This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/4DA8B6FA2EC411F0A0F0B91DC4F9AE02.roa
File:                     4DA8B6FA2EC411F0A0F0B91DC4F9AE02.roa (raw, json)
Hash identifier:          QnU7KVvQABNOOop2UQ462oAOvW/uk343QcLx+MwgIJM=
Subject key identifier:   0A:2E:3C:3F:CB:56:20:1E:A9:7D:BD:C1:16:FC:27:7A:8F:97:2D:96
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       0255
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/4DA8B6FA2EC411F0A0F0B91DC4F9AE02.roa
Signing time:             Thu 05 Jun 2025 03:10:42 +0000
ROA not before:           Thu 05 Jun 2025 03:10:42 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     18894
IP address blocks:        202.134.249.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 11 Jun 2025 00:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jun  5 03:10:42 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68410ab2-d318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b7:62:e0:87:18:79:ad:aa:c1:f5:d9:29:3a:
                    b7:9f:6e:06:a5:59:e4:00:9c:82:53:85:56:12:5f:
                    78:6e:bb:fa:78:e5:fa:34:0a:51:16:88:8f:36:b7:
                    98:81:9d:e8:0b:d1:3f:07:8f:2c:85:0f:87:ea:b0:
                    b2:4f:e9:73:c0:13:25:d0:ea:8a:a5:aa:aa:c0:c8:
                    dc:9c:69:21:07:73:df:a0:1b:b6:73:74:23:f0:91:
                    85:39:6e:f5:81:d5:21:f4:02:d7:28:1b:9b:6f:27:
                    8e:bc:58:54:68:27:ec:97:6e:10:ef:f2:76:29:9d:
                    98:d0:22:39:cc:c0:6d:9e:fb:96:b3:6c:ad:9d:e4:
                    e9:64:b1:41:f2:b3:e5:19:ff:fd:12:c6:80:4f:21:
                    00:51:8b:17:52:23:6d:55:80:1c:59:62:c2:01:4f:
                    68:95:59:1d:7f:12:2e:d5:8d:3b:54:b1:e8:fc:75:
                    4c:12:73:c5:dd:1e:8d:24:f7:b0:aa:66:b0:82:b7:
                    bf:de:c1:82:7b:44:7a:85:bc:c0:f4:c1:36:b8:bd:
                    a4:2a:9c:63:18:f0:38:00:ff:d3:8f:db:d0:16:35:
                    83:c5:b4:75:24:6a:69:3c:3b:10:fb:34:b8:2d:fc:
                    96:74:c5:8f:dd:c5:ef:8f:85:4c:b2:3c:25:93:27:
                    93:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2E:3C:3F:CB:56:20:1E:A9:7D:BD:C1:16:FC:27:7A:8F:97:2D:96
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/4DA8B6FA2EC411F0A0F0B91DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.134.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:28:86:06:29:bf:a7:6e:85:80:cb:60:0b:14:31:db:a0:14:
         1f:29:bc:58:8b:7b:1b:47:4a:3f:94:05:21:09:52:d6:53:89:
         3f:cf:7f:68:fb:db:aa:d3:e7:40:48:13:4c:68:70:4f:36:7b:
         2f:0d:09:85:4d:67:01:91:83:6a:7d:d6:1a:5b:f3:7e:12:64:
         c9:2d:f1:6a:64:0c:0b:7f:04:63:27:f0:44:e1:d4:44:56:42:
         e5:e1:6e:df:00:5c:7b:3f:55:a7:44:32:ed:8b:ee:b0:04:ea:
         a2:f2:85:e0:c9:27:8c:fb:64:27:32:85:08:ea:ff:e5:eb:64:
         71:b0:54:cd:cf:6f:d4:43:dd:e3:29:71:1e:50:5d:50:87:b7:
         92:72:a9:e4:7a:81:fb:88:a2:7c:59:ef:0a:df:ba:86:c3:e5:
         a4:3a:96:57:33:54:11:67:3e:42:c7:32:57:a6:cf:7b:2a:51:
         a1:ba:cc:d0:bd:f1:bc:d5:35:75:16:ff:04:da:c2:de:32:16:
         44:ac:5a:ac:d1:ae:fe:b4:4d:4e:88:41:13:e1:cd:1a:2f:85:
         f2:f6:fe:d5:ea:38:f9:a0:8a:ec:ec:da:d7:a9:6b:b7:1b:ee:
         17:c0:25:9c:d3:4f:83:23:2a:cc:0b:3f:35:8f:6b:46:57:5e:
         09:3b:7f:df
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY1NTAxMTAvBgNVBAUTKDQ1NkVFQTA2OTJDNkE0RjI2RjUzRDJEMjM3RDFDQjRE
Q0Q3ODMzMDUwHhcNMjUwNjA1MDMxMDQyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODQxMGFiMi1kMzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAurdi4IcYea2qwfXZKTq3n24GpVnkAJyCU4VWEl94brv6eOX6NApRFoiPNreY
gZ3oC9E/B48shQ+H6rCyT+lzwBMl0OqKpaqqwMjcnGkhB3PfoBu2c3Qj8JGFOW71
gdUh9ALXKBubbyeOvFhUaCfsl24Q7/J2KZ2Y0CI5zMBtnvuWs2ytneTpZLFB8rPl
Gf/9EsaATyEAUYsXUiNtVYAcWWLCAU9olVkdfxIu1Y07VLHo/HVMEnPF3R6NJPew
qmawgre/3sGCe0R6hbzA9ME2uL2kKpxjGPA4AP/Tj9vQFjWDxbR1JGppPDsQ+zS4
LfyWdMWP3cXvj4VMsjwlkyeTTwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAouPD/L
ViAeqX29wRb8J3qPly2WMB8GA1UdIwQYMBaAFEVu6gaSxqTyb1PS0jfRy03NeDMF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU1MC84NDAwOTU0QUNF
QzQxMUVEOEE4M0ZCMTFDNEY5QUUwMi9SVzdxQnBMR3BQSnZVOUxTTjlITFRjMTRN
d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JXN3FCcExHcFBKdlU5TFNOOUhMVGMxNE13VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzY1NTAvODQwMDk1NEFDRUM0MTFFRDhBODNGQjExQzRGOUFFMDIvNERBOEI2RkEy
RUM0MTFGMEEwRjBCOTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKhvkwDQYJKoZIhvcNAQELBQADggEBABYohgYpv6duhYDL
YAsUMdugFB8pvFiLextHSj+UBSEJUtZTiT/Pf2j726rT50BIE0xocE82ey8NCYVN
ZwGRg2p91hpb834SZMkt8WpkDAt/BGMn8ETh1ERWQuXhbt8AXHs/VadEMu2L7rAE
6qLyheDJJ4z7ZCcyhQjq/+XrZHGwVM3Pb9RD3eMpcR5QXVCHt5JyqeR6gfuIonxZ
7wrfuobD5aQ6llczVBFnPkLHMlemz3sqUaG6zNC98bzVNXUW/wTawt4yFkSsWqzR
rv60TU6IQRPhzRovhfL2/tXqOPmgiuzs2tepa7cb7hfAJZzTT4MjKswLPzWPa0ZX
Xgk7f98=
-----END CERTIFICATE-----