This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/8A6206949F4111F081767516C4F9AE02.roa
File:                     8A6206949F4111F081767516C4F9AE02.roa (raw, json)
Hash identifier:          RrHIJJnkceBvi7iaQ6uG/q0eQc7gPVOqaCAI7aLVG70=
Subject key identifier:   EA:33:7B:ED:CA:79:07:C9:E8:E0:1F:EB:6A:F2:ED:3C:1D:83:6D:AE
Certificate issuer:       /CN=A9170EED/serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
Certificate serial:       C4
Authority key identifier: 69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/8A6206949F4111F081767516C4F9AE02.roa
Signing time:             Thu 02 Oct 2025 03:40:29 +0000
ROA not before:           Thu 02 Oct 2025 03:40:29 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     134192
IP address blocks:        160.187.185.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 07 Oct 2025 21:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170EED, serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
        Validity
            Not Before: Oct  2 03:40:29 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68ddf42d-91a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:56:f0:6b:02:b6:ab:54:c4:52:65:14:d4:8b:
                    5b:ff:cb:52:b0:f7:93:05:0c:36:3d:d4:1c:53:eb:
                    ac:77:ad:5c:1c:42:cf:34:f6:b2:7b:f9:52:c4:b1:
                    3f:45:6c:0c:1c:8b:07:a8:93:25:22:ac:20:5b:bc:
                    73:a1:c1:83:fa:31:6b:c3:f0:c4:a4:84:af:5a:09:
                    bb:a0:81:32:98:d9:3c:69:2b:26:02:c1:cf:cb:d6:
                    1d:4f:af:43:ef:e4:b3:b0:dd:06:ec:6c:96:15:6c:
                    50:ae:c5:ef:a4:b7:c7:28:aa:05:8e:9c:f5:cd:5b:
                    6d:93:11:1a:9c:c6:01:a3:cd:0a:15:cb:c5:7e:34:
                    fd:40:37:0b:d3:a7:2e:a6:b0:67:4a:2d:a5:f2:74:
                    4b:d0:9a:f8:67:e3:f8:c6:c0:4a:c3:81:f6:c0:11:
                    c0:85:b2:cb:da:44:44:ce:e7:77:ce:1e:42:f3:7e:
                    fc:e1:e5:85:cb:da:73:46:7c:1e:b3:6b:d8:f7:dc:
                    99:4c:e7:4d:c4:5c:df:2e:8b:3a:3e:e8:10:f9:bb:
                    fb:ff:fa:6d:ba:25:15:b8:44:6f:32:7f:6e:5a:55:
                    71:df:d6:e6:0e:3c:45:17:d7:f0:75:ec:10:d1:76:
                    f5:37:a8:cf:5e:f1:59:4c:e3:52:81:0f:06:37:32:
                    9c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:33:7B:ED:CA:79:07:C9:E8:E0:1F:EB:6A:F2:ED:3C:1D:83:6D:AE
            X509v3 Authority Key Identifier:
                keyid:69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/8A6206949F4111F081767516C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:b8:e2:0a:a2:dc:35:43:23:e4:9d:85:fe:40:cd:47:a9:b8:
         69:43:ad:d3:f5:fe:44:76:f7:a5:d1:92:a2:d1:ac:4c:e1:d3:
         b7:7f:d8:68:cf:be:0c:80:79:fd:9a:66:34:01:53:10:41:3b:
         08:45:d9:ad:d5:13:d5:ad:6e:25:0b:f2:51:97:d6:f0:c8:10:
         5a:28:eb:16:fa:6b:25:f5:b5:e5:79:28:8d:d2:57:f0:cc:00:
         41:c2:56:95:d2:49:e5:6c:cf:3b:f5:2a:c1:13:3a:df:d3:47:
         61:0e:6b:77:b7:b2:33:7d:ec:a3:39:a7:4d:6c:d1:18:cd:38:
         ac:12:d6:7b:f6:e1:7b:c9:ed:23:12:5a:28:b4:a1:8c:8b:49:
         ad:a9:4f:d7:19:d4:dc:69:91:e6:5f:73:58:82:4e:67:ac:bf:
         93:cc:92:11:0d:5e:a0:3c:53:14:b0:ad:0c:a2:3d:a4:7c:75:
         b9:8a:da:e6:e7:7b:2b:e9:c1:e4:0e:07:08:b7:ba:56:b9:16:
         2f:e6:74:44:c0:95:0e:a2:8a:b2:98:89:40:a9:5b:47:c1:ec:
         4c:42:27:5b:61:02:72:89:61:5d:84:c3:ac:6d:24:87:e3:4b:
         09:2c:f3:e4:0f:a4:83:1b:6a:f0:5d:17:ce:ae:cd:a5:ef:5f:
         3e:05:f0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:11:14 2025 by rpki-client