This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/E60CA9B06B3311EFB79B5F87C4F9AE02.roa
File:                     E60CA9B06B3311EFB79B5F87C4F9AE02.roa (raw, json)
Hash identifier:          PRsINPeEAxcdQpkjEiM3tWYXn/3uTe7+U7BIzmg1kfU=
Subject key identifier:   B9:0A:16:FB:DF:EC:EF:38:6D:8B:C2:9B:6C:12:D6:50:63:A0:94:0A
Certificate issuer:       /CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
Certificate serial:       0276
Authority key identifier: 8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/E60CA9B06B3311EFB79B5F87C4F9AE02.roa
Signing time:             Tue 08 Jul 2025 17:27:35 +0000
ROA not before:           Tue 08 Jul 2025 17:27:35 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     45691
IP address blocks:        103.20.198.0/23 maxlen: 24
                          2001:df1:bc0::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630 (0x276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A43EE, serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
        Validity
            Not Before: Jul  8 17:27:35 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=686d5507-a917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:96:37:f8:38:6b:7f:1f:10:31:3f:1f:3f:5f:
                    11:48:83:55:18:34:e4:66:b7:1d:13:4e:9a:a8:21:
                    e0:a8:e7:e0:f7:02:0e:6e:fd:15:08:b3:7e:73:c3:
                    d4:e2:b6:96:6a:21:20:2d:2e:8c:b4:4f:91:8c:25:
                    e1:b0:ef:db:6a:b7:85:1c:6f:8d:b5:1d:d7:b2:31:
                    33:68:1c:06:3f:a3:9f:3e:42:59:78:2b:5b:5c:21:
                    fd:fd:26:9f:9b:5f:d2:58:e6:66:25:e0:8c:9b:5d:
                    ec:a4:f4:18:f2:40:1e:1f:22:3c:90:26:2b:6f:80:
                    d7:21:a4:2c:5a:23:e7:8e:30:31:94:ab:f8:f0:16:
                    05:6a:d9:de:bc:78:75:0c:2e:6a:64:09:bb:54:aa:
                    a6:2b:b5:78:25:ac:35:29:50:b6:2e:76:a6:6c:28:
                    18:61:fb:de:d8:2c:93:10:d3:f0:19:ee:5e:0f:28:
                    70:9e:be:23:dd:92:a1:d1:14:fb:11:f4:97:4c:73:
                    e0:be:95:66:52:b2:b6:07:c5:a8:b6:cb:53:90:75:
                    eb:1b:c5:4f:0b:95:b4:f0:4e:29:ba:f4:ed:87:42:
                    44:6e:9c:00:88:30:9f:d7:f2:72:4d:a2:49:3a:91:
                    50:3d:bb:7e:42:c7:1c:23:f0:ab:ef:f3:92:7c:9f:
                    db:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0A:16:FB:DF:EC:EF:38:6D:8B:C2:9B:6C:12:D6:50:63:A0:94:0A
            X509v3 Authority Key Identifier:
                keyid:8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/E60CA9B06B3311EFB79B5F87C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.198.0/23
                IPv6:
                  2001:df1:bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:08:e6:c8:f6:cf:96:a4:da:e6:30:d5:dc:e0:5d:05:27:25:
         72:6a:cf:70:48:9d:7a:46:fc:c8:97:91:63:a1:20:c3:c9:34:
         78:33:61:3b:57:87:a3:9e:ba:35:09:9d:e0:d8:3b:d5:b5:86:
         94:08:ad:22:7a:17:80:cb:72:ff:c3:ec:a1:5e:39:b2:5c:20:
         9f:ba:2b:1c:a6:d8:1c:ee:1d:a5:c8:12:cb:e3:14:3b:a2:8e:
         78:0f:6b:08:3c:68:86:2b:c7:eb:0b:59:5c:ff:21:9a:24:04:
         b8:72:e0:ec:0d:21:b0:59:21:a3:27:74:0e:60:a8:8e:ea:64:
         9d:c6:fa:7f:1b:cd:83:3b:b8:26:07:1d:ec:85:08:25:a0:33:
         76:36:00:61:ca:ac:57:d6:5d:d3:13:f6:de:43:22:ec:89:e7:
         48:ff:d7:d2:f0:bd:19:89:d7:ee:9e:50:6e:9b:8c:b6:e6:a8:
         9a:77:5c:9c:01:be:17:5f:b5:47:c8:2c:0a:e8:ee:4b:35:36:
         fe:5e:16:67:78:51:6a:6c:08:83:67:19:b8:d6:4b:4f:bf:23:
         8e:df:4c:cb:a7:88:13:7c:60:b4:98:31:b6:aa:a1:20:3c:da:
         ce:33:1e:e1:00:67:7d:af:3b:eb:73:d8:e6:67:bb:e2:b0:ab:
         94:fd:58:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----