This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/6EEB53FA4BD411EFA40C1971C4F9AE02.roa
File:                     6EEB53FA4BD411EFA40C1971C4F9AE02.roa (raw, json)
Hash identifier:          KoLqiB7au9EL5MLLWx3WxXy40orpm9YseLH7NDIaWII=
Subject key identifier:   8F:F6:75:BA:1F:0A:50:FC:B9:4B:45:76:52:B3:90:CB:27:60:84:7B
Certificate issuer:       /CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Certificate serial:       05D1
Authority key identifier: 74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/6EEB53FA4BD411EFA40C1971C4F9AE02.roa
Signing time:             Mon 07 Jul 2025 09:48:37 +0000
ROA not before:           Mon 07 Jul 2025 09:48:37 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     142436
IP address blocks:        103.168.90.0/23 maxlen: 23
                          103.168.90.0/24 maxlen: 24
                          103.168.91.0/24 maxlen: 24
                          2001:df6:d580::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 08 Jul 2025 09:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1489 (0x5d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0F9, serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
        Validity
            Not Before: Jul  7 09:48:37 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=686b97f4-676f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:07:c8:33:a5:64:b4:85:0d:4b:f8:18:e9:25:
                    1c:79:a3:80:1c:52:4d:9e:64:1d:11:6e:9d:7d:b7:
                    9b:95:aa:7c:76:b6:18:19:f6:f1:41:30:8b:97:a2:
                    86:71:44:a6:15:07:f1:95:6b:f7:6c:5b:c1:db:e1:
                    4f:05:e4:08:1b:72:37:d0:b1:81:9e:d5:a2:fe:03:
                    89:29:64:15:c3:b6:be:ca:e2:08:38:22:be:46:dd:
                    45:93:c9:c2:51:c4:4d:92:46:03:64:24:44:6a:86:
                    21:0e:c7:45:0e:61:24:75:43:fd:2c:e5:c2:39:62:
                    d3:6d:6a:76:41:55:c4:9f:e7:f5:21:df:1c:71:56:
                    af:b3:c5:92:2c:29:7a:ae:90:9e:b4:a2:c8:88:1b:
                    ff:8b:2a:35:4f:a8:9c:43:f5:b7:bc:18:c3:dc:d2:
                    97:c0:3e:6e:e6:eb:ca:44:ec:01:fe:07:e0:a7:1d:
                    c3:39:d6:9b:87:1a:b1:96:e6:76:6a:de:35:77:d1:
                    46:43:64:ec:23:ae:e7:b3:8d:66:01:95:34:8f:17:
                    3a:f6:15:ea:bd:ce:84:d8:1f:92:3c:33:15:f0:80:
                    a7:7b:58:9f:08:7d:19:92:df:95:b4:f0:86:d3:99:
                    07:cd:77:74:39:b5:8b:93:52:12:70:2c:3f:c0:cb:
                    a7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F6:75:BA:1F:0A:50:FC:B9:4B:45:76:52:B3:90:CB:27:60:84:7B
            X509v3 Authority Key Identifier:
                keyid:74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/6EEB53FA4BD411EFA40C1971C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.90.0/23
                IPv6:
                  2001:df6:d580::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:e0:14:8b:33:01:7e:5f:c0:c5:72:d5:6f:93:32:24:ad:4c:
         7b:a7:e2:4b:4b:6d:a7:e1:10:7e:8c:43:d0:e2:b9:77:ef:8d:
         a7:e7:98:63:5f:0e:b8:e1:c6:72:da:7f:7a:a0:5c:b0:50:4f:
         a9:0c:35:c2:de:09:a5:67:cb:17:51:9f:6b:f1:b1:dd:7a:f1:
         cd:bb:42:dd:cb:fd:1d:9b:e1:7d:b4:e3:66:66:57:c6:77:9e:
         58:33:8f:51:da:b8:77:2d:1c:b6:d5:18:d8:9e:3a:f5:af:a1:
         23:c0:7a:52:cc:7a:ea:e5:07:3f:d2:07:f3:77:29:1a:52:75:
         7e:66:34:5b:8b:50:6f:48:89:41:d0:56:47:90:d2:b8:49:52:
         e3:81:b0:c3:eb:13:3b:41:14:ff:bf:8a:60:d6:3e:17:9f:53:
         ee:37:0a:cb:64:3e:8e:ab:2f:d1:a1:cc:17:91:27:1f:4f:fd:
         18:85:67:28:f9:67:47:52:1c:fb:b0:c0:26:1e:1b:46:fc:14:
         cc:93:b1:20:70:7c:c9:9e:19:1c:5d:8d:89:37:46:b1:a4:f6:
         6f:2a:ca:73:03:09:31:93:18:b8:5b:79:69:f3:b3:0a:47:57:
         64:99:3b:17:aa:eb:41:4a:76:b2:d5:05:df:10:1a:29:07:c9:
         d7:4d:a3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----