This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/6104609C5A1111EFA655393FC4F9AE02.roa
File:                     6104609C5A1111EFA655393FC4F9AE02.roa (raw, json)
Hash identifier:          90knoALeJRqRhXqg4j3QEDFBYbQfOayerlk2QuZaZLg=
Subject key identifier:   E7:1E:F0:F8:F1:FA:F8:16:C4:EB:C6:C4:7B:4E:CA:D9:FE:B3:5E:B5
Certificate issuer:       /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
Certificate serial:       CD
Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/6104609C5A1111EFA655393FC4F9AE02.roa
Signing time:             Wed 03 Sep 2025 06:27:55 +0000
ROA not before:           Wed 03 Sep 2025 06:27:55 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     26658
IP address blocks:        103.12.48.0/22 maxlen: 22
                          103.72.152.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Sat 18 Oct 2025 07:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
        Validity
            Not Before: Sep  3 06:27:55 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b7dfeb-7905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2a:ce:09:bd:f5:07:6a:5a:3f:a1:c3:0f:fa:
                    0a:53:44:a9:9c:d0:84:23:82:ac:ad:e4:d4:72:ac:
                    e3:d0:91:e6:17:c5:0c:5e:97:43:5f:6a:e1:3e:72:
                    ee:44:8f:90:de:9c:1d:54:ee:98:53:6d:9c:89:60:
                    26:e7:fd:e0:3d:d1:6f:82:3c:68:c7:50:5f:68:9c:
                    8a:aa:c0:24:ea:0c:5f:35:8f:68:34:03:83:47:81:
                    ca:b5:9a:53:84:bd:02:9c:96:dd:05:be:35:74:80:
                    65:1f:fd:41:aa:9d:7c:1a:f8:57:1d:ef:c2:ed:62:
                    1b:fa:13:7c:98:3d:e5:b0:c7:34:aa:9b:08:e0:8f:
                    c7:ed:16:3d:d2:39:48:5a:54:7b:99:ca:4e:77:39:
                    c6:18:d0:7b:41:39:5d:d6:72:56:7b:1a:7b:dc:23:
                    c3:b6:7b:7d:97:11:84:ef:98:52:59:d6:a3:74:4e:
                    9c:96:ea:2d:1b:48:ff:f3:2b:29:3f:e9:14:21:93:
                    14:7e:5e:14:3f:ff:97:e7:8b:38:16:e1:f5:87:f8:
                    37:02:57:22:8c:14:02:93:a7:e7:f0:81:37:4b:02:
                    6a:d7:d5:b5:7b:07:ef:66:15:99:59:05:5b:eb:51:
                    42:ef:69:53:2a:8c:2b:10:01:16:53:11:f1:87:87:
                    60:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1E:F0:F8:F1:FA:F8:16:C4:EB:C6:C4:7B:4E:CA:D9:FE:B3:5E:B5
            X509v3 Authority Key Identifier:
                keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/6104609C5A1111EFA655393FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.48.0/22
                  103.72.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:06:82:86:b8:20:2f:20:b4:74:48:7c:e7:4d:5d:6a:05:6e:
         94:d5:a3:51:b5:68:85:a0:bc:15:f3:72:0f:b9:33:52:2f:7e:
         a6:2e:2b:e0:ff:ad:ae:a0:a6:80:04:ce:46:2e:70:c1:38:19:
         93:2a:c0:50:4a:11:3b:ee:90:86:21:d0:d0:e1:ba:b5:f7:a6:
         f5:ac:4b:89:6a:2c:bb:18:b7:9e:09:9c:d8:02:e7:47:f4:83:
         03:00:b1:9c:b6:5d:21:ba:40:fc:8d:65:ce:0e:bd:01:6f:7c:
         e1:32:7c:88:55:3d:08:83:72:50:8d:eb:8a:f9:e5:5e:5b:80:
         02:e3:38:59:5e:6c:65:a1:17:d9:12:69:03:00:c9:a1:37:2e:
         8b:39:1f:a4:60:60:8f:99:5f:54:af:c2:4b:fd:7f:12:76:29:
         db:b9:e9:1e:f0:a1:98:ad:62:75:4b:ab:77:8e:d8:47:d4:65:
         66:de:c1:75:91:4f:20:be:97:fc:80:58:7c:00:d5:7f:94:c8:
         ea:a1:28:10:0c:14:a3:af:de:28:5f:84:49:86:8b:3f:a7:60:
         15:30:0f:fd:78:ea:72:23:c9:9d:a4:55:b6:0b:8c:1c:05:7a:
         d6:74:e9:03:f3:37:3f:3e:06:37:ac:93:a5:cf:cc:73:6f:da:
         79:f4:1f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----