This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0E9272DA768611F08998521AC4F9AE02.roa
File:                     0E9272DA768611F08998521AC4F9AE02.roa (raw, json)
Hash identifier:          P1yhlzW07zG6GqGogOPzgxDfgw94H79ThvsFFJjqyAg=
Subject key identifier:   8E:BC:D3:A8:2C:48:DE:57:BD:E5:F6:FB:E0:F4:F9:F3:42:2D:88:2B
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       3661
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0E9272DA768611F08998521AC4F9AE02.roa
Signing time:             Thu 06 Nov 2025 01:24:30 +0000
ROA not before:           Thu 06 Nov 2025 01:24:30 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     834
IP address blocks:        182.54.238.0/24 maxlen: 24
                          182.54.239.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 18 Nov 2025 11:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13921 (0x3661)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Nov  6 01:24:30 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=690bf8ce-d07c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7a:bc:2e:5e:be:66:d3:86:f5:2e:d1:55:35:
                    b0:ee:96:d0:8f:4d:df:32:92:a3:74:cd:18:a1:c1:
                    6a:f1:8c:82:a5:6d:2c:a0:de:fe:f0:d8:d9:25:de:
                    80:7e:ea:63:b3:65:31:54:f6:56:d9:3a:e2:72:54:
                    65:13:8c:2f:dd:d9:c4:30:16:8a:b6:f4:9c:ae:db:
                    9b:9b:22:a9:89:c1:1b:f2:75:85:9d:7e:cd:47:3e:
                    93:87:b2:58:cb:db:c1:ed:42:6d:fb:48:99:f9:4e:
                    43:0c:42:16:93:0c:83:61:ff:16:52:b6:fa:39:d4:
                    60:56:9c:f2:53:0c:8b:11:4f:7a:11:44:45:eb:a0:
                    6d:2d:b6:d5:bb:09:86:d5:87:2f:42:92:44:f5:73:
                    29:7f:47:2c:8b:c7:6c:e7:72:fe:66:07:10:e9:3c:
                    d6:b3:de:c1:2d:bd:54:ed:ed:e3:ed:ee:46:b8:eb:
                    dd:62:b0:4b:e4:af:53:f0:84:9a:53:01:4f:68:d9:
                    08:42:c8:f9:5f:7a:5a:e6:70:e1:ba:ba:c0:56:59:
                    3c:0f:6d:90:7f:15:17:54:88:30:2c:02:c3:f3:d2:
                    3e:51:ad:48:c2:b0:4f:6b:fd:83:fa:41:2a:5a:f2:
                    bd:5b:5a:98:28:0a:38:89:7f:c4:8c:4d:cc:cd:43:
                    d4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BC:D3:A8:2C:48:DE:57:BD:E5:F6:FB:E0:F4:F9:F3:42:2D:88:2B
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0E9272DA768611F08998521AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.54.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:e4:74:1a:7c:f0:80:5b:f2:88:4b:df:5d:89:08:69:8d:d7:
         3f:43:6f:d2:b6:51:a6:34:54:51:00:f3:f1:b7:ca:20:03:b2:
         66:e3:f1:ef:80:cf:14:10:df:da:fb:be:db:e9:54:33:97:d1:
         2d:d9:07:39:c5:57:28:4c:4d:1e:97:71:49:f4:94:f1:1a:63:
         94:75:66:23:ce:ca:3c:d3:fd:67:ef:2e:9d:58:38:75:c1:ab:
         2d:f2:3d:cf:b4:f2:68:0c:ce:49:62:ec:2d:6d:f8:47:a0:6a:
         65:64:4c:71:8f:72:c4:65:9f:ce:3d:32:09:16:d6:3e:ad:bb:
         d0:c9:4d:ef:9b:03:59:c5:d4:e7:f5:6c:65:62:5c:d4:ad:4e:
         37:b6:c6:84:fa:da:52:a6:d2:1a:da:d1:ab:13:85:4d:0f:38:
         ee:f2:d6:55:df:8f:a8:e7:e7:f7:f9:23:f5:30:1b:99:3d:aa:
         34:e7:01:73:f9:23:ae:98:dc:09:bd:3b:67:1b:b4:df:6e:1a:
         0c:64:95:95:79:a3:77:b2:82:46:24:53:a1:9c:9c:b3:7b:9d:
         95:85:75:90:41:cb:b7:f5:ea:a2:5d:fc:61:46:06:8b:84:3c:
         5b:ef:a9:6e:79:70:7f:e5:d4:d8:9e:08:81:7a:c7:c4:0b:77:
         8d:77:d9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----