This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/7CEC726E39A311F09A62C76CC4F9AE02.roa
File:                     7CEC726E39A311F09A62C76CC4F9AE02.roa (raw, json)
Hash identifier:          0+1jIDaRCmCPnF7PPKfluUTfN8lTlCGPU+sUbCPXOfQ=
Subject key identifier:   EC:B1:58:2D:14:FC:90:DF:E8:1D:DB:E1:F9:D5:34:FB:27:25:63:8A
Certificate issuer:       /CN=A91C9C03/serialNumber=A24D96383359CB4966A15B9A906913EB5456657B
Certificate serial:       02
Authority key identifier: A2:4D:96:38:33:59:CB:49:66:A1:5B:9A:90:69:13:EB:54:56:65:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ok2WODNZy0lmoVuakGkT61RWZXs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/7CEC726E39A311F09A62C76CC4F9AE02.roa
Signing time:             Sun 25 May 2025 20:04:39 +0000
ROA not before:           Sun 25 May 2025 20:04:39 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     133605
IP address blocks:        163.227.144.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 26 Jun 2025 18:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9C03, serialNumber=A24D96383359CB4966A15B9A906913EB5456657B
        Validity
            Not Before: May 25 20:04:39 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683377d6-288e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:bd:f5:f1:7c:b0:fb:62:fc:5e:31:95:ce:a0:
                    21:c5:60:a9:f0:a3:2f:76:36:95:a8:84:00:8d:17:
                    6b:bd:1c:55:2a:a5:2c:41:e0:07:b4:58:78:dd:f5:
                    e3:96:f6:2d:ba:b6:e9:80:38:89:93:70:7e:1c:bf:
                    c9:da:f4:be:90:fd:16:a5:47:8e:bd:5e:79:14:8e:
                    9a:e5:be:01:40:28:6d:68:c3:19:b4:62:b1:7b:9b:
                    20:1c:e6:7d:d6:35:6f:ba:ad:d1:20:47:4a:2f:a2:
                    56:fe:a0:f0:17:0f:6b:5b:64:eb:11:48:f7:9c:9f:
                    db:1c:7e:a9:09:32:a2:fe:64:5a:be:ac:b5:55:e1:
                    1a:d8:47:7f:d8:cb:a0:2b:70:07:9e:ad:74:69:29:
                    28:0f:c0:72:e2:53:45:e6:83:75:b7:37:fd:d1:b2:
                    ea:75:41:e9:5c:69:41:42:e5:31:01:6f:00:3d:b3:
                    04:12:8d:06:a7:95:52:ab:be:03:5d:9b:65:a8:2c:
                    e3:48:0b:e4:0d:89:e6:7b:2b:44:24:9f:5a:41:6b:
                    cf:26:bf:45:8b:99:e6:cd:10:00:47:dd:54:a4:cb:
                    7f:28:7c:fc:6f:dd:46:d4:e8:db:45:f8:bb:25:68:
                    8e:88:cc:5c:aa:94:46:c8:7f:17:fa:75:ab:a6:bb:
                    4a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B1:58:2D:14:FC:90:DF:E8:1D:DB:E1:F9:D5:34:FB:27:25:63:8A
            X509v3 Authority Key Identifier:
                keyid:A2:4D:96:38:33:59:CB:49:66:A1:5B:9A:90:69:13:EB:54:56:65:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ok2WODNZy0lmoVuakGkT61RWZXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/7CEC726E39A311F09A62C76CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:6c:f5:18:b7:76:ad:8d:29:35:9d:e0:4d:f1:86:1e:d3:9f:
         a9:9a:f8:9a:52:eb:5a:86:7e:76:35:cf:97:c0:83:a5:33:94:
         5f:a7:63:85:09:8c:83:02:0e:65:51:fb:e1:f1:5f:79:7f:c3:
         b0:98:d3:81:9f:45:e3:8d:16:96:95:f4:eb:6c:24:30:79:84:
         7e:6c:d9:53:23:3f:a3:ae:3e:81:56:36:7c:f0:67:2a:70:84:
         94:75:ba:4d:fc:19:49:ac:63:64:29:6d:4f:81:ec:46:d8:ec:
         1e:43:2d:3a:9c:f7:fd:bd:e9:ca:9e:de:eb:6c:60:c5:b0:e2:
         72:dd:41:5e:24:b7:5d:7f:d2:4f:e8:ad:3b:a2:72:d8:3d:40:
         c1:d5:2f:38:e6:aa:db:46:78:74:3c:0f:1f:9b:b9:27:f9:1a:
         96:87:68:23:a5:f1:54:18:dc:02:aa:de:86:35:5d:25:85:cb:
         1f:40:b1:bb:b9:a8:3c:4a:52:bd:17:fe:fe:8a:e3:0a:97:ea:
         aa:ab:35:9e:9e:c0:a0:2d:ee:f4:9a:03:2a:84:bd:19:6f:8d:
         07:89:67:44:28:f1:e2:9b:66:31:c1:bc:9d:ff:79:dd:f6:b4:
         1d:29:75:51:4c:95:68:c5:ae:c7:30:94:c0:17:40:e2:fd:33:
         97:fc:60:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----