This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/1829AEE8146B11EC81328F59C4F9AE02.roa
File:                     1829AEE8146B11EC81328F59C4F9AE02.roa (raw, json)
Hash identifier:          aIxAvyaJTpqygmqgpU8RPaqkDh+o4vZaFakEjzwWwkw=
Subject key identifier:   6E:3E:B5:62:43:33:58:69:2D:CC:B2:C6:80:C0:BB:82:5C:E0:1D:CB
Certificate issuer:       /CN=A9180307/serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42
Certificate serial:       048A
Authority key identifier: BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/1829AEE8146B11EC81328F59C4F9AE02.roa
Signing time:             Tue 01 Oct 2024 00:14:46 +0000
ROA not before:           Tue 01 Oct 2024 00:14:46 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     38026
IP address blocks:        103.169.158.0/23 maxlen: 23
                          103.169.158.0/24 maxlen: 24
                          103.169.159.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162 (0x48a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180307, serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42
        Validity
            Not Before: Oct  1 00:14:46 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66fb3ef5-9fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:72:ec:61:02:e6:10:35:60:5b:a4:6d:5a:5a:
                    c2:0f:2b:bd:7b:28:e6:37:1f:2f:fb:33:78:72:36:
                    ed:ec:e3:b7:86:ae:5e:57:12:e9:60:c7:87:af:87:
                    b8:00:14:a6:cd:78:fd:3e:45:5a:a4:30:f0:34:12:
                    7c:c5:e7:fe:96:6b:16:4c:be:c2:4f:f6:22:ec:5b:
                    e3:b5:df:56:de:a4:c2:94:4b:6d:88:8b:88:72:e0:
                    92:b0:f4:16:de:f9:28:d0:05:d2:57:80:6a:cc:94:
                    19:56:fe:0b:82:04:8d:34:5a:4d:a8:fb:85:9b:9b:
                    53:bd:de:ad:bd:8e:5a:6f:d3:43:ad:df:20:c2:10:
                    68:4e:76:c4:c2:39:1e:53:cb:86:bb:1d:f5:90:b1:
                    a3:41:9d:6a:3f:34:51:bd:e2:56:8b:c8:01:e9:a6:
                    4b:e6:56:03:99:57:c1:fe:75:b9:46:fa:2a:ea:55:
                    32:9c:c0:13:ce:bf:36:72:61:49:86:17:6c:9c:e0:
                    c6:c5:88:4f:27:c3:58:1e:0c:6e:1c:9b:a3:36:0f:
                    17:31:e1:4b:c2:42:79:1f:dc:17:d8:43:90:8f:ad:
                    4c:e9:a3:b8:74:ef:a3:5c:84:8c:3f:ac:4c:80:c9:
                    88:39:ed:b2:08:ee:12:ec:e7:6e:50:02:10:15:32:
                    3a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3E:B5:62:43:33:58:69:2D:CC:B2:C6:80:C0:BB:82:5C:E0:1D:CB
            X509v3 Authority Key Identifier:
                keyid:BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/1829AEE8146B11EC81328F59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:e3:2e:91:fa:c6:ff:55:ca:f1:17:f0:69:9c:dc:4a:f9:92:
         1d:8e:f7:7a:fb:54:e7:dd:97:99:85:83:d9:4e:ac:59:25:79:
         d1:59:4d:7c:8a:1a:c9:61:eb:22:a0:f6:e2:8d:59:89:7b:51:
         ac:1c:85:c1:e7:c8:17:ec:30:a3:1e:d7:18:a9:04:ac:1d:ef:
         62:ec:37:77:7b:6b:ef:41:ca:72:9c:3f:d9:57:ee:39:86:e4:
         14:e0:70:cd:c0:81:01:fa:92:d4:48:b4:bd:68:0b:51:2e:13:
         a9:87:d4:5d:be:02:37:46:b5:fe:ae:47:bc:0b:6b:d6:6c:37:
         7e:6c:c2:34:8a:f1:09:71:85:57:6e:b4:6c:a0:de:16:57:ce:
         53:45:96:c9:27:3a:8c:c2:e7:e2:5a:f1:fd:63:6a:8d:a8:5d:
         25:e9:3c:11:54:8e:19:6a:5c:91:9a:3c:ab:0a:7e:81:0e:a5:
         4b:bf:12:67:3a:ac:52:34:9d:18:f3:32:80:f7:04:2b:cc:6d:
         f7:2a:91:f0:09:ab:a1:f9:59:50:3c:c6:93:89:58:58:7c:16:
         f8:d6:fc:2a:b9:f3:fb:e9:a2:a1:dd:d4:1b:2a:76:7a:4e:49:
         2d:b1:56:4a:2d:44:cb:ca:16:a5:0b:9f:3f:db:e8:a0:ef:2f:
         5c:e6:1e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----