This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/98281C68C74D11EFBDEB795AC4F9AE02.roa
File:                     98281C68C74D11EFBDEB795AC4F9AE02.roa (raw, json)
Hash identifier:          Fda9JpGg07NDX0J0Kym+7CTcz3mEow9g4jUwm8D0Lyk=
Subject key identifier:   E6:F7:4B:C3:B5:91:FE:F5:79:D1:59:A0:5C:AE:B8:DD:59:25:32:B4
Certificate issuer:       /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Certificate serial:       12A0
Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/98281C68C74D11EFBDEB795AC4F9AE02.roa
Signing time:             Tue 25 Nov 2025 14:04:56 +0000
ROA not before:           Tue 25 Nov 2025 14:04:56 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     24039
IP address blocks:        103.193.208.0/22 maxlen: 22
                          103.193.209.0/24 maxlen: 24
                          203.190.223.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 26 Nov 2025 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4768 (0x12a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177358, serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
        Validity
            Not Before: Nov 25 14:04:56 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=6925b788-4c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:40:8a:a3:bc:47:07:03:c4:7c:25:1c:99:58:
                    e1:0b:b4:ca:70:a6:53:04:be:c3:80:44:87:07:86:
                    6f:6e:c8:8a:1b:79:dd:f7:85:3b:b9:9a:30:b2:90:
                    53:48:3d:51:48:04:cf:61:dd:e1:9c:75:ca:89:ba:
                    8f:aa:2f:0d:bd:ad:91:70:22:d0:f5:b1:f4:f3:fc:
                    fd:0c:10:5b:fc:7f:87:7f:d0:4a:bd:48:aa:1e:ab:
                    ee:b3:33:1f:57:71:fa:ce:33:60:f3:f3:79:36:ce:
                    0e:3d:72:14:41:a1:81:d3:52:ad:bf:7d:56:e9:ba:
                    5c:1f:a8:74:47:fc:73:f7:00:27:0d:23:2e:f3:5b:
                    7b:c0:48:45:65:94:43:22:34:b9:f0:4d:2a:f6:40:
                    f9:b8:d8:36:97:a7:1e:d6:ac:fb:4f:e5:ce:b9:11:
                    c5:99:14:7c:ad:1f:eb:69:f7:23:8c:3e:65:62:30:
                    60:cf:7e:e0:69:e9:00:86:ee:3b:d8:7e:7e:9a:0f:
                    ac:a4:ce:d3:7b:68:ee:0f:63:df:7d:57:55:69:e5:
                    cf:de:4c:b6:7a:3e:22:5a:15:65:cb:26:90:20:8e:
                    11:13:aa:cf:83:0e:d1:d0:7f:94:f0:4d:3c:b6:f6:
                    1f:4f:9e:72:60:72:0c:b5:a5:0e:25:3b:7a:e6:d3:
                    6e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F7:4B:C3:B5:91:FE:F5:79:D1:59:A0:5C:AE:B8:DD:59:25:32:B4
            X509v3 Authority Key Identifier:
                keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/98281C68C74D11EFBDEB795AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.208.0/22
                  203.190.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:fb:eb:83:71:8d:f6:3c:08:8f:d0:3b:f4:5f:98:51:c2:b9:
         de:39:fa:1f:30:87:ca:06:ae:ad:7f:ca:9d:ed:90:7a:43:37:
         5e:0b:95:bd:d9:65:e5:42:9b:4b:cb:14:fb:d2:f7:91:66:be:
         a5:a5:7e:0e:61:07:9b:59:01:6d:1f:85:9a:20:e8:f6:02:c2:
         94:e3:31:ba:0b:9c:66:8c:51:25:3b:7c:7d:2d:85:c5:e3:38:
         f9:09:51:55:2a:b3:a3:1a:a5:f8:64:0d:55:fb:39:27:b8:3a:
         45:96:4e:65:6e:04:e1:9f:17:5c:92:86:e2:dc:65:81:ac:07:
         d4:9d:42:d2:0a:ed:d8:33:9a:77:eb:ae:7b:b5:63:48:8d:b2:
         c7:a1:3a:7a:7c:58:32:0f:5a:a6:ef:e4:53:56:7a:8c:94:99:
         31:5e:db:d9:3b:b0:f7:fc:5e:0e:19:e9:aa:fe:c3:7b:a9:a1:
         32:21:0e:52:d4:44:e0:72:ea:1b:aa:64:f0:62:a1:f0:d0:7e:
         de:ea:04:10:73:f3:ec:87:ba:3f:86:b1:c8:ef:05:a8:28:42:
         0e:aa:81:22:27:67:89:e4:6a:e0:af:b8:8f:1a:e8:28:a0:cf:
         a7:35:9f:1b:9b:96:9c:ff:de:06:00:34:a2:e9:dd:b4:e9:de:
         d6:47:92:58
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICEqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzczNTgxMTAvBgNVBAUTKDgwRTNDM0FFNTE5QTRGMTgzNzVBQzZBNDNGNTM3QTg1
RkY3QTJBODIwHhcNMjUxMTI1MTQwNDU2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI1Yjc4OC00YzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7UCKo7xHBwPEfCUcmVjhC7TKcKZTBL7DgESHB4ZvbsiKG3nd94U7uZowspBT
SD1RSATPYd3hnHXKibqPqi8Nva2RcCLQ9bH08/z9DBBb/H+Hf9BKvUiqHqvuszMf
V3H6zjNg8/N5Ns4OPXIUQaGB01Ktv31W6bpcH6h0R/xz9wAnDSMu81t7wEhFZZRD
IjS58E0q9kD5uNg2l6ce1qz7T+XOuRHFmRR8rR/rafcjjD5lYjBgz37gaekAhu47
2H5+mg+spM7Te2juD2PffVdVaeXP3ky2ej4iWhVlyyaQII4RE6rPgw7R0H+U8E08
tvYfT55yYHIMtaUOJTt65tNuGQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOb3S8O1
kf71edFZoFyuuN1ZJTK0MB8GA1UdIwQYMBaAFIDjw65Rmk8YN1rGpD9TeoX/eiqC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzM1OC9CRTg0RjA5NERE
MEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4ZzNXc2FrUDFONmhmOTZL
b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dPUERybEdhVHhnM1dzYWtQMU42aGY5NktvSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzczNTgvQkU4NEYwOTRERDBCMTFFODg1NDQ5QTQwQzRGOUFFMDIvOTgyODFDNjhD
NzREMTFFRkJERUI3OTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnwdADBADLvt8wDQYJKoZIhvcNAQELBQADggEBAIP764Nx
jfY8CI/QO/RfmFHCud45+h8wh8oGrq1/yp3tkHpDN14Llb3ZZeVCm0vLFPvS95Fm
vqWlfg5hB5tZAW0fhZog6PYCwpTjMboLnGaMUSU7fH0thcXjOPkJUVUqs6Mapfhk
DVX7OSe4OkWWTmVuBOGfF1yShuLcZYGsB9SdQtIK7dgzmnfrrnu1Y0iNssehOnp8
WDIPWqbv5FNWeoyUmTFe29k7sPf8Xg4Z6ar+w3upoTIhDlLUROBy6huqZPBiofDQ
ft7qBBBz8+yHuj+GscjvBagoQg6qgSInZ4nkauCvuI8a6Cigz6c1nxublpz/3gYA
NKLp3bTp3tZHklg=
-----END CERTIFICATE-----
Generated at Mon Jan 12 05:31:06 2026 by rpki-client