This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/4BA245C01F3711F0BFC63D0BC4F9AE02.roa
File:                     4BA245C01F3711F0BFC63D0BC4F9AE02.roa (raw, json)
Hash identifier:          OhqxRL8mAK+GK1LxCQy8/8h+hC6jSEgM0eFu0NoMdXU=
Subject key identifier:   4F:20:32:DB:59:D1:DA:21:F2:AD:50:3A:29:A3:21:71:6B:48:4C:9C
Certificate issuer:       /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845
Certificate serial:       04B2
Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/4BA245C01F3711F0BFC63D0BC4F9AE02.roa
Signing time:             Wed 30 Jul 2025 10:16:41 +0000
ROA not before:           Wed 30 Jul 2025 10:16:41 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     136308
IP address blocks:        103.150.152.0/23 maxlen: 23
                          202.12.80.0/22 maxlen: 22
                          202.12.80.0/23 maxlen: 23
                          202.12.80.0/24 maxlen: 24
                          202.12.82.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 10:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1202 (0x4b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845
        Validity
            Not Before: Jul 30 10:16:41 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6889f108-954d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e5:2e:28:14:e3:39:08:14:37:12:c0:50:7f:
                    87:1c:96:c1:a7:5b:cb:61:9b:9f:40:23:37:72:f1:
                    f8:cc:f9:6f:8b:e6:90:4b:4b:2a:56:3f:38:b1:1d:
                    09:92:57:e4:9d:45:7a:e8:bf:d0:f4:a3:dc:ce:c9:
                    18:2e:7d:d4:00:57:e8:ac:33:59:fc:1c:de:04:1e:
                    5b:77:7a:8a:51:46:64:7f:03:86:54:51:b1:44:40:
                    0b:7c:a9:45:a7:fc:72:36:90:97:04:e2:8c:d4:20:
                    da:ab:5d:9f:ba:ba:85:90:47:c8:b4:1d:1c:e6:15:
                    0d:da:ab:e9:09:03:f1:39:a2:2c:63:28:22:b5:4b:
                    24:cd:52:a7:1a:49:f2:f6:80:75:5b:70:be:05:37:
                    e5:e7:96:79:31:61:88:98:24:6a:16:9d:a3:9f:7d:
                    14:16:b2:2c:9a:cd:9f:f3:c7:20:e7:b0:0c:01:97:
                    a0:a2:52:18:ea:c9:23:61:e7:8a:6d:32:f9:34:43:
                    08:95:cd:ef:68:5a:d2:23:e7:50:a7:55:14:01:37:
                    5e:a0:b8:00:8d:4e:e8:b3:f1:ed:34:a0:2b:c8:90:
                    1a:73:87:7f:25:90:b5:99:30:52:0e:43:53:2c:7a:
                    7d:f4:b5:22:c8:c0:8f:38:6a:41:21:f4:67:35:60:
                    3b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:20:32:DB:59:D1:DA:21:F2:AD:50:3A:29:A3:21:71:6B:48:4C:9C
            X509v3 Authority Key Identifier:
                keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/4BA245C01F3711F0BFC63D0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.152.0/23
                  202.12.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:d0:20:9b:98:17:ee:a0:53:bf:97:6e:52:79:b3:91:7b:e0:
         96:71:52:53:77:80:c7:6f:4d:0f:d2:d6:c5:9c:9b:51:ce:fe:
         a5:89:c4:97:73:db:41:bc:60:a4:ce:9c:8f:02:b1:99:8e:3b:
         38:4a:e4:6e:ac:71:46:75:24:7f:89:96:21:9b:f5:e1:d9:53:
         2f:b9:53:15:cc:54:4a:fd:eb:94:77:db:a9:68:ef:e1:d6:2f:
         1a:a6:13:35:98:c6:98:bf:d8:13:58:a6:d1:d8:0c:0d:be:02:
         77:25:e9:16:d7:12:6c:d2:95:bb:f1:9b:ff:47:16:dd:e7:20:
         1a:35:49:c1:fd:fe:f0:2f:89:4c:63:c7:e4:48:21:4b:95:91:
         d6:41:7d:d5:37:25:5a:49:7c:e6:16:af:14:11:2a:04:a5:76:
         9f:fa:33:c4:04:4b:dc:fc:13:27:d3:51:1b:5f:73:5e:c9:61:
         70:1f:b6:36:05:ab:c3:e9:7e:b2:5f:ff:7c:1f:1f:31:10:11:
         2e:05:21:41:2b:94:ee:72:23:7e:47:48:23:70:3e:2c:1f:26:
         38:e3:f4:ee:01:5a:c6:55:80:43:3c:1b:12:75:31:97:e4:a7:
         4f:8b:96:6d:da:c8:b8:5b:9b:92:d1:cd:16:a1:a5:6a:7b:75:
         b2:86:4a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 6 02:55:55 2026 by rpki-client