This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/71F97AC0560E11EEA8088470C4F9AE02.roa
File:                     71F97AC0560E11EEA8088470C4F9AE02.roa (raw, json)
Hash identifier:          M1Z0vPN0xRUeI7aXSO+zgJ15zwwVDL1Npd3KMXS/ZDo=
Subject key identifier:   20:26:AC:C5:D1:FA:E7:44:08:21:F1:21:02:AF:A5:16:85:58:98:8A
Certificate issuer:       /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5
Certificate serial:       017E
Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/71F97AC0560E11EEA8088470C4F9AE02.roa
Signing time:             Fri 25 Apr 2025 02:59:47 +0000
ROA not before:           Fri 25 Apr 2025 02:59:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151064
IP address blocks:        103.234.12.0/24 maxlen: 24
                          2401:c6a0::/32 maxlen: 32
Validation:               Failed, certificate revoked on Tue 30 Sep 2025 17:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886CC, serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5
        Validity
            Not Before: Apr 25 02:59:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=680afaa3-5314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:d1:25:a4:42:1a:4c:8a:c4:ab:e1:63:bf:
                    39:07:73:ba:51:f3:2e:5b:45:31:b7:31:6f:eb:0f:
                    2f:a6:98:82:5d:39:93:6e:b1:0b:84:5a:64:ec:cb:
                    50:c2:f4:44:a1:9f:10:96:e0:b4:b5:e1:e9:75:4b:
                    c8:f8:37:f4:a5:05:8e:00:c4:b2:11:f6:1a:25:10:
                    87:7d:10:77:a6:81:a5:db:b5:97:74:9d:8d:ea:ae:
                    57:6d:86:d3:2e:ee:fa:7e:2f:35:1b:08:d2:7b:b5:
                    37:ba:fd:62:33:a8:c8:6f:c5:0b:db:e6:57:a2:3f:
                    87:dc:d5:f2:4a:67:60:15:24:4e:db:4a:e4:15:d1:
                    fd:40:39:15:37:6e:66:33:72:a7:a1:b2:b2:02:62:
                    eb:a3:e1:c5:03:47:73:7c:ad:61:1f:50:3b:13:a9:
                    fc:28:b9:39:37:85:6a:45:5e:b8:ee:f4:99:da:2b:
                    9d:88:ff:e5:e1:63:70:cf:56:d1:68:bc:63:5f:15:
                    1c:b5:f6:f0:e8:3e:8f:2f:9d:d9:18:76:24:60:e5:
                    82:9e:53:20:e6:fb:cd:be:6f:9a:41:2e:ed:38:57:
                    19:d5:99:68:cc:a2:d1:6f:ff:c9:01:51:65:c9:54:
                    c9:1b:8f:37:cb:4e:38:34:4e:3a:e6:14:d8:07:9b:
                    6d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:26:AC:C5:D1:FA:E7:44:08:21:F1:21:02:AF:A5:16:85:58:98:8A
            X509v3 Authority Key Identifier:
                keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/71F97AC0560E11EEA8088470C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.12.0/24
                IPv6:
                  2401:c6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:1c:83:6a:02:9f:61:59:a3:8a:5c:ed:4f:56:57:29:d5:ac:
         c3:48:81:35:48:17:ae:51:92:87:5e:ce:2d:d7:3b:26:e9:ff:
         5a:8d:a0:d1:17:d3:23:d1:8e:f5:8c:84:22:f0:ed:26:c2:11:
         5d:09:51:65:5c:55:8e:9c:07:e5:e9:97:72:71:97:01:9e:b1:
         d5:74:6d:26:9f:2b:ea:70:e7:a6:e4:70:ca:92:e0:00:09:e0:
         ea:cc:fe:97:dd:61:b9:d6:a1:15:15:c2:bc:6a:97:41:16:8a:
         36:4a:81:6b:d8:52:90:9c:39:65:3c:d1:82:fe:00:4e:1f:bb:
         e6:b1:42:83:1b:51:74:e9:1c:07:a6:7f:cf:d0:bf:77:b2:81:
         91:ec:b7:c7:e1:73:08:76:b5:ad:28:4d:4c:1c:38:c7:6c:fd:
         32:41:a9:9a:a4:35:d1:5b:7b:0b:13:f4:12:d3:41:1f:5b:d7:
         4a:32:e1:3a:0e:49:60:c3:76:08:ad:f8:d4:44:b0:3d:58:80:
         44:59:af:37:a3:ba:e9:ed:3a:ca:63:27:cc:0d:80:f1:a0:8c:
         0a:42:3b:a0:fd:b1:c7:8a:82:bd:f3:53:0f:a7:83:8a:05:9e:
         71:fc:d5:ed:f3:44:65:7e:8a:6d:d1:95:f5:53:c8:05:e6:b9:
         72:4f:e3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----