This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/221A5C74ED3B11F0A49C778D4B6F56BC.roa File: 221A5C74ED3B11F0A49C778D4B6F56BC.roa (raw, json) Hash identifier: So0i0NhnbZa1KzzXeY2XdDjG9la7ksFPlghiU1Dbw10= Subject key identifier: 1F:09:CC:4F:69:E0:F8:AB:D2:92:85:BB:4D:A5:26:09:78:64:E1:C7 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 21B7 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/221A5C74ED3B11F0A49C778D4B6F56BC.roa Signing time: Fri 09 Jan 2026 09:11:08 +0000 ROA not before: Fri 09 Jan 2026 09:11:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154366 IP address blocks: 138.252.200.0/23 maxlen: 23 Validation: Failed, certificate revoked on Wed 21 Jan 2026 13:39:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8631 (0x21b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jan 9 09:11:08 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6960c62c-4eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ae:19:73:4e:2e:15:f2:1a:a5:c3:2c:db:16: 3b:b6:a8:99:89:7e:4a:00:3d:85:91:c7:0e:1b:b7: d8:51:18:66:86:23:04:d7:e6:a8:37:3b:d0:48:3a: db:40:81:9a:70:9c:4c:57:c3:34:2a:dc:51:4b:23: 67:9e:e4:5c:db:3e:9a:a5:20:b0:91:e2:a4:ac:20: c0:64:71:61:d7:78:e9:d6:f8:8f:2e:15:64:cc:2b: 33:2f:c2:73:d8:cb:69:10:11:09:ca:4f:a3:fe:c4: 2b:83:4a:b2:b6:4c:05:e2:79:50:98:36:8c:c6:b3: 2c:12:e9:67:01:73:ad:7b:c0:13:a0:e6:00:b3:f9: 2c:8b:c2:b8:52:8e:26:da:cc:b1:14:4d:90:61:47: 5c:34:00:75:a0:80:bc:19:ea:50:be:3a:22:73:18: 9b:fe:52:cf:19:f8:7b:85:52:48:a4:57:2b:ec:86: 6c:e4:72:a1:b7:09:0b:ae:fc:db:2e:ae:08:69:fd: 72:0c:e2:d4:64:17:ad:c6:53:f9:93:55:28:4a:25: 54:97:7e:69:d3:e4:7b:6f:79:e8:7e:17:ca:4a:9d: 8d:d9:eb:33:d0:d4:5c:da:45:76:1e:7a:9f:5b:ff: ba:18:13:92:a9:45:ac:f9:68:03:16:b5:02:0a:ed: eb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:09:CC:4F:69:E0:F8:AB:D2:92:85:BB:4D:A5:26:09:78:64:E1:C7 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/221A5C74ED3B11F0A49C778D4B6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.200.0/23 Signature Algorithm: sha256WithRSAEncryption 56:95:94:b7:d2:67:c5:89:c5:e9:39:03:16:e5:45:f6:a7:c8: 49:ac:f8:14:da:ab:c8:3e:51:77:08:93:fa:f4:d1:43:6c:af: c4:44:e9:22:d9:8e:27:7a:3d:f2:cc:95:5d:c2:c7:06:cb:57: ab:31:2e:f9:78:4b:6d:9b:11:ca:55:7a:38:67:95:91:74:03: 4c:bd:8e:f9:db:c7:68:29:36:20:ff:b3:af:5d:07:26:22:7f: 13:1e:4b:26:ef:e0:3b:2e:88:9c:9b:04:4f:34:67:4c:c3:ca: 49:d3:53:e3:ec:0b:25:55:45:c4:a9:f1:11:5e:1e:68:34:f2: 97:9e:bb:cb:17:c7:d3:4d:af:7b:71:70:d0:da:84:58:90:75: 82:39:79:14:8a:8b:75:18:72:ac:ba:87:72:e6:f2:bc:fb:00: 77:ee:f0:71:66:9e:5e:75:57:a7:f4:ad:bf:fb:eb:7e:19:93: 8e:5a:9a:49:f0:a4:b0:83:63:da:bb:ac:71:00:6e:ab:94:11: af:d8:d6:64:a2:d6:d6:8e:cc:af:4f:24:82:5a:5e:a0:6b:8c: fa:68:67:82:17:8b:6b:6e:63:d3:bf:2c:3b:20:03:9b:c4:58: c6:8b:71:f8:44:9d:71:59:42:9a:65:20:e3:71:7f:91:36:ea: 3a:59:26:2b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwMTA5MDkxMTA4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTYwYzYyYy00ZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt64Zc04uFfIapcMs2xY7tqiZiX5KAD2FkccOG7fYURhmhiME1+aoNzvQSDrb QIGacJxMV8M0KtxRSyNnnuRc2z6apSCwkeKkrCDAZHFh13jp1viPLhVkzCszL8Jz 2MtpEBEJyk+j/sQrg0qytkwF4nlQmDaMxrMsEulnAXOte8AToOYAs/ksi8K4Uo4m 2syxFE2QYUdcNAB1oIC8GepQvjoicxib/lLPGfh7hVJIpFcr7IZs5HKhtwkLrvzb Lq4Iaf1yDOLUZBetxlP5k1UoSiVUl35p0+R7b3nofhfKSp2N2esz0NRc2kV2Hnqf W/+6GBOSqUWs+WgDFrUCCu3r4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFB8JzE9p 4Pir0pKFu02lJgl4ZOHHMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjIxQTVDNzRF RDNCMTFGMEE0OUM3NzhENEI2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGK/MgwDQYJKoZIhvcNAQELBQADggEBAFaVlLfSZ8WJxek5 AxblRfanyEms+BTaq8g+UXcIk/r00UNsr8RE6SLZjid6PfLMlV3CxwbLV6sxLvl4 S22bEcpVejhnlZF0A0y9jvnbx2gpNiD/s69dByYifxMeSybv4DsuiJybBE80Z0zD yknTU+PsCyVVRcSp8RFeHmg08peeu8sXx9NNr3txcNDahFiQdYI5eRSKi3UYcqy6 h3Lm8rz7AHfu8HFmnl51V6f0rb/7634Zk45amknwpLCDY9q7rHEAbquUEa/Y1mSi 1taOzK9PJIJaXqBrjPpoZ4IXi2tuY9O/LDsgA5vEWMaLcfhEnXFZQpplIONxf5E2 6jpZJis= -----END CERTIFICATE-----Generated at Wed Jan 21 15:56:10 2026 by rpki-client