This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/2C1A71D81A9B11EFA4886942C4F9AE02.roa
File:                     2C1A71D81A9B11EFA4886942C4F9AE02.roa (raw, json)
Hash identifier:          U6YXVJRAyKVKOBp9fvM3MDDPghC49iE+40CZRqzPtNo=
Subject key identifier:   D2:28:C0:26:D3:39:7C:BC:49:6F:79:2E:D6:05:91:6F:FC:80:F1:7F
Certificate issuer:       /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Certificate serial:       0C82
Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/2C1A71D81A9B11EFA4886942C4F9AE02.roa
Signing time:             Sun 06 Jul 2025 09:29:53 +0000
ROA not before:           Sun 06 Jul 2025 09:29:53 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     135037
IP address blocks:        220.247.129.0/24 maxlen: 24
                          2407:7380:a::/48 maxlen: 48
Validation:               Failed, certificate revoked on Mon 15 Sep 2025 09:24:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3202 (0xc82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
        Validity
            Not Before: Jul  6 09:29:53 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=686a4210-79b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b6:11:7f:db:74:5c:e5:b1:74:44:4d:b3:83:
                    86:bc:9c:e6:4f:23:fe:77:ae:4b:70:b8:6f:66:86:
                    ed:3d:fa:03:60:9a:5f:35:0e:fe:b5:77:57:3e:03:
                    42:3d:34:5f:cc:81:8a:30:66:82:d3:13:87:bb:87:
                    cc:9b:e0:51:a4:23:76:aa:17:06:db:da:11:a8:25:
                    79:e4:a9:f0:f6:1a:78:8e:49:11:32:01:09:38:aa:
                    34:55:9e:3a:c1:7a:fc:99:e3:fe:23:d3:b3:a9:e8:
                    eb:03:bd:50:04:db:e1:db:b3:1a:b2:5f:c2:9f:10:
                    a4:e9:10:66:67:9c:bc:f2:37:f0:9a:6c:a6:15:a4:
                    cf:16:64:46:28:bf:a5:31:7e:4b:45:44:68:2c:7a:
                    bc:d5:67:de:d8:15:2d:ad:d8:c3:8c:d8:95:42:8d:
                    55:2b:7c:00:99:7b:76:8e:98:cb:2b:d5:4d:cf:23:
                    57:16:13:ef:1a:2a:93:37:5e:47:c3:91:db:9e:fb:
                    9f:0d:84:49:a0:ca:88:df:66:2f:38:3b:b1:ef:78:
                    4b:fc:5e:76:ea:a5:1d:b2:ef:73:9e:19:b4:ec:aa:
                    64:5e:22:9e:5b:a8:24:5a:9f:b3:a3:86:f8:7d:e7:
                    eb:b4:f8:0a:de:fd:56:60:7e:03:fd:ed:37:8b:cc:
                    5a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:28:C0:26:D3:39:7C:BC:49:6F:79:2E:D6:05:91:6F:FC:80:F1:7F
            X509v3 Authority Key Identifier:
                keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/2C1A71D81A9B11EFA4886942C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.247.129.0/24
                IPv6:
                  2407:7380:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:75:0b:9a:eb:0c:c4:b1:c6:6f:94:b9:02:fa:99:15:38:98:
         45:75:73:e5:79:df:e5:f1:32:e6:a7:51:e4:77:55:f8:11:0a:
         63:d9:63:e9:92:c5:53:09:c8:39:a4:8a:bf:fd:be:af:fc:f6:
         99:f9:a1:04:29:fe:c6:5a:19:5e:2b:4d:da:c3:fe:86:d8:2b:
         f0:c1:44:f7:e5:14:0a:48:31:aa:ec:4e:94:f0:67:a2:0a:4d:
         74:de:f4:8f:17:fe:c5:1b:d3:34:a7:1e:39:07:b4:1b:ac:d6:
         e1:cc:43:ef:82:e0:38:92:8b:1f:66:ee:fb:a5:ae:eb:ea:b8:
         92:ea:dd:d6:48:81:16:24:31:6e:59:86:57:f5:64:af:78:f4:
         e9:d3:e0:e8:c1:67:45:c5:51:7d:47:ed:55:69:8e:e8:ad:26:
         13:cb:c7:b4:33:e5:2d:98:da:9a:9d:d3:45:bb:b0:72:99:95:
         b8:85:1b:95:b1:da:32:db:c7:71:1d:d5:ed:f8:0a:2c:2a:79:
         fd:00:c5:24:8e:20:0a:fc:ec:a0:67:72:21:3b:80:fc:b6:b3:
         19:bb:91:9c:bb:f6:55:bb:26:e2:a7:6c:23:02:e2:42:88:cf:
         68:68:89:47:8b:17:ad:1e:2d:f9:e2:b6:bd:fc:f7:a8:5b:c9:
         d4:e4:97:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----