This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/6B9538F223DD11EF81EBB933C4F9AE02.roa
File:                     6B9538F223DD11EF81EBB933C4F9AE02.roa (raw, json)
Hash identifier:          Qqy4u5Du4YJjLwWpq0dlcmlkR6uc3a3M7nv191S71u8=
Subject key identifier:   D2:33:32:17:17:27:6A:B0:31:C7:73:BC:4B:88:A9:7A:43:F9:EF:E3
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       37B3
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/6B9538F223DD11EF81EBB933C4F9AE02.roa
Signing time:             Fri 18 Apr 2025 14:50:42 +0000
ROA not before:           Fri 18 Apr 2025 14:50:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149283
IP address blocks:        115.186.104.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 31 Jul 2025 07:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14259 (0x37b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Apr 18 14:50:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=680266c2-fb2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:be:13:3d:03:f9:ef:07:2c:ca:69:33:34:ca:
                    e8:9e:56:2f:ae:ce:df:0d:62:22:3f:bf:a2:af:fd:
                    c4:90:9e:97:70:65:39:96:e2:d4:a9:38:a7:b2:b8:
                    29:a7:d9:68:7f:22:8f:e5:69:bb:0c:36:3d:39:88:
                    5a:ed:67:68:7a:cb:4e:d9:d2:46:e1:30:c6:c6:90:
                    c6:5a:d6:6e:12:30:94:7e:c1:ba:bc:ed:7e:68:e7:
                    0c:b1:eb:ab:bf:7c:a1:65:23:57:28:df:30:5c:42:
                    af:8f:ff:d9:97:f3:0f:75:45:56:f6:44:4c:1e:60:
                    76:89:8b:15:af:02:7c:02:27:a9:fe:1e:80:76:40:
                    49:83:c3:9e:70:ce:02:ee:2c:47:55:7f:15:c0:f2:
                    4c:7f:55:d2:f9:de:43:07:49:f8:f3:55:e4:4a:00:
                    62:da:5d:b9:e0:8a:d1:fc:87:c4:19:73:d3:08:de:
                    40:7c:5a:2a:0d:c3:21:06:b3:0b:f1:a0:2a:48:db:
                    39:f7:52:86:d9:44:41:8c:3c:a4:9b:52:5d:01:1f:
                    6e:e9:4d:6e:fa:be:84:98:f2:78:34:18:e0:fa:c0:
                    7b:bc:9d:95:e9:ab:89:da:af:11:61:84:a4:8d:60:
                    0f:2d:9f:e5:4f:84:f8:42:bf:19:34:f2:b7:03:a1:
                    bb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:33:32:17:17:27:6A:B0:31:C7:73:BC:4B:88:A9:7A:43:F9:EF:E3
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/6B9538F223DD11EF81EBB933C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.186.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:3f:bc:fc:2a:97:d4:c0:51:46:6f:77:7e:78:60:32:c6:c7:
         25:38:c9:35:47:93:1c:12:16:0f:e7:d2:9e:d4:ed:4a:09:a8:
         0e:12:db:4e:23:eb:42:df:eb:41:3c:11:df:d7:27:a2:e6:c9:
         ab:f9:1c:64:79:82:f3:b4:dd:50:5f:94:57:96:17:4c:82:92:
         74:e8:5d:68:6c:50:e2:75:7a:66:d2:a0:41:3c:1e:01:7a:7d:
         45:e7:36:98:0b:01:e5:61:fd:ad:80:a6:71:65:d4:51:7d:6f:
         60:8b:9a:18:41:f1:4c:eb:44:92:58:97:6d:fb:01:bb:f9:63:
         58:13:c2:c4:22:b0:3f:0b:ed:51:2b:2f:09:1d:78:02:3c:41:
         17:a2:a9:9d:5c:bf:7e:85:f2:3e:2d:48:10:53:04:49:c9:48:
         b6:4d:b0:b3:76:2a:00:78:1e:4c:62:a1:da:99:f6:91:4c:3a:
         45:ed:72:34:a4:6e:a2:a7:f2:f1:83:0c:de:c4:5a:ba:5b:a6:
         d5:64:1a:7f:ab:a5:62:8a:19:0a:84:d9:2c:01:e8:c5:24:24:
         82:45:7b:e3:df:9a:82:8e:e3:7c:5b:09:fe:41:f8:ff:ff:b1:
         34:c8:47:76:74:97:65:c7:35:1d:a0:ad:84:8f:5f:e9:b8:70:
         25:e9:59:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----