This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A1B701BA748B11EEA7874B69C4F9AE02.roa
File:                     A1B701BA748B11EEA7874B69C4F9AE02.roa (raw, json)
Hash identifier:          fCpQ8NYvurCgy5fS5RSi+urJTwi57HLZIvZQGGDe0Dg=
Subject key identifier:   59:43:04:AD:23:08:A7:D8:0E:54:D0:DA:A4:76:0C:92:C4:EA:E3:C7
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       C0C0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A1B701BA748B11EEA7874B69C4F9AE02.roa
Signing time:             Tue 22 Jul 2025 08:57:30 +0000
ROA not before:           Tue 22 Jul 2025 08:57:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149020
IP address blocks:        103.170.216.0/23 maxlen: 24
                          103.179.44.0/23 maxlen: 24
                          2401:4520::/32 maxlen: 32
                          2401:4520::/33 maxlen: 40
                          2401:4520::/41 maxlen: 48
                          2401:4520:2000::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 25 Jul 2025 10:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49344 (0xc0c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul 22 08:57:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=687f527a-5bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b2:b3:ad:57:02:c6:be:db:70:c1:cc:5e:7a:
                    b8:ef:3b:c9:6f:a4:87:a1:69:80:90:b1:b5:48:92:
                    f4:00:64:a4:4d:6e:de:24:00:a1:21:89:76:72:60:
                    6d:ed:cc:54:43:18:71:72:29:91:11:a6:c4:03:1d:
                    ac:8e:b2:d5:90:57:27:d2:37:b8:1b:44:83:53:38:
                    b4:0d:c4:4e:5c:fd:fe:be:43:56:0e:2e:2b:06:ed:
                    54:5e:f8:a5:8f:b4:77:fa:03:25:8e:49:b2:31:1e:
                    2a:b1:a9:ed:ab:85:87:19:bf:1e:48:65:a7:36:e6:
                    b2:dc:f1:c7:6c:51:13:22:1c:d9:84:f3:1c:37:cb:
                    c9:cc:0b:d8:0e:94:8f:33:7e:ad:86:37:ba:c1:50:
                    ff:73:09:37:b9:12:70:18:b9:57:44:b8:a3:fe:bd:
                    e9:3e:1c:f7:69:68:57:37:03:4e:e7:18:be:a2:90:
                    69:92:98:a9:94:2c:b9:04:f3:ab:06:7b:ab:d0:d0:
                    03:19:2f:f6:8e:c6:c3:95:b9:01:b1:6a:8f:7a:27:
                    a1:c5:25:49:d6:b2:d2:da:38:5b:00:27:8d:a3:db:
                    50:ec:da:9a:48:9f:7c:3f:7d:1f:11:70:45:01:0f:
                    40:40:dd:df:af:d0:61:f0:c0:2a:e2:4a:2c:03:52:
                    6a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:43:04:AD:23:08:A7:D8:0E:54:D0:DA:A4:76:0C:92:C4:EA:E3:C7
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A1B701BA748B11EEA7874B69C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.216.0/23
                  103.179.44.0/23
                IPv6:
                  2401:4520::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:21:21:f5:04:36:23:57:de:e0:a7:bd:08:bd:77:4f:88:86:
         a1:5d:c3:24:cb:6e:6e:7b:27:a3:ec:47:3b:14:94:3b:00:9f:
         24:43:19:ea:88:d4:9d:0e:38:9f:b5:58:f4:cf:e9:43:bd:0b:
         88:0f:53:8d:a9:c8:27:48:29:e5:8b:1f:10:b9:d2:21:11:fe:
         94:97:30:46:11:bd:74:1e:24:c9:4f:6a:95:82:cc:07:26:cd:
         71:11:a0:3c:60:75:6e:b7:f1:df:e8:0b:f9:61:e1:90:5e:6a:
         cb:2e:5a:01:bc:a7:48:6a:0b:c7:2e:d8:99:d6:11:1c:e0:fa:
         a1:c1:8e:99:8f:4d:b3:f4:4d:b7:8a:9b:d2:cf:8e:23:b6:14:
         2f:09:19:ea:bd:cf:e2:b7:34:2d:9e:ac:03:d4:b9:be:23:6b:
         d1:84:7c:05:70:07:e6:40:4d:46:90:23:08:13:b1:95:2b:17:
         df:ef:31:29:c2:f2:d8:45:56:01:35:7a:db:35:75:eb:9e:df:
         ee:fb:34:0c:18:c1:d5:e1:93:00:c6:be:40:e7:e1:77:d4:7e:
         f2:c5:e4:3b:7a:19:1c:e8:53:b6:72:8f:46:93:d0:0e:cd:cc:
         dc:fe:aa:1a:19:cc:0c:39:80:0c:c7:fd:22:6c:12:e5:02:75:
         01:95:e3:e4
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAMDAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDcyMjA4NTczMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjg3ZjUyN2EtNWJjODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOGys61XAsa+23DBzF56uO87yW+kh6FpgJCxtUiS9ABkpE1u3iQAoSGJdnJg
be3MVEMYcXIpkRGmxAMdrI6y1ZBXJ9I3uBtEg1M4tA3ETlz9/r5DVg4uKwbtVF74
pY+0d/oDJY5JsjEeKrGp7auFhxm/Hkhlpzbmstzxx2xREyIc2YTzHDfLycwL2A6U
jzN+rYY3usFQ/3MJN7kScBi5V0S4o/696T4c92loVzcDTucYvqKQaZKYqZQsuQTz
qwZ7q9DQAxkv9o7Gw5W5AbFqj3onocUlSday0to4WwAnjaPbUOzamkiffD99HxFw
RQEPQEDd36/QYfDAKuJKLANSatsCAwEAAaOCAqowggKmMB0GA1UdDgQWBBRZQwSt
Iwin2A5U0NqkdgySxOrjxzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ExQjcwMUJB
NzQ4QjExRUVBNzg3NEI2OUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDQGCCsGAQUFBwEHAQH/
BCUwIzASBAIAATAMAwQBZ6rYAwQBZ7MsMA0EAgACMAcDBQAkAUUgMA0GCSqGSIb3
DQEBCwUAA4IBAQBNISH1BDYjV97gp70IvXdPiIahXcMky25ueyej7Ec7FJQ7AJ8k
QxnqiNSdDjiftVj0z+lDvQuID1ONqcgnSCnlix8QudIhEf6UlzBGEb10HiTJT2qV
gswHJs1xEaA8YHVut/Hf6Av5YeGQXmrLLloBvKdIagvHLtiZ1hEc4PqhwY6Zj02z
9E23ipvSz44jthQvCRnqvc/itzQtnqwD1Lm+I2vRhHwFcAfmQE1GkCMIE7GVKxff
7zEpwvLYRVYBNXrbNXXrnt/u+zQMGMHV4ZMAxr5A5+F31H7yxeQ7ehkc6FO2co9G
k9AOzczc/qoaGcwMOYAMx/0ibBLlAnUBlePk
-----END CERTIFICATE-----