This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/804B8FA6E91511EE8B622417C4F9AE02.roa
File:                     804B8FA6E91511EE8B622417C4F9AE02.roa (raw, json)
Hash identifier:          vZlTBy4QrOeCeoWkpivJW18p4FYj+ddAXtp5Tv0DMwU=
Subject key identifier:   87:C6:D2:16:C4:78:B4:71:10:6A:BA:1A:01:CD:AB:37:27:7F:2F:22
Certificate issuer:       /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Certificate serial:       019E
Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/804B8FA6E91511EE8B622417C4F9AE02.roa
Signing time:             Wed 01 Oct 2025 04:31:28 +0000
ROA not before:           Wed 01 Oct 2025 04:31:28 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     137883
IP address blocks:        103.253.177.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 01 Oct 2025 11:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
        Validity
            Not Before: Oct  1 04:31:28 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68dcaea0-2ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:42:c3:7c:f7:13:f2:d5:b5:eb:19:51:d8:ae:
                    0a:2a:c2:bb:55:79:e4:41:a4:37:62:cd:85:47:26:
                    07:bc:5c:1a:85:9f:4a:9d:bc:0a:d3:d9:2a:cc:77:
                    5f:62:00:60:fc:89:51:ce:23:4a:a8:9b:86:c9:33:
                    25:11:5c:2d:b6:02:e1:78:d9:ab:88:a6:2a:b5:ef:
                    a7:b4:86:26:f5:35:42:82:f4:ea:ab:a8:5b:b7:c7:
                    83:0e:3b:6e:60:38:02:6b:fe:b4:b2:87:0a:c5:c4:
                    39:88:aa:5d:47:fc:4e:9f:ce:1f:f9:6d:79:24:c3:
                    a9:85:f5:0e:16:32:fd:c0:53:e8:e9:34:c5:47:6d:
                    f9:ab:da:5e:47:b4:e3:2d:c1:8f:50:4e:33:fd:f3:
                    0b:a3:f8:ff:40:9d:a7:6e:3a:66:ca:90:9f:6e:48:
                    01:41:ee:b9:4b:6b:cd:66:c4:1d:36:4a:39:f3:c7:
                    2e:11:76:08:c5:8a:11:83:ff:f3:6c:a5:44:d8:a6:
                    5a:fc:6f:6e:45:24:1b:9d:87:ae:25:91:b7:3c:0a:
                    43:fe:ad:54:f4:4d:ad:30:2a:a7:07:86:25:33:06:
                    8d:46:21:96:f9:fd:65:b0:09:87:05:25:09:58:f5:
                    89:76:f7:63:4a:43:3e:7f:1f:4a:59:c5:d7:11:69:
                    f0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C6:D2:16:C4:78:B4:71:10:6A:BA:1A:01:CD:AB:37:27:7F:2F:22
            X509v3 Authority Key Identifier:
                keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/804B8FA6E91511EE8B622417C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.253.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:c2:fb:d5:86:60:af:82:1d:ea:f6:a0:c5:bc:28:26:6f:0c:
         2b:6a:de:e5:d0:b1:03:43:81:28:8e:e0:97:83:2d:f0:36:98:
         c8:5a:d3:04:5c:b6:41:c6:3a:72:c6:bd:d6:ed:c9:68:d8:20:
         fa:6b:ac:17:d9:bf:03:ea:52:d2:cb:c4:93:5e:bc:2c:ed:e3:
         9d:7b:f2:71:4e:6c:e5:9e:2c:b9:4b:71:d7:f3:ec:5e:a5:27:
         8a:30:dc:fd:1f:cd:4d:b1:61:a2:66:2f:71:c9:42:e6:ba:3b:
         ac:88:96:c7:d9:3e:2c:e3:ec:fe:c0:c0:39:fa:ad:2d:2b:3b:
         15:b0:91:62:64:e8:c2:b8:59:56:df:cc:5a:ee:6a:73:4c:9d:
         df:8d:db:d8:a0:37:c8:ff:5b:d9:6c:58:43:47:0a:fa:b3:73:
         3b:11:9f:ed:99:79:2d:af:02:1f:69:ff:df:f8:00:d5:77:fa:
         3d:13:8a:bf:48:40:0a:21:48:f8:a7:b8:5a:f2:98:f3:c8:a5:
         a7:2f:58:9e:0b:0c:2f:0d:b5:c8:44:d9:1b:b7:c5:70:a6:8f:
         b8:d0:14:e5:10:ef:19:be:01:be:1e:86:5c:68:61:eb:66:88:
         d1:9a:4e:ca:df:da:46:13:75:84:7d:63:07:c7:2c:f5:02:82:
         d9:72:96:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:29:37 2025 by rpki-client