This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/636BEC0EDE2911EB9B09A334C4F9AE02.roa
File:                     636BEC0EDE2911EB9B09A334C4F9AE02.roa (raw, json)
Hash identifier:          VOYm7jU4Kvc9hx4OGGVzt7NNxmHs7ShlGibbgILvMOk=
Subject key identifier:   CB:97:D8:A4:E0:B8:C4:5D:61:C7:82:AA:64:17:B0:6C:35:37:EB:A3
Certificate issuer:       /CN=A91F185F/serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
Certificate serial:       0620
Authority key identifier: 58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/636BEC0EDE2911EB9B09A334C4F9AE02.roa
Signing time:             Wed 02 Apr 2025 22:55:09 +0000
ROA not before:           Wed 02 Apr 2025 22:55:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48024
IP address blocks:        103.90.136.0/22 maxlen: 24
                          202.8.104.0/22 maxlen: 24
                          2403:4f40::/32 maxlen: 40
Validation:               Failed, certificate revoked on Sun 27 Jul 2025 14:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1568 (0x620)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F185F, serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
        Validity
            Not Before: Apr  2 22:55:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67edc04c-ee64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:75:d2:42:76:8b:be:c6:44:3a:16:86:77:
                    ea:aa:da:2b:17:97:29:a3:40:be:d5:8b:20:e6:3f:
                    c2:67:78:ee:a5:7d:9e:b5:d4:6e:01:b1:67:f3:fe:
                    4d:05:fe:ab:fc:88:96:43:48:9b:8c:f8:77:7a:aa:
                    21:ab:68:45:78:09:35:85:65:6d:ea:a5:3e:46:32:
                    36:5c:f6:08:b2:ea:95:51:4d:63:73:ad:67:52:51:
                    9c:c8:3b:19:56:9c:98:f6:41:59:fb:df:1b:76:a1:
                    59:ef:95:8c:37:47:72:13:c7:69:71:bd:0d:5a:91:
                    92:f1:c9:4d:00:be:bd:2b:90:92:ef:d6:a2:e4:09:
                    a2:a7:b2:26:19:64:c3:4d:57:ad:77:ea:78:49:4d:
                    58:10:07:df:3a:59:f4:39:e0:a8:da:8e:5f:e3:a7:
                    7a:58:ac:37:1d:10:a8:d5:3b:0f:dd:d9:f6:45:3f:
                    b0:53:18:7a:59:9a:74:4d:80:cf:5f:7f:99:60:2d:
                    a9:84:55:0d:ca:dd:70:e6:a3:62:e9:b8:87:cd:1c:
                    74:23:e4:2c:d4:f9:7e:53:c8:80:9e:1f:56:c3:72:
                    3d:75:19:f3:97:3b:92:3c:f0:91:54:3d:11:1f:e4:
                    00:1a:14:ef:dc:05:b4:fb:72:cf:1a:47:88:ba:37:
                    4b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:97:D8:A4:E0:B8:C4:5D:61:C7:82:AA:64:17:B0:6C:35:37:EB:A3
            X509v3 Authority Key Identifier:
                keyid:58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/636BEC0EDE2911EB9B09A334C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.136.0/22
                  202.8.104.0/22
                IPv6:
                  2403:4f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:94:15:6a:17:a7:42:bb:73:18:b7:8b:0f:e6:17:a7:1a:33:
         21:6c:db:1f:fe:d5:1a:11:9a:ff:8b:3e:e7:48:88:ca:5e:07:
         c1:65:7d:28:19:18:c8:f8:a4:a7:fc:1a:35:71:38:d1:49:08:
         cc:2c:67:ee:1c:dc:75:7f:54:28:82:b5:ea:69:70:06:c5:77:
         59:ae:bb:07:00:c9:9f:f5:43:7d:8e:34:42:81:e1:3c:39:bc:
         c9:0c:bb:b6:61:fd:25:00:93:a9:29:b3:8c:b1:20:f6:d4:a0:
         6b:c1:a0:f4:1f:77:06:b1:6e:20:b1:e0:c2:b8:f2:1e:a1:58:
         2c:fc:31:c7:ee:a5:30:53:9f:ff:6c:49:44:6e:5b:ee:27:f0:
         dc:3d:21:b7:15:7d:81:5a:2c:88:4b:2d:ec:7f:bc:d9:20:d4:
         94:cf:ec:b1:d1:e6:f6:d1:3c:b7:63:ac:88:44:1c:5d:d8:d8:
         56:ac:cf:c9:ef:b5:e7:d0:b6:f7:04:1b:1d:ca:31:1b:c3:5c:
         04:08:fc:fd:21:1d:22:75:9d:1f:f1:5c:5b:51:00:5e:d5:84:
         23:d2:a5:15:9f:64:e7:b3:84:ee:31:c1:31:ce:12:1b:61:f8:
         39:14:88:cb:25:86:23:3c:5b:58:a3:a7:81:48:03:5f:85:da:
         5d:ad:6c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----