OTk3MTIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKSQUwDQYJKoZIhvcNAQELBQADggEBAFQuqFOiMHZ9sxRS
kQPX0ubSi+6eU+nO3xHHB1ql0FXaWaE24pdJXbE5SK7MKpbg0KgDFQigg3VdIX6u
QMv3YqSwBYK4oXzQ3OWRTFXvy5sraeM0UAFraA6RNkTugBPle8eeNZaoMXWXfWtj
WNW0D8sJo8E8q1NHp8ooPH4geqw2mL4/fUOfcyeqfdogrs+R6g5rcwliPHj2SjBh
YGKwChjiywwpDdYcvvgeM8oEBUkxfMquWY4bASmhZ6bvdyLPGGxNbwmbgwzOSBze
g6bmeCLIW4bEUqBEOc5ieHy9Nx9EqZRx+sQV9YAAt4gNZI9pzd8VEF3cF/RXGlJ4
YMOQ3vQ=
-----END CERTIFICATE-----