This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/4B31BDC4B76911ED8A503224C4F9AE02.roa
File:                     4B31BDC4B76911ED8A503224C4F9AE02.roa (raw, json)
Hash identifier:          l0BRfiLqHQsOV1ADKIbKK5vOrt/xeo6mhndQAShwIN8=
Subject key identifier:   7E:F0:2F:8D:E2:B1:71:4D:50:B0:E3:09:C0:86:40:EA:9D:8D:8B:97
Certificate issuer:       /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A
Certificate serial:       0992
Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/4B31BDC4B76911ED8A503224C4F9AE02.roa
Signing time:             Mon 26 May 2025 20:36:27 +0000
ROA not before:           Mon 26 May 2025 20:36:27 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     150001
IP address blocks:        103.151.60.0/24 maxlen: 24
                          2001:df3:ab80::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sun 12 Oct 2025 12:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2450 (0x992)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5C70, serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A
        Validity
            Not Before: May 26 20:36:27 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6834d0cb-fca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:a0:cc:84:db:98:3b:bd:ed:7b:00:89:a1:
                    0a:b7:c2:ef:51:7f:94:5c:19:37:7e:c0:ce:df:13:
                    96:9b:ef:1e:1a:63:19:75:7f:96:49:fd:aa:6c:ad:
                    ff:f3:ed:16:b0:1e:a7:8c:1c:79:71:70:00:6c:db:
                    d9:9f:75:26:9a:47:8d:a8:7f:92:6c:30:b7:06:f1:
                    c0:ae:7f:bb:56:66:58:91:03:f1:c0:ae:aa:67:fb:
                    50:8a:8e:c7:e5:ca:cd:ff:00:2e:95:f6:04:b1:d6:
                    65:54:b2:41:f4:c1:43:34:3a:eb:ed:d7:bd:dd:c7:
                    f1:93:f2:90:ff:bc:17:cf:04:64:ba:b8:1d:8e:d0:
                    ab:f0:56:4a:89:5e:98:f9:67:00:e5:34:85:25:51:
                    d7:6d:14:de:2e:fa:c0:22:53:a2:4e:c6:ae:1e:70:
                    cc:3f:cc:7d:15:d7:33:76:68:ec:57:91:ab:bd:a2:
                    fa:6a:39:34:8f:74:16:68:fa:c8:d6:20:fb:a1:16:
                    61:23:82:70:cb:b4:02:1a:32:5d:0b:d5:20:85:e7:
                    79:2c:df:23:56:6a:36:d3:3a:45:87:5f:f2:7a:f2:
                    2b:f3:ae:db:71:0b:2f:50:b4:a8:36:3d:bf:07:10:
                    a5:4f:d6:ea:07:d1:cf:66:9e:09:0f:93:5f:71:e4:
                    97:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F0:2F:8D:E2:B1:71:4D:50:B0:E3:09:C0:86:40:EA:9D:8D:8B:97
            X509v3 Authority Key Identifier:
                keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/4B31BDC4B76911ED8A503224C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.60.0/24
                IPv6:
                  2001:df3:ab80::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:b5:24:48:05:1b:1c:c8:b8:53:da:c0:f6:98:cd:4c:0b:cd:
         41:86:be:7b:e3:b2:a3:4f:03:17:01:c4:67:ef:79:da:64:fc:
         14:74:ed:35:5f:c8:94:3f:2b:00:57:b6:2b:94:4c:ef:ad:53:
         0f:50:58:d1:15:07:b9:55:d7:d5:1a:dd:6d:4c:6c:18:9f:2e:
         5d:97:35:24:07:6e:61:f6:9a:10:e8:87:3b:6a:ec:86:54:8c:
         49:d2:d3:93:8c:4c:70:5f:ed:2a:aa:3d:5d:90:22:85:3a:c4:
         cf:8e:65:20:c9:70:b0:88:da:7a:f7:c3:64:94:08:e6:8a:9c:
         90:9d:07:33:d7:50:36:6e:ce:e5:6b:45:7e:4d:e1:10:07:5c:
         48:11:98:5b:61:0f:90:c6:e6:c4:f5:fd:9a:9c:1f:67:a4:5e:
         5d:59:a1:4b:ac:ac:45:06:86:3a:0c:cb:e1:de:17:0e:a7:b3:
         12:d7:64:9a:dc:3a:7d:7c:8b:83:80:25:d9:5e:e0:f3:ec:61:
         31:0f:a1:46:5e:ad:2c:5f:ef:84:d2:32:16:6b:a0:e7:0f:d1:
         d5:eb:39:ea:58:5e:78:c7:eb:1e:6a:ba:44:32:34:5c:0c:56:
         b6:6a:fc:70:9e:39:dd:5e:63:e5:a2:71:c1:58:e9:22:67:8d:
         2e:8e:c8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----