This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/CFB6C2ECB55511EFB8F19317C4F9AE02.roa
File:                     CFB6C2ECB55511EFB8F19317C4F9AE02.roa (raw, json)
Hash identifier:          IDOV+s9/b2WPfIIH5ZqtIS9/8SWz6z4p5xr2P3kI1ZY=
Subject key identifier:   E9:51:38:47:38:88:6C:BE:2E:62:B8:7E:0F:61:01:4F:DB:D4:F6:1F
Certificate issuer:       /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
Certificate serial:       0305
Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/CFB6C2ECB55511EFB8F19317C4F9AE02.roa
Signing time:             Mon 17 Nov 2025 07:53:49 +0000
ROA not before:           Mon 17 Nov 2025 07:53:49 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     134186
IP address blocks:        45.117.60.0/24 maxlen: 24
                          103.57.120.0/22 maxlen: 24
                          2402:5e80::/32 maxlen: 32
                          2402:5e80::/48 maxlen: 48
                          2402:5e80:1::/48 maxlen: 48
                          2402:5e80:2::/48 maxlen: 48
                          2402:5e80:3::/48 maxlen: 48
                          2402:5e80:4::/48 maxlen: 48
                          2402:5e80:5::/48 maxlen: 48
                          2402:5e80:6::/48 maxlen: 48
                          2402:5e80:7::/48 maxlen: 48
                          2402:5e80:8::/48 maxlen: 48
                          2402:5e80:9::/48 maxlen: 48
                          2402:5e80:a::/48 maxlen: 48
                          2402:5e80:b::/48 maxlen: 48
Validation:               Failed, certificate revoked on Mon 24 Nov 2025 12:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 773 (0x305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
        Validity
            Not Before: Nov 17 07:53:49 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=691ad48d-a513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:8c:ba:a1:87:b9:fc:69:ac:05:b7:36:57:
                    bd:ce:a6:ab:d1:dd:89:5e:17:2a:75:61:bd:c3:20:
                    9c:a8:f0:cc:d1:a7:7e:b0:73:eb:9a:3e:2e:7a:51:
                    14:ef:a1:19:60:f9:88:7a:ee:7b:4c:52:e7:28:0e:
                    5d:4b:3e:76:59:94:34:f2:16:e7:29:78:d3:3a:bb:
                    01:14:25:85:6d:10:32:cd:b9:b3:a9:0c:9f:d3:12:
                    b8:ad:4e:d1:0b:aa:fc:2a:98:31:2e:94:d9:8d:2b:
                    b8:d8:b9:8d:77:3a:78:ae:e7:dc:99:7e:21:91:c6:
                    9b:7d:ec:8d:40:5e:a0:af:a5:7d:1a:af:ad:9f:eb:
                    54:d0:c5:42:f7:10:b0:3f:3f:eb:fb:b2:c1:de:df:
                    d1:d9:29:ee:5a:9b:dc:bd:2d:41:18:7c:f5:e0:8c:
                    67:15:d4:71:04:1e:a0:34:56:0c:b6:4f:a6:76:c0:
                    22:b6:2d:0f:ee:93:c8:a0:8d:bb:d7:2b:d2:15:2a:
                    5c:95:d0:b6:9a:03:a8:71:b4:6e:7c:49:af:27:47:
                    b9:a5:d3:61:75:08:4c:41:0e:8d:1c:98:75:bd:e4:
                    00:21:51:b0:be:24:0c:97:07:e6:0b:94:5e:ef:ad:
                    57:c1:47:ea:72:ee:56:95:7b:3b:f6:f3:d4:1b:08:
                    1b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:51:38:47:38:88:6C:BE:2E:62:B8:7E:0F:61:01:4F:DB:D4:F6:1F
            X509v3 Authority Key Identifier:
                keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/CFB6C2ECB55511EFB8F19317C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.60.0/24
                  103.57.120.0/22
                IPv6:
                  2402:5e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:b7:f0:b2:c5:8f:1c:1f:f0:98:96:d9:b0:fd:9e:25:26:58:
         67:72:11:f6:d6:94:72:31:f8:86:1f:ac:d6:81:20:77:8a:b3:
         74:4e:54:4a:33:2d:7c:4c:dc:7f:dd:a2:71:37:13:48:53:41:
         96:aa:dd:e3:39:e1:78:f0:1a:8a:0f:a9:9f:c0:d6:93:1c:f2:
         94:96:9b:5c:ea:e7:3f:58:02:5e:f5:87:a2:7e:bd:fa:8f:a2:
         6f:d1:a6:db:b5:a9:b0:c4:3a:c1:9b:c0:96:14:34:a1:9e:c7:
         6b:9f:f7:91:32:e6:66:67:b6:01:d1:1b:c2:27:c9:00:74:89:
         c5:47:5a:2f:78:1d:a0:54:e0:6b:35:7f:91:a8:25:ce:54:e0:
         c0:9e:43:f8:12:2b:d4:ab:9a:54:ec:ee:2f:fc:6f:1d:f2:9f:
         03:a5:f5:3d:e8:b6:ba:d2:e8:5d:06:33:3e:f7:bc:29:1f:34:
         d8:bb:52:65:26:b0:97:6a:f0:9d:e2:fb:27:50:47:35:1f:a9:
         d8:9f:93:bb:ca:61:5f:13:ad:0b:1f:82:ac:28:75:1f:8e:0a:
         a8:4a:87:2b:d7:f2:e2:52:ab:d3:37:1b:18:ed:e9:46:f2:ea:
         6a:36:d6:15:05:87:1c:d1:01:f6:75:23:6b:95:98:95:36:0d:
         a0:a7:55:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 16:04:34 2025 by rpki-client