This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/0BE50A78AD0911ED8435065FC4F9AE02.roa
File:                     0BE50A78AD0911ED8435065FC4F9AE02.roa (raw, json)
Hash identifier:          pJ91J5zXyQRZyVeEpS51JhEmXcou/Man/Z8L7i8DLF0=
Subject key identifier:   E1:2E:4C:F1:BF:5F:92:35:31:68:C1:D6:22:BD:3B:3E:7C:8F:2C:89
Certificate issuer:       /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Certificate serial:       013F
Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/0BE50A78AD0911ED8435065FC4F9AE02.roa
Signing time:             Thu 17 Aug 2023 03:43:38 +0000
ROA not before:           Thu 17 Aug 2023 03:43:38 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     150006
IP address blocks:        2400:9ce0:5000::/36 maxlen: 36
                          2400:9ce0:6000::/36 maxlen: 36
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
        Validity
            Not Before: Aug 17 03:43:38 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64dd976a-3e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:47:8b:07:2c:10:e4:fa:9c:d1:1a:a3:ff:73:
                    fe:f8:a7:b6:15:cb:36:ba:67:8d:8a:d8:39:7c:5b:
                    70:1c:4e:fa:af:97:27:bd:b2:64:7d:1c:db:63:ce:
                    55:d1:a0:a5:71:2a:d4:b9:e2:2d:39:c6:e8:73:1b:
                    c6:1a:df:64:d5:10:58:9d:04:5a:61:c3:f4:6c:7c:
                    62:54:74:52:83:0b:a9:a2:bd:3c:d9:11:ad:77:33:
                    7a:e7:8f:48:dd:8a:58:a9:f7:f1:53:2a:9e:3c:7d:
                    c0:74:84:04:2f:b5:52:ea:cf:5a:f7:a3:8b:7f:c5:
                    f9:5a:19:4e:f1:9d:9c:42:89:4e:05:4d:a2:00:6f:
                    15:10:56:5e:1a:29:15:11:e6:3a:5c:ac:76:66:75:
                    35:cd:f8:11:96:f2:50:3f:32:14:00:4c:3c:cd:09:
                    15:21:99:57:56:67:ed:a1:73:53:08:39:d3:b6:33:
                    80:18:54:a1:34:73:62:3b:78:8a:c5:ae:6f:94:e9:
                    30:31:6d:0c:73:7c:7b:ed:55:9e:27:80:a2:10:ed:
                    2e:83:d2:48:b4:f3:a1:75:e2:2b:65:bb:53:56:10:
                    fc:62:74:22:ca:9c:df:30:7d:0c:3f:dd:75:be:ff:
                    a9:27:85:7e:ca:65:a0:02:87:5c:06:a9:d2:0c:ea:
                    dd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2E:4C:F1:BF:5F:92:35:31:68:C1:D6:22:BD:3B:3E:7C:8F:2C:89
            X509v3 Authority Key Identifier:
                keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/0BE50A78AD0911ED8435065FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9ce0:5000::-2400:9ce0:6fff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         45:99:7f:97:f2:71:dc:bd:a0:5a:36:a3:6e:36:82:62:39:24:
         44:a1:d3:29:07:0e:da:be:aa:11:a7:24:48:d6:c5:2a:c7:93:
         93:1b:45:be:e3:78:73:c3:18:38:61:82:3d:66:a4:7a:ad:f1:
         8b:b5:82:c6:50:f5:2a:d1:fe:52:62:ff:24:ba:cb:bd:07:88:
         c5:25:4a:23:18:fc:3e:3c:cb:53:e1:b9:cf:70:1c:5b:0e:80:
         e4:a0:ba:04:fb:96:80:40:1f:f6:06:f4:76:9b:ff:34:f8:8a:
         09:ea:98:7a:6b:56:81:9f:c7:f3:c1:b3:9a:28:81:0c:0c:27:
         82:b4:ae:97:ac:04:f0:79:21:c9:22:d5:86:e6:ec:a0:e6:07:
         ee:03:55:2b:d9:47:db:67:b7:59:24:c6:a2:70:73:49:66:74:
         27:95:2c:cc:93:2e:e0:ef:52:38:a5:cf:eb:49:97:46:46:5e:
         6a:68:1b:bb:cd:88:07:88:60:14:49:49:17:6d:37:84:6c:34:
         46:e6:bd:b3:4b:27:5a:8e:ad:7a:29:66:b0:0e:99:44:70:80:
         c9:b9:4d:aa:fb:4f:6a:78:22:16:d9:6d:9a:35:04:bc:7e:94:
         1d:08:67:2a:15:50:13:28:24:ec:f2:1f:e4:c1:e8:49:8a:fa:
         a4:93:00:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----