This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/1019A190866411EF9319811DC4F9AE02.roa
File:                     1019A190866411EF9319811DC4F9AE02.roa (raw, json)
Hash identifier:          iHNv1D4CuKh0MplUtgE1k/nBfju2p94sD6YSJueQYIQ=
Subject key identifier:   A3:43:2C:92:26:60:1B:7B:0F:34:B1:B5:15:5F:BC:5C:73:9F:39:2C
Certificate issuer:       /CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1
Certificate serial:       067E
Authority key identifier: 96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/1019A190866411EF9319811DC4F9AE02.roa
Signing time:             Wed 02 Apr 2025 22:53:59 +0000
ROA not before:           Wed 02 Apr 2025 22:53:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142006
IP address blocks:        103.164.86.0/23 maxlen: 23
                          103.164.86.0/24 maxlen: 24
                          103.164.87.0/24 maxlen: 24
                          2001:df6:4280::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sat 27 Sep 2025 18:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1662 (0x67e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91211D4, serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1
        Validity
            Not Before: Apr  2 22:53:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67edc007-9b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:1a:af:18:68:00:54:89:82:8b:a8:ad:59:
                    ea:58:c4:55:85:fa:c7:f5:28:91:6e:06:d4:7c:38:
                    e4:06:82:0d:49:8a:f3:c0:f2:df:28:d1:62:18:4b:
                    8a:53:df:56:cf:8f:31:a7:60:1d:16:a5:dd:6f:96:
                    28:7e:c5:39:d3:f2:67:e6:d2:d4:3c:35:56:40:0a:
                    4a:66:1b:85:1a:d4:86:e6:3d:50:ab:0b:f2:aa:1d:
                    f1:c3:9d:d2:45:5b:bd:8d:43:ec:e6:5f:f9:77:9f:
                    27:ce:e4:f7:82:b9:eb:18:20:01:9d:f1:0b:75:bd:
                    f0:4d:88:6c:5a:39:85:1b:80:32:3a:83:2c:da:1e:
                    0e:85:4b:1a:2d:8f:6f:4a:3d:2f:19:1a:b5:ab:c5:
                    cf:10:99:ae:10:f3:28:1f:12:d5:74:86:b4:49:b5:
                    b0:d2:2e:1c:6f:79:c1:c2:fd:3c:ce:91:61:2b:8f:
                    9e:f2:e9:8d:40:c7:76:7f:69:60:5e:aa:73:8e:ca:
                    86:3e:6d:6a:54:ca:37:61:1a:b9:6a:0e:c4:15:12:
                    b7:d7:83:1b:81:1e:b0:55:5f:1b:6f:24:2e:c9:5b:
                    a9:38:06:94:8e:b0:41:f7:c5:58:0b:d0:46:a6:c1:
                    76:24:0b:df:0f:d5:2f:70:8b:14:aa:48:d3:a5:7e:
                    b8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:43:2C:92:26:60:1B:7B:0F:34:B1:B5:15:5F:BC:5C:73:9F:39:2C
            X509v3 Authority Key Identifier:
                keyid:96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/1019A190866411EF9319811DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.86.0/23
                IPv6:
                  2001:df6:4280::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:12:2f:33:fa:2e:c2:8b:8d:68:ef:27:66:81:72:96:9d:bb:
         8c:14:19:bc:cb:19:42:d7:d8:74:4d:2a:bb:14:cf:18:d9:50:
         8f:a7:e9:4e:8f:92:f7:54:f0:ee:41:78:ac:74:b6:e7:60:4d:
         b3:5d:03:c1:4e:b2:bd:1f:83:eb:f9:cc:8e:8b:a4:06:70:08:
         42:a2:79:aa:99:5a:23:a9:88:9d:2f:26:d2:65:61:0e:51:f3:
         dc:53:22:f6:e4:f6:d9:61:37:e1:52:ef:72:6e:5d:92:64:29:
         15:42:ef:fd:b6:6f:3d:93:a3:77:9b:1d:df:e3:61:c6:ab:47:
         ce:59:a2:89:5d:90:36:02:24:23:b7:5e:00:00:18:13:a0:86:
         3d:24:d5:8b:3c:9e:3a:bb:c2:21:6a:9a:7a:4e:b1:23:55:8b:
         81:7c:bb:86:bf:5d:bf:47:8d:4a:e7:80:a2:98:f3:43:8a:d2:
         27:4a:eb:3e:00:50:42:bc:d9:f6:3c:7b:2c:79:a7:c6:40:79:
         7b:99:6b:98:f0:e0:da:8a:23:bf:bc:70:49:a7:18:f3:76:f2:
         40:17:de:f8:aa:dc:7d:9e:61:7c:10:87:6b:ac:77:85:1a:88:
         b6:2a:a1:53:fb:09:4b:7e:e6:15:ca:ad:75:06:1d:6e:75:d0:
         8e:af:53:68
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjExRDQxMTAvBgNVBAUTKDk2OEQyQUFBNjE2OENCNDk2OTQ0QTcyNzAxOEFGQjQy
QTI2RTMxRTEwHhcNMjUwNDAyMjI1MzU5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2VkYzAwNy05YjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqTcarxhoAFSJgouorVnqWMRVhfrH9SiRbgbUfDjkBoINSYrzwPLfKNFiGEuK
U99Wz48xp2AdFqXdb5YofsU50/Jn5tLUPDVWQApKZhuFGtSG5j1Qqwvyqh3xw53S
RVu9jUPs5l/5d58nzuT3grnrGCABnfELdb3wTYhsWjmFG4AyOoMs2h4OhUsaLY9v
Sj0vGRq1q8XPEJmuEPMoHxLVdIa0SbWw0i4cb3nBwv08zpFhK4+e8umNQMd2f2lg
XqpzjsqGPm1qVMo3YRq5ag7EFRK314MbgR6wVV8bbyQuyVupOAaUjrBB98VYC9BG
psF2JAvfD9UvcIsUqkjTpX64mQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKNDLJIm
YBt7DzSxtRVfvFxznzksMB8GA1UdIwQYMBaAFJaNKqphaMtJaUSnJwGK+0KibjHh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTFENC9BOUY0OTY1Mjg2
Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kwbHBSS2NuQVlyN1FxSnVN
ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xvMHFxbUZveTBscFJLY25BWXI3UXFKdU1lRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjExRDQvQTlGNDk2NTI4NkNEMTFFQkE0QUZGNjA5QzRGOUFFMDIvMTAxOUExOTA4
NjY0MTFFRjkzMTk4MTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnpFYwDwQCAAIwCQMHACABDfZCgDANBgkqhkiG9w0BAQsF
AAOCAQEAVxIvM/ouwouNaO8nZoFylp27jBQZvMsZQtfYdE0quxTPGNlQj6fpTo+S
91Tw7kF4rHS252BNs10DwU6yvR+D6/nMjoukBnAIQqJ5qplaI6mInS8m0mVhDlHz
3FMi9uT22WE34VLvcm5dkmQpFULv/bZvPZOjd5sd3+NhxqtHzlmiiV2QNgIkI7de
AAAYE6CGPSTVizyeOrvCIWqaek6xI1WLgXy7hr9dv0eNSueAopjzQ4rSJ0rrPgBQ
QrzZ9jx7LHmnxkB5e5lrmPDg2oojv7xwSacY83byQBfe+KrcfZ5hfBCHa6x3hRqI
tiqhU/sJS37mFcqtdQYdbnXQjq9TaA==
-----END CERTIFICATE-----