This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/5A5E75E2E30611EFAD52D552C4F9AE02.roa File: 5A5E75E2E30611EFAD52D552C4F9AE02.roa (raw, json) Hash identifier: nu5dbwOLlZ13YTkUDnySdOEtRFAsDLmzMv0XGB5W4wE= Subject key identifier: AC:00:A2:12:8F:37:4F:3F:1E:EF:61:49:6C:E2:53:A2:03:E3:3D:3C Certificate issuer: /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8 Certificate serial: F9 Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/5A5E75E2E30611EFAD52D552C4F9AE02.roa Signing time: Wed 05 Feb 2025 04:08:26 +0000 ROA not before: Wed 05 Feb 2025 04:08:26 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 138004 IP address blocks: 2001:df3:3340::/48 maxlen: 48 Validation: Failed, certificate revoked on Mon 15 Sep 2025 20:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1, serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8 Validity Not Before: Feb 5 04:08:26 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67a2e43a-6489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:2f:62:2c:58:47:f4:95:6f:b7:a0:95:9b: de:5c:22:82:75:6d:1c:e1:c8:38:3a:e6:9a:3f:a7: 0c:03:33:f4:60:3a:22:b2:ba:7c:ba:f9:1d:b6:70: b3:d1:28:ba:d0:2a:de:23:0a:4f:d5:48:2b:a2:ee: 21:35:f5:41:0e:7a:3b:9d:0b:10:ac:3d:fa:ae:a6: 9d:0e:2f:19:5a:c9:12:0a:5c:6a:7e:14:68:a3:dd: 4b:32:da:8b:79:5c:5c:4d:19:e7:3b:40:06:9a:e4: 99:79:f0:16:07:3f:34:1e:90:0e:98:ab:28:07:63: 56:b9:a1:b5:d3:30:d9:bf:eb:7e:e2:8e:1a:a5:5c: c9:d0:a1:85:13:d8:81:50:f3:9e:70:a5:a0:f0:33: 6a:63:24:80:62:2d:f9:c3:c3:06:ec:ad:33:97:d1: fb:f8:4d:07:cd:b0:1a:e5:3e:8f:75:07:9e:24:4a: 74:af:45:57:6f:8b:16:b4:07:d0:54:06:ef:32:62: 94:e8:77:46:ae:88:c5:ea:a8:e2:40:ce:cd:9f:77: 83:32:41:76:e6:b2:bb:00:5c:fb:bf:3b:c2:68:68: 23:f6:5a:c4:12:e1:49:6f:f6:b8:2d:63:31:86:86: 64:99:4e:3f:b8:86:55:60:69:81:09:99:91:53:65: 70:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:00:A2:12:8F:37:4F:3F:1E:EF:61:49:6C:E2:53:A2:03:E3:3D:3C X509v3 Authority Key Identifier: keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/5A5E75E2E30611EFAD52D552C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:3340::/48 Signature Algorithm: sha256WithRSAEncryption 79:62:b4:bb:e5:85:a4:f3:03:c8:7c:cc:f9:66:c2:f9:3b:5c: 38:fe:b7:cd:19:13:bc:c9:81:75:7a:ae:e2:63:7d:6a:8b:0e: 24:c1:67:2c:bd:39:d4:b8:91:8f:1b:03:29:9f:3a:85:3d:39: ca:c5:20:18:de:94:09:da:88:af:31:29:be:c5:9c:bd:74:86: 60:9b:64:11:5f:ca:8f:35:86:ac:0b:69:b0:09:21:b3:76:6b: 69:85:d1:99:a1:8c:9a:b9:42:cf:b7:2c:e8:7d:03:60:ac:36: ed:6c:57:6c:7b:c4:df:76:50:ce:3b:0c:12:bd:7c:82:2a:3a: 75:30:01:2e:4a:68:22:ad:4f:cb:38:e2:b9:b3:1f:16:52:d7: 04:71:6d:ea:7d:7e:65:1d:f6:d8:89:e3:e8:43:2e:ea:a7:65: 3a:81:7f:7e:5a:66:b6:90:7f:c8:6f:b5:e1:07:b7:05:8a:14: 38:d0:75:4c:53:09:77:09:1b:a7:86:ea:6e:40:a1:26:3d:b9: a9:3e:5e:90:d3:94:c2:ee:11:df:33:32:f1:e0:8b:a1:10:91: f9:9a:6b:35:78:62:92:2b:97:91:af:6d:3a:2c:57:15:b1:4e: 1b:52:53:0c:ce:c7:4e:71:8a:71:51:6a:4c:15:43:e4:1f:67: d9:df:5c:2e -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzQzExMTAvBgNVBAUTKDQxNTNCQTQ5OUE0NEU3RUMxMDQxQzYwRUY3RjM2OUFD NjIzNTdBQTgwHhcNMjUwMjA1MDQwODI2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EyZTQzYS02NDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQIvYixYR/SVb7eglZveXCKCdW0c4cg4OuaaP6cMAzP0YDoisrp8uvkdtnCz 0Si60CreIwpP1Ugrou4hNfVBDno7nQsQrD36rqadDi8ZWskSClxqfhRoo91LMtqL eVxcTRnnO0AGmuSZefAWBz80HpAOmKsoB2NWuaG10zDZv+t+4o4apVzJ0KGFE9iB UPOecKWg8DNqYySAYi35w8MG7K0zl9H7+E0HzbAa5T6PdQeeJEp0r0VXb4sWtAfQ VAbvMmKU6HdGrojF6qjiQM7Nn3eDMkF25rK7AFz7vzvCaGgj9lrEEuFJb/a4LWMx hoZkmU4/uIZVYGmBCZmRU2VwnwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKwAohKP N08/Hu9hSWziU6ID4z08MB8GA1UdIwQYMBaAFEFTukmaROfsEEHGDvfzaaxiNXqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNDMS8wRTBERkE5ODhD Q0YxMUVFOTZGNEU2NUFDNEY5QUUwMi9RVk82U1pwRTUtd1FRY1lPOV9OcHJHSTFl cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWTzZTWnBFNS13UVFjWU85X05wckdJMWVxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDIzQzEvMEUwREZBOTg4Q0NGMTFFRTk2RjRFNjVBQzRGOUFFMDIvNUE1RTc1RTJF MzA2MTFFRkFENTJENTUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zM0AwDQYJKoZIhvcNAQELBQADggEBAHlitLvlhaTz A8h8zPlmwvk7XDj+t80ZE7zJgXV6ruJjfWqLDiTBZyy9OdS4kY8bAymfOoU9OcrF IBjelAnaiK8xKb7FnL10hmCbZBFfyo81hqwLabAJIbN2a2mF0ZmhjJq5Qs+3LOh9 A2CsNu1sV2x7xN92UM47DBK9fIIqOnUwAS5KaCKtT8s44rmzHxZS1wRxbep9fmUd 9tiJ4+hDLuqnZTqBf35aZraQf8hvteEHtwWKFDjQdUxTCXcJG6eG6m5AoSY9uak+ XpDTlMLuEd8zMvHgi6EQkfmaazV4YpIrl5GvbTosVxWxThtSUwzOx05xinFRakwV Q+QfZ9nfXC4= -----END CERTIFICATE-----Generated at Tue Dec 23 06:55:55 2025 by rpki-client