This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/362D3AA003A011EF971D8528C4F9AE02.roa
File:                     362D3AA003A011EF971D8528C4F9AE02.roa (raw, json)
Hash identifier:          W/n79rhLo8EvQ7te83pNRuUlwVRa0j6oDW3FyOhIvzM=
Subject key identifier:   D5:C2:D3:1D:EB:63:83:A3:29:FC:F2:01:B3:36:F7:A7:ED:24:EF:62
Certificate issuer:       /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
Certificate serial:       02
Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/362D3AA003A011EF971D8528C4F9AE02.roa
Signing time:             Fri 26 Apr 2024 07:40:11 +0000
ROA not before:           Fri 26 Apr 2024 07:40:11 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     134211
IP address blocks:        103.41.8.0/24 maxlen: 24
                          103.41.9.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBE5E, serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
        Validity
            Not Before: Apr 26 07:40:11 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=662b5a5b-aa7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:22:89:31:4f:a9:89:ce:f0:87:43:9c:cf:
                    8f:52:80:67:8d:23:6b:a4:99:a5:ec:93:73:d2:55:
                    0b:4a:58:87:2d:53:fb:05:2f:08:30:16:1d:ec:a5:
                    1f:e2:85:00:f3:69:a3:09:6a:10:77:e8:fb:b7:5e:
                    83:fd:c5:03:66:50:d7:e7:46:70:3b:6e:44:35:3a:
                    b6:dd:83:ac:8a:d1:24:a9:51:e8:0a:1e:c9:f8:19:
                    50:95:92:a7:6a:72:db:ba:ad:4a:42:7d:73:bb:f9:
                    5a:af:51:0a:96:47:a8:a2:04:18:cc:bc:03:22:3f:
                    48:35:3b:71:b8:f9:07:04:af:37:27:84:6d:fa:13:
                    cc:f8:a1:17:13:1d:67:46:08:00:99:35:37:b7:48:
                    51:ae:90:e2:a7:f0:d9:17:ba:84:f4:66:bf:28:99:
                    50:7f:e1:ea:15:0b:d1:05:e9:ae:cb:f2:53:fc:26:
                    3a:f7:d9:4f:91:10:37:4f:66:84:22:3b:a9:ca:73:
                    a3:97:29:4a:ed:c4:41:a4:77:73:ba:ab:b6:ed:48:
                    39:b9:e7:5d:07:51:ed:72:03:90:0a:35:2d:6b:82:
                    a6:6c:b2:9e:e7:9e:72:60:b7:24:7f:60:18:16:fe:
                    12:8a:2b:7c:a9:dc:62:bf:9e:ae:2d:8a:8c:8d:1c:
                    b2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C2:D3:1D:EB:63:83:A3:29:FC:F2:01:B3:36:F7:A7:ED:24:EF:62
            X509v3 Authority Key Identifier:
                keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/362D3AA003A011EF971D8528C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:78:81:98:ff:3c:8f:08:a2:ba:73:08:75:ad:ef:dc:32:54:
         1f:7b:62:bd:b8:f3:7c:a6:a5:da:bd:51:30:b1:d4:dc:7c:a3:
         57:f8:45:aa:b3:84:28:35:84:dc:50:cf:48:cd:51:e6:09:20:
         a1:9e:4e:19:47:54:bf:ad:a7:37:b7:af:ad:e8:3c:62:44:7d:
         ff:d8:9e:99:b0:41:d3:b8:5f:49:8a:74:c6:32:2d:10:52:9d:
         40:98:34:6f:e5:f9:da:fb:b0:0a:66:67:21:aa:b9:05:0a:39:
         3f:09:2b:b9:3c:99:28:bd:8d:79:a0:3d:70:f1:cd:bc:3c:ef:
         d2:f3:e6:26:75:50:5c:f3:d6:32:4a:8a:76:ba:e8:2e:37:4e:
         dc:da:46:25:64:06:4e:17:64:32:cd:90:2f:b5:e0:ce:6f:6f:
         55:f9:e8:0f:0c:23:df:0c:da:b3:b4:1f:5c:8f:dd:2f:14:40:
         ff:e2:30:bd:51:b3:44:9b:51:b8:26:61:ae:eb:76:21:2f:70:
         77:23:92:cd:53:8f:75:73:de:cc:68:16:9e:38:9d:c7:b4:e2:
         0b:f8:73:5e:a2:79:f7:fb:84:94:9e:67:3f:fa:2b:c6:ff:63:
         12:e1:ae:54:2d:f4:ba:f5:7a:aa:86:da:8e:83:a6:4a:6d:21:
         7e:40:08:e9
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
QkU1RTExMC8GA1UEBRMoOTZCNjUwMTMxMkY5RTEyRUIxOUE2NEY2MjJFMTdDRDQy
NzlERjBDRjAeFw0yNDA0MjYwNzQwMTFaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2MmI1YTViLWFhN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCuiKJMU+pic7wh0Ocz49SgGeNI2ukmaXsk3PSVQtKWIctU/sFLwgwFh3spR/i
hQDzaaMJahB36Pu3XoP9xQNmUNfnRnA7bkQ1Orbdg6yK0SSpUegKHsn4GVCVkqdq
ctu6rUpCfXO7+VqvUQqWR6iiBBjMvAMiP0g1O3G4+QcErzcnhG36E8z4oRcTHWdG
CACZNTe3SFGukOKn8NkXuoT0Zr8omVB/4eoVC9EF6a7L8lP8Jjr32U+REDdPZoQi
O6nKc6OXKUrtxEGkd3O6q7btSDm5510HUe1yA5AKNS1rgqZssp7nnnJgtyR/YBgW
/hKKK3yp3GK/nq4tioyNHLKvAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU1cLTHetj
g6Mp/PIBszb3p+0k72IwHwYDVR0jBBgwFoAUlrZQExL54S6xmmT2IuF81Ced8M8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRTVFLzgzQjg3MkY0MDM5
RjExRUY5MEY2NjIyN0M0RjlBRTAyL2xyWlFFeEw1NFM2eG1tVDJJdUY4MUNlZDhN
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbHJaUUV4TDU0UzZ4bW1UMkl1RjgxQ2VkOE04LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QkU1RS84M0I4NzJGNDAzOUYxMUVGOTBGNjYyMjdDNEY5QUUwMi8zNjJEM0FBMDAz
QTAxMUVGOTcxRDg1MjhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWcpCDANBgkqhkiG9w0BAQsFAAOCAQEAaHiBmP88jwiiunMI
da3v3DJUH3tivbjzfKal2r1RMLHU3HyjV/hFqrOEKDWE3FDPSM1R5gkgoZ5OGUdU
v62nN7evreg8YkR9/9iembBB07hfSYp0xjItEFKdQJg0b+X52vuwCmZnIaq5BQo5
PwkruTyZKL2NeaA9cPHNvDzv0vPmJnVQXPPWMkqKdrroLjdO3NpGJWQGThdkMs2Q
L7Xgzm9vVfnoDwwj3wzas7QfXI/dLxRA/+IwvVGzRJtRuCZhrut2IS9wdyOSzVOP
dXPezGgWnjidx7TiC/hzXqJ59/uElJ5nP/orxv9jEuGuVC30uvV6qobajoOmSm0h
fkAI6Q==
-----END CERTIFICATE-----
Generated at Fri Dec 19 06:24:21 2025 by rpki-client