This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/54E9D878F08311EB8268373EC4F9AE02.roa
File:                     54E9D878F08311EB8268373EC4F9AE02.roa (raw, json)
Hash identifier:          2dKBXSVS1H9+PztFUFeH1IJNMCL93pag3JLnjY536SA=
Subject key identifier:   36:8B:C4:CF:64:77:44:46:5C:93:E7:BF:9C:9D:32:7B:01:7C:FA:2E
Certificate issuer:       /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Certificate serial:       0587
Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/54E9D878F08311EB8268373EC4F9AE02.roa
Signing time:             Sat 17 May 2025 00:13:51 +0000
ROA not before:           Sat 17 May 2025 00:13:51 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     137550
IP address blocks:        103.112.236.0/24 maxlen: 24
                          103.112.237.0/24 maxlen: 24
                          103.112.238.0/24 maxlen: 24
                          103.112.239.0/24 maxlen: 24
                          2406:d1c0::/32 maxlen: 32
Validation:               Failed, certificate revoked on Sun 26 Oct 2025 13:05:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1415 (0x587)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
        Validity
            Not Before: May 17 00:13:51 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6827d4bf-8552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:2e:31:4c:eb:43:f2:81:87:b6:12:29:9b:
                    d7:1e:27:9c:ce:58:31:03:72:da:41:ba:1f:56:27:
                    e6:2e:69:4a:06:e8:f9:3b:3d:89:e0:f7:7d:63:dc:
                    dc:6b:34:8d:55:36:6f:75:4b:a5:ef:ba:fb:6d:38:
                    43:b6:8a:4b:d7:8f:e7:91:43:2d:4e:62:a1:36:d0:
                    df:9f:2d:07:e2:7e:1b:d5:54:86:1b:85:d0:f3:c7:
                    0c:7c:53:38:21:8a:cb:7c:ca:da:70:dc:67:f7:58:
                    1c:aa:95:6a:10:ce:fc:66:06:26:c9:ca:d6:2b:07:
                    26:4a:20:da:aa:3b:d3:97:a6:51:47:16:96:63:a6:
                    4e:cc:eb:20:07:72:6a:3f:78:1c:e9:d5:f9:81:fe:
                    0c:10:a7:66:d8:12:2d:a8:cc:1b:94:e3:31:51:80:
                    7c:24:92:b3:f3:56:fa:bc:3a:b7:46:cc:d0:9c:e3:
                    32:50:11:12:0b:47:5d:c6:1a:70:3c:60:93:fe:3b:
                    60:f7:61:f7:74:d8:a2:b3:29:fb:00:b4:45:83:16:
                    9f:55:d6:3d:14:43:b0:14:0a:43:a8:98:77:76:42:
                    bc:f4:44:3c:73:cb:a9:34:f0:67:63:f1:a1:67:ef:
                    94:fa:00:61:78:e8:c7:9d:7b:2b:1e:fe:d0:25:20:
                    62:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8B:C4:CF:64:77:44:46:5C:93:E7:BF:9C:9D:32:7B:01:7C:FA:2E
            X509v3 Authority Key Identifier:
                keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/54E9D878F08311EB8268373EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.236.0/22
                IPv6:
                  2406:d1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:60:b5:18:32:a8:3e:56:ae:f1:89:82:9c:a9:62:f4:4a:5e:
         02:01:c9:77:49:f2:de:2a:33:3a:6e:46:49:ba:77:0c:52:fe:
         59:33:82:b5:24:29:c0:66:97:75:f9:59:08:cb:81:c6:d4:86:
         4c:85:9d:02:09:cd:2f:4b:b8:c4:6e:37:9e:a4:1d:5d:1b:7d:
         68:3d:fd:00:b8:93:fc:4b:45:d9:ad:d6:87:c4:dc:ca:59:12:
         c3:3d:64:43:b1:71:4b:6a:5f:28:a7:e2:ee:cf:aa:e9:c9:51:
         0b:dc:1d:4d:17:30:70:fb:26:ff:26:9b:32:7b:6b:c7:d6:28:
         ad:03:89:0c:92:cc:67:ac:6b:0a:19:1c:e0:8e:4d:f3:11:2f:
         de:cc:0e:b5:23:4b:33:ec:da:2a:11:e0:12:68:08:4e:a9:26:
         8d:2e:48:ca:7c:72:df:29:22:ed:e7:c2:bf:11:a6:52:e2:58:
         b7:e7:a3:83:76:af:5d:c2:ed:d6:26:02:80:8d:14:83:56:70:
         2a:a9:ce:62:9f:e9:ac:b6:cd:5e:fa:cc:f1:b1:a8:74:b3:4b:
         09:e2:0a:c5:f1:e7:85:96:7b:93:02:df:99:2f:d2:45:64:dc:
         f5:80:d5:23:b0:88:16:51:9d:db:3c:8b:16:75:8b:33:d4:bb:
         64:05:51:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----