This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/E5A47506DFCE11EFBC4CD631C4F9AE02.roa File: E5A47506DFCE11EFBC4CD631C4F9AE02.roa (raw, json) Hash identifier: zUZ3Bf52kLeGaQaVTxzA3XyLem5/xkMxlFhz295vfbc= Subject key identifier: 29:7A:54:E7:55:14:C1:4D:57:41:B7:BB:05:6A:76:C8:1F:6C:58:3B Certificate issuer: /CN=A9157DA0/serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44 Certificate serial: 34B0 Authority key identifier: 88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/E5A47506DFCE11EFBC4CD631C4F9AE02.roa Signing time: Tue 24 Jun 2025 01:33:06 +0000 ROA not before: Tue 24 Jun 2025 01:33:06 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 45193 IP address blocks: 103.39.252.0/22 maxlen: 22 119.252.122.0/24 maxlen: 24 119.252.123.0/24 maxlen: 24 119.252.124.0/23 maxlen: 23 119.252.124.0/24 maxlen: 24 119.252.125.0/24 maxlen: 24 Validation: Failed, certificate revoked on Sat 28 Jun 2025 02:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13488 (0x34b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DA0, serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44 Validity Not Before: Jun 24 01:33:06 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=685a0052-2d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:c9:91:ed:ac:e2:f4:49:20:80:59:58:5c: ff:b3:bc:30:a5:cf:2d:de:60:8c:23:00:d0:fc:05: 5e:6b:1d:e1:15:7b:b8:e1:b1:a7:ec:8b:37:2d:02: 2e:00:e0:83:a5:61:77:8b:8d:bf:52:f7:f6:f7:1a: f5:f6:d8:48:73:97:82:0d:a4:16:6a:cb:fb:dc:53: 5f:2a:30:6d:c8:05:73:02:46:cf:86:a8:ee:22:ad: f5:94:e1:87:13:50:9c:9b:f1:76:53:a2:35:3c:28: d3:b8:05:61:ea:54:e8:58:a8:60:7d:ea:8a:ca:4f: 33:af:e9:d3:08:58:87:7e:8b:1a:02:c9:cb:4b:55: 4c:4c:20:ab:0f:e6:34:e9:97:e6:19:6b:aa:ba:07: 62:79:72:7c:24:b8:5b:13:8e:1c:11:4c:f8:89:e5: 26:9a:67:26:f1:82:f6:dd:17:e8:66:af:b1:69:42: ac:06:6d:f0:17:f5:a0:70:36:08:17:bf:b6:eb:ad: 28:ae:18:54:07:a2:97:d0:05:9d:a7:ed:07:8e:21: 02:0f:f3:c9:8d:0e:6c:93:44:28:22:11:d5:2d:be: dd:42:e7:25:e9:55:19:c9:fd:e2:34:fb:cf:4d:b6: 2d:bb:fe:92:35:79:33:64:91:47:fc:79:32:37:28: a9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7A:54:E7:55:14:C1:4D:57:41:B7:BB:05:6A:76:C8:1F:6C:58:3B X509v3 Authority Key Identifier: keyid:88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/E5A47506DFCE11EFBC4CD631C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.39.252.0/22 119.252.122.0-119.252.125.255 Signature Algorithm: sha256WithRSAEncryption 51:05:18:67:b4:a4:b0:e1:f5:f4:e3:3b:cb:f6:22:8c:90:3e: 47:51:8e:1d:db:1f:02:c6:12:69:56:d6:99:63:90:65:4b:87: 50:b9:9c:a0:2e:d2:a7:71:02:99:bf:19:e0:26:94:4f:51:15: 3b:60:6a:42:16:9d:9e:31:31:60:e5:58:31:33:a0:3b:85:96: 4b:94:45:17:0e:91:16:bb:6d:72:77:90:ad:75:aa:a0:af:18: 2d:21:66:af:d8:b0:8f:aa:36:05:df:19:7e:cd:83:52:54:06: 14:4e:0e:ee:38:e8:46:3a:31:81:fc:c2:79:66:54:c7:1b:7f: 25:e2:0c:cf:68:4b:31:6e:5c:68:10:05:bf:ab:ec:4f:6d:d0: 6f:b6:f3:03:9a:88:8c:6f:61:23:63:d5:1d:1d:de:45:b3:7c: 66:ca:a3:41:f7:f6:9a:0e:c9:1f:cf:b6:46:56:cc:f6:16:23: af:a2:69:d6:d1:b6:a1:61:55:0c:dc:e4:f2:b2:d8:e1:5a:68: 22:e5:9a:f3:fa:30:bf:cc:9b:ef:d7:c0:37:e3:a1:34:b9:c3: f3:f8:56:3a:83:8f:05:df:a9:26:5e:1d:d7:64:eb:62:0b:de: 08:ad:b5:5a:46:dc:0c:ef:c3:74:99:14:7a:4b:a4:86:e9:69: 9b:0f:e3:ff -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICNLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQTAxMTAvBgNVBAUTKDg4ODdDRjZDRjUxMDJGMEZCNzEzRjRDNEExQkRFMzg5 NDgxRjFDNDQwHhcNMjUwNjI0MDEzMzA2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVhMDA1Mi0yZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttvJke2s4vRJIIBZWFz/s7wwpc8t3mCMIwDQ/AVeax3hFXu44bGn7Is3LQIu AOCDpWF3i42/Uvf29xr19thIc5eCDaQWasv73FNfKjBtyAVzAkbPhqjuIq31lOGH E1Ccm/F2U6I1PCjTuAVh6lToWKhgfeqKyk8zr+nTCFiHfosaAsnLS1VMTCCrD+Y0 6ZfmGWuqugdieXJ8JLhbE44cEUz4ieUmmmcm8YL23RfoZq+xaUKsBm3wF/WgcDYI F7+2660orhhUB6KX0AWdp+0HjiECD/PJjQ5sk0QoIhHVLb7dQucl6VUZyf3iNPvP TbYtu/6SNXkzZJFH/HkyNyipDwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFCl6VOdV FMFNV0G3uwVqdsgfbFg7MB8GA1UdIwQYMBaAFIiHz2z1EC8PtxP0xKG944lIHxxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBMC8zQTBEOTMxMDFE OEMxMUUyOEVGRjU3RTcwOEIwMkNEMi9pSWZQYlBVUUx3LTNFX1RFb2IzamlVZ2ZI RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lJZlBiUFVRTHctM0VfVEVvYjNqaVVnZkhFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQTAvM0EwRDkzMTAxRDhDMTFFMjhFRkY1N0U3MDhCMDJDRDIvRTVBNDc1MDZE RkNFMTFFRkJDNENENjMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBAJnJ/wwDAMEAXf8egMEAXf8fDANBgkqhkiG9w0BAQsFAAOC AQEAUQUYZ7SksOH19OM7y/YijJA+R1GOHdsfAsYSaVbWmWOQZUuHULmcoC7Sp3EC mb8Z4CaUT1EVO2BqQhadnjExYOVYMTOgO4WWS5RFFw6RFrttcneQrXWqoK8YLSFm r9iwj6o2Bd8Zfs2DUlQGFE4O7jjoRjoxgfzCeWZUxxt/JeIMz2hLMW5caBAFv6vs T23Qb7bzA5qIjG9hI2PVHR3eRbN8ZsqjQff2mg7JH8+2RlbM9hYjr6Jp1tG2oWFV DNzk8rLY4VpoIuWa8/owv8yb79fAN+OhNLnD8/hWOoOPBd+pJl4d12TrYgveCK21 WkbcDO/DdJkUekukhulpmw/j/w== -----END CERTIFICATE-----Generated at Sat Dec 20 08:53:05 2025 by rpki-client