This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DC551C402F7A11EE842F277FC4F9AE02.roa
File:                     DC551C402F7A11EE842F277FC4F9AE02.roa (raw, json)
Hash identifier:          g7pdisowX4NRoghjMljr55Hs86orqLm+g6WRr/I4BW0=
Subject key identifier:   5A:3D:DF:AB:18:BF:36:E9:0D:6B:F5:42:AB:A1:8E:FC:E4:A4:50:E9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       C4B6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DC551C402F7A11EE842F277FC4F9AE02.roa
Signing time:             Fri 12 Sep 2025 08:11:11 +0000
ROA not before:           Fri 12 Sep 2025 08:11:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151102
IP address blocks:        103.165.69.0/24 maxlen: 24
                          2001:df2:ba40::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 10 Oct 2025 05:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50358 (0xc4b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep 12 08:11:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68c3d59e-72e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:74:a5:55:dc:f3:86:b7:73:40:33:2d:e8:8b:
                    23:08:b9:3b:4d:87:15:07:94:81:31:1c:11:03:1d:
                    37:90:f0:fb:0b:54:bd:14:cc:73:60:a3:95:c4:a7:
                    d6:08:46:3a:08:ff:ea:4e:64:b6:4e:d2:64:36:03:
                    67:dc:6f:e2:30:93:a5:72:58:e1:62:c8:ce:d5:00:
                    b7:fd:37:5d:5e:86:e2:3b:ba:08:19:f3:48:ae:f8:
                    98:93:85:c5:6a:e3:41:1e:96:87:b7:7f:94:a2:cf:
                    a5:51:51:6f:d5:98:83:13:54:34:c5:4a:a9:03:1f:
                    4a:e2:b8:88:8a:57:ab:ef:95:69:b9:31:d6:1b:ff:
                    83:ac:c0:01:1f:e5:a4:3d:25:09:46:3e:f3:d1:9b:
                    55:14:93:fe:5d:87:e3:92:ce:5f:96:1c:e2:75:53:
                    df:82:71:de:22:c8:92:93:38:f7:68:4d:68:bc:1c:
                    b0:0d:44:7d:e8:ce:00:c4:80:c4:2d:9e:3c:79:bb:
                    9e:e8:c8:c9:2a:1f:d1:b7:67:3c:cf:bc:8e:24:6c:
                    27:f1:ca:3e:cb:cd:d4:fc:45:c3:6f:50:cc:43:c8:
                    0d:94:bb:3c:98:7d:58:6e:7b:1a:30:62:3c:5d:60:
                    2c:ab:6f:c8:c3:a5:1d:68:f3:02:18:0d:7c:e6:46:
                    d1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3D:DF:AB:18:BF:36:E9:0D:6B:F5:42:AB:A1:8E:FC:E4:A4:50:E9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DC551C402F7A11EE842F277FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.69.0/24
                IPv6:
                  2001:df2:ba40::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:82:79:4c:49:9d:da:04:3b:f1:fb:1f:a4:50:b2:5b:63:c6:
         ba:04:7f:3d:c7:fe:d7:7f:e3:03:a8:c7:c3:ce:bc:af:d6:72:
         aa:ba:c3:92:47:6f:86:dd:79:01:7b:96:5a:a3:e6:09:4b:4a:
         b4:5e:ef:3a:be:9e:09:77:c7:d8:66:b3:4f:36:df:7b:65:19:
         25:b7:68:c9:2e:dc:c0:ae:15:33:97:3b:04:04:b4:fb:36:ae:
         5a:80:91:69:13:f8:39:70:ae:45:94:cf:03:af:64:a3:d7:0e:
         44:af:2e:e3:c2:e2:24:b1:56:66:f4:4f:dc:e4:0a:8c:96:55:
         38:31:61:c9:f6:6a:d7:be:44:0e:8b:38:7e:82:88:6f:7e:02:
         5e:44:1e:d5:17:61:11:7e:64:56:01:63:23:8e:04:9f:dc:39:
         7e:32:d2:ba:87:aa:f4:ad:e6:40:c5:e7:57:17:fa:cd:25:7d:
         f9:78:59:fc:b3:10:bc:f9:5d:eb:f7:54:34:7b:e5:35:1e:b9:
         e0:55:4e:ef:67:f2:26:34:78:76:60:38:4d:6c:cd:1b:7e:cc:
         f3:0b:14:21:0d:cc:0e:09:32:a0:58:e6:5b:c2:94:d1:d9:d0:
         ad:33:45:f1:11:09:06:50:a0:91:85:2c:41:84:55:de:d4:a1:
         40:65:94:1e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIDAMS2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDkxMjA4MTExMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjhjM2Q1OWUtNzJlMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANp0pVXc84a3c0AzLeiLIwi5O02HFQeUgTEcEQMdN5Dw+wtUvRTMc2CjlcSn
1ghGOgj/6k5ktk7SZDYDZ9xv4jCTpXJY4WLIztUAt/03XV6G4ju6CBnzSK74mJOF
xWrjQR6Wh7d/lKLPpVFRb9WYgxNUNMVKqQMfSuK4iIpXq++Vabkx1hv/g6zAAR/l
pD0lCUY+89GbVRST/l2H45LOX5Yc4nVT34Jx3iLIkpM492hNaLwcsA1EfejOAMSA
xC2ePHm7nujIySof0bdnPM+8jiRsJ/HKPsvN1PxFw29QzEPIDZS7PJh9WG57GjBi
PF1gLKtvyMOlHWjzAhgNfOZG0acCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBRaPd+r
GL826Q1r9UKroY785KRQ6TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RDNTUxQzQw
MkY3QTExRUU4NDJGMjc3RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/
BCEwHzAMBAIAATAGAwQAZ6VFMA8EAgACMAkDBwAgAQ3yukAwDQYJKoZIhvcNAQEL
BQADggEBACqCeUxJndoEO/H7H6RQsltjxroEfz3H/td/4wOox8POvK/Wcqq6w5JH
b4bdeQF7llqj5glLSrRe7zq+ngl3x9hms08233tlGSW3aMku3MCuFTOXOwQEtPs2
rlqAkWkT+DlwrkWUzwOvZKPXDkSvLuPC4iSxVmb0T9zkCoyWVTgxYcn2ate+RA6L
OH6CiG9+Al5EHtUXYRF+ZFYBYyOOBJ/cOX4y0rqHqvSt5kDF51cX+s0lffl4Wfyz
ELz5Xev3VDR75TUeueBVTu9n8iY0eHZgOE1szRt+zPMLFCENzA4JMqBY5lvClNHZ
0K0zRfERCQZQoJGFLEGEVd7UoUBllB4=
-----END CERTIFICATE-----