This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/09E08BBCDFA711EFB305A80EC4F9AE02.roa
File:                     09E08BBCDFA711EFB305A80EC4F9AE02.roa (raw, json)
Hash identifier:          IGeGA0ZZ1EO4RqHXThTxDsxqQ9h+0Ui1w6WOzOkMv7M=
Subject key identifier:   EE:42:53:6A:C6:15:72:5B:9C:D1:0B:9C:F9:7D:E8:4E:1D:B4:AA:8F
Certificate issuer:       /CN=A9158491/serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6
Certificate serial:       0C
Authority key identifier: 61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/09E08BBCDFA711EFB305A80EC4F9AE02.roa
Signing time:             Tue 04 Feb 2025 21:45:49 +0000
ROA not before:           Tue 04 Feb 2025 21:45:49 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     152565
IP address blocks:        163.61.38.0/24 maxlen: 24
                          163.61.39.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 04 Feb 2025 21:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158491, serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6
        Validity
            Not Before: Feb  4 21:45:49 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67a28a8d-cdec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b2:15:e8:52:4c:7b:cc:d8:45:fb:51:9f:64:
                    29:56:81:86:32:4b:f9:cb:0f:4c:ea:7c:9c:35:d9:
                    4f:a6:cd:a8:46:cb:8a:0a:9e:91:ea:55:a2:5f:3f:
                    78:15:28:70:c6:a1:29:19:0c:77:aa:56:64:ab:8b:
                    17:c1:18:fd:a3:59:e0:cd:0c:3d:a3:09:16:0c:9e:
                    e3:b1:ef:25:f4:60:99:c0:76:f3:4a:ab:a4:1b:74:
                    e2:55:64:ee:f4:ab:66:f4:1c:15:f4:c6:e0:c9:12:
                    88:d2:ae:a1:48:f2:92:a1:25:db:f1:25:c8:50:00:
                    d4:90:00:26:9b:3d:fe:51:48:3c:04:d2:dc:ac:89:
                    2e:75:1f:01:b4:01:86:78:97:d1:2f:3d:1a:ff:e1:
                    03:c6:ab:63:ba:25:e2:71:bf:dd:09:e6:fb:25:c0:
                    0d:d1:00:db:1c:70:58:ad:a9:bd:10:71:f6:4b:a2:
                    76:be:51:5e:58:e2:ec:02:6d:80:5c:e0:5b:2d:6e:
                    d3:6e:1a:8a:0f:f5:73:06:0c:44:df:54:12:3e:2e:
                    52:4e:e7:4a:36:8d:8e:a2:26:66:db:c1:87:1f:30:
                    24:65:3c:eb:50:08:58:91:de:8e:db:7e:40:65:a1:
                    6b:a2:80:e4:be:7c:84:6e:d0:85:4b:53:c7:5d:e0:
                    ad:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:42:53:6A:C6:15:72:5B:9C:D1:0B:9C:F9:7D:E8:4E:1D:B4:AA:8F
            X509v3 Authority Key Identifier:
                keyid:61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/09E08BBCDFA711EFB305A80EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:c0:55:c8:60:25:5b:03:ae:f0:b4:1a:23:2e:6e:63:ce:8a:
         79:7c:68:ce:72:33:98:44:c9:6c:4a:56:2c:84:4e:24:d1:51:
         cf:3c:89:72:a1:64:5e:8f:c2:a8:23:39:e1:bd:f2:15:79:ff:
         ae:63:7d:a2:3f:6c:6d:3e:c9:bb:9c:49:aa:04:36:49:53:0d:
         82:b0:3c:e8:eb:d5:4f:01:51:be:c9:96:10:03:d9:2c:5f:1f:
         b3:a0:43:76:ff:91:ff:31:7c:49:11:d8:71:2f:a4:6b:39:a1:
         c2:91:18:4b:c1:6a:f6:63:1a:01:ac:fe:19:83:8f:30:8d:94:
         bd:fa:da:ad:e7:74:ac:7a:cc:15:6c:40:b0:25:f3:58:78:77:
         32:ab:f9:82:18:23:26:7f:31:5e:2a:69:4a:6f:16:16:ec:56:
         3a:74:43:de:dd:0e:17:e9:95:a7:e6:be:72:5b:61:ae:43:df:
         9f:69:99:c4:0d:cb:5b:05:bf:d8:75:ff:d0:28:c8:cf:d7:c8:
         ec:9c:be:3d:a8:92:f0:0c:5b:51:cc:84:19:dc:2d:de:71:00:
         52:a2:42:51:d5:8a:24:0e:a9:fe:60:45:26:fe:b6:1a:7c:a7:
         c8:4f:67:7d:84:a6:26:4b:80:92:08:9f:66:0c:54:5b:fe:35:
         c4:38:64:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----