This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/72947448BC4211F097A2D960C4F9AE02.roa
File:                     72947448BC4211F097A2D960C4F9AE02.roa (raw, json)
Hash identifier:          6QzbiT3NvIPf4t5fmwDetmJizLE5PpP70Onzx1tHagA=
Subject key identifier:   BD:A2:BE:7A:D2:C2:F7:D8:6D:36:48:94:7C:C7:3A:0C:00:43:54:68
Certificate issuer:       /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial:       0305
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/72947448BC4211F097A2D960C4F9AE02.roa
Signing time:             Sat 08 Nov 2025 01:30:02 +0000
ROA not before:           Sat 08 Nov 2025 01:30:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        103.227.210.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 06 Dec 2025 05:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 773 (0x305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
        Validity
            Not Before: Nov  8 01:30:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=690e9d1a-b850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:23:58:9e:78:ea:b8:57:5d:6e:66:d8:16:f1:
                    12:13:4c:59:03:36:3e:08:60:0c:23:4a:e9:24:35:
                    49:f6:d8:5f:6e:dc:53:4a:96:7c:95:09:29:23:7b:
                    cc:ce:c5:43:5c:25:9f:fd:26:83:74:99:bf:8c:07:
                    e2:c0:0d:c7:76:b1:8a:e4:e8:29:7f:68:97:f0:05:
                    97:bd:8b:9a:5b:3a:fb:05:a5:3c:b3:2b:7b:e4:9f:
                    aa:b0:bd:b8:12:20:c9:1b:d3:44:8b:0e:00:9a:62:
                    da:7b:94:e3:6e:8e:d6:03:5b:f1:b6:4c:78:4c:63:
                    9d:fb:2f:7b:42:54:40:e7:0d:17:93:9e:04:59:cf:
                    ab:08:02:e3:3c:e9:51:f7:80:26:82:1f:56:0e:24:
                    9e:ce:8f:fb:48:2d:c1:0c:a7:f0:98:fb:2d:bf:85:
                    a6:c4:90:07:7c:75:8a:9d:22:b8:f0:ea:90:28:3d:
                    7f:23:85:4b:53:40:17:a9:ee:2c:53:3a:57:ca:e5:
                    c4:bc:d1:29:cd:0f:8a:2d:93:fc:9c:c6:13:12:2d:
                    b5:1b:53:92:1f:d6:f1:30:7e:41:45:e6:1d:d0:d1:
                    a5:b8:00:1f:b1:0c:ba:3d:87:38:bc:52:0a:60:40:
                    67:c6:99:db:d4:14:0e:3e:3a:bc:12:5d:0b:09:04:
                    4b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A2:BE:7A:D2:C2:F7:D8:6D:36:48:94:7C:C7:3A:0C:00:43:54:68
            X509v3 Authority Key Identifier:
                keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/72947448BC4211F097A2D960C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:06:69:a1:07:04:49:b7:ff:2b:b5:1b:ab:e5:f9:3f:74:b5:
         f2:f9:f1:50:69:0b:b5:cd:8d:17:a4:2e:47:ee:04:42:5d:04:
         b7:00:ce:2d:a2:dc:93:87:fd:05:fe:6e:50:1d:af:7d:b7:ba:
         8d:12:92:03:3f:c3:44:4c:25:96:61:ca:5f:14:ed:4b:93:a4:
         4b:6c:50:ff:e8:6f:27:a1:20:57:a7:4c:97:06:11:e5:34:24:
         47:6b:ab:3c:10:96:7f:a9:9c:3d:a1:fe:27:27:8a:96:68:a9:
         27:ec:94:1b:f2:bd:48:83:96:fc:92:20:9c:df:e5:70:2c:e1:
         ca:57:df:c6:cf:12:d3:ee:47:a5:45:00:a3:4a:cc:af:81:58:
         a3:f1:0d:65:c9:9f:e3:d3:c1:82:2c:64:f0:1b:df:e0:af:48:
         4b:33:81:90:2a:dc:9f:a0:c5:0e:cb:a2:96:75:7b:16:54:2c:
         85:24:09:93:f4:6c:5f:e6:45:04:43:99:9f:56:3a:0b:a0:2b:
         5d:3d:4c:76:81:d6:4a:ee:6d:f8:36:9e:7c:c0:24:e3:9d:04:
         d1:0f:d1:38:9b:02:0d:9a:32:3b:12:fc:52:d3:dd:3c:26:b6:
         03:ee:a6:6c:05:19:ef:dd:bf:f1:64:80:38:81:4c:c8:0d:24:
         4f:03:ae:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----