This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/B351D67E295D11F0B6373D85C4F9AE02.roa
File:                     B351D67E295D11F0B6373D85C4F9AE02.roa (raw, json)
Hash identifier:          kCxJ1uJqd8XteM3dWXljhpZLphCguXkrnlFI2rWJfas=
Subject key identifier:   74:08:54:06:1A:8F:A2:9B:3E:1A:71:B9:A0:3F:35:2E:63:02:5F:26
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       04AC
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/B351D67E295D11F0B6373D85C4F9AE02.roa
Signing time:             Tue 15 Jul 2025 01:30:26 +0000
ROA not before:           Tue 15 Jul 2025 01:30:26 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     150110
IP address blocks:        203.32.21.0/24 maxlen: 24
                          203.32.28.0/24 maxlen: 24
                          203.32.32.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 16 Jul 2025 08:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1196 (0x4ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jul 15 01:30:26 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6875af31-4a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:82:c9:1a:e0:39:7c:94:4e:1a:c6:73:13:01:
                    a2:41:75:3b:27:f5:fc:a2:4d:23:60:9b:eb:d5:cc:
                    0b:2a:b0:11:13:74:20:0c:9a:5a:9a:24:f3:8f:1d:
                    03:5d:1b:7d:34:5f:a0:95:2d:cf:9e:88:db:8c:95:
                    8f:22:7c:8d:aa:4a:e0:36:3c:70:52:ce:bb:21:17:
                    53:a6:0e:7d:16:d6:6b:fc:ff:03:be:c2:20:7e:ca:
                    cc:23:57:82:55:db:57:da:dd:39:3a:25:8a:e5:1d:
                    eb:31:4a:73:1a:e8:9f:0f:cd:fd:74:3d:02:a5:00:
                    ce:50:47:b3:a8:4a:8c:af:02:be:6a:4a:0b:22:bc:
                    2a:9f:56:d6:ab:fb:66:34:12:f7:43:ed:7b:88:2c:
                    3d:d5:1a:08:64:09:00:f5:df:74:df:ac:f8:6b:1c:
                    bb:b5:ca:3d:ee:d8:8d:6e:29:8c:8b:6a:f6:27:e8:
                    49:c3:2a:a2:8d:c6:f4:4b:b8:c5:22:13:f2:94:70:
                    2a:b8:29:cf:ad:60:9f:fd:7d:31:02:ea:11:85:85:
                    4f:20:97:50:0c:39:d0:59:ec:f2:1f:62:0b:20:0c:
                    d9:4b:74:65:b2:6d:12:ce:98:46:b1:03:a5:2b:e2:
                    35:8c:11:d8:93:32:09:34:02:ae:88:80:d4:bb:26:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:08:54:06:1A:8F:A2:9B:3E:1A:71:B9:A0:3F:35:2E:63:02:5F:26
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/B351D67E295D11F0B6373D85C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.21.0/24
                  203.32.28.0/24
                  203.32.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:cf:06:ea:21:ee:3b:3c:e0:89:86:a6:ee:dc:44:f6:56:ae:
         8f:3e:67:9d:f8:52:fd:84:c1:de:c8:a0:c1:e5:08:1b:6a:a3:
         c9:a4:bb:2f:0e:10:b3:9b:09:ab:62:e9:3d:fe:fa:eb:1b:f6:
         a3:90:30:b5:29:72:6b:26:5e:00:6f:e3:06:d0:73:db:30:5a:
         3b:c7:80:0e:4e:50:31:b9:c1:33:b9:06:2a:62:cc:47:fd:e8:
         c0:a2:ff:76:0f:21:d4:fa:08:3a:7c:2a:53:28:0e:2a:f6:5e:
         9b:73:ec:5a:fa:6b:ec:cf:1c:f4:21:54:30:15:8a:62:5b:69:
         c0:54:57:29:82:7f:54:c8:db:4f:16:01:0e:a3:82:51:d7:84:
         50:a5:c0:d5:11:36:e7:d7:4f:fb:f5:da:55:cd:14:df:90:3f:
         d7:fe:5f:a2:f4:2e:ba:5b:11:94:29:40:e7:76:57:ae:92:0f:
         6e:91:35:94:0c:ce:14:83:12:ba:0a:b8:9b:62:87:71:18:ab:
         bb:86:e9:74:a6:19:04:d9:3a:52:9e:40:9c:ab:33:c8:18:2d:
         8d:7c:88:d1:34:23:8f:fb:49:f9:11:af:a8:9a:f0:3d:00:da:
         eb:25:6c:f5:d9:6f:2c:51:4c:63:81:c9:29:00:97:5d:e5:a6:
         ae:d6:29:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----