This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2CA2EACE451811F08D41135FC4F9AE02.roa File: 2CA2EACE451811F08D41135FC4F9AE02.roa (raw, json) Hash identifier: wNVVxM5YmCZgYoVttmFlsDuXu/WbuAncxrc5o+NORK0= Subject key identifier: 6E:A3:04:52:CC:FF:5A:58:A6:59:2D:7C:06:66:A8:F2:96:84:49:D6 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BE66 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2CA2EACE451811F08D41135FC4F9AE02.roa Signing time: Tue 17 Jun 2025 10:03:48 +0000 ROA not before: Tue 17 Jun 2025 10:03:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58898 IP address blocks: 45.116.112.0/22 maxlen: 24 103.25.44.0/22 maxlen: 24 103.69.8.0/22 maxlen: 24 103.93.104.0/22 maxlen: 24 103.127.170.0/24 maxlen: 24 103.137.148.0/24 maxlen: 24 103.143.214.0/24 maxlen: 24 103.148.134.0/23 maxlen: 24 103.151.114.0/24 maxlen: 24 103.153.22.0/24 maxlen: 24 103.157.228.0/23 maxlen: 24 103.159.136.0/24 maxlen: 24 103.159.180.0/24 maxlen: 24 103.160.171.0/24 maxlen: 24 103.170.160.0/24 maxlen: 24 103.175.108.0/23 maxlen: 24 103.176.124.0/23 maxlen: 24 103.225.124.0/22 maxlen: 24 163.53.204.0/22 maxlen: 24 2001:df2:a640::/48 maxlen: 48 2403:f680::/40 maxlen: 48 2403:f680:102::/48 maxlen: 48 2403:f680:103::/48 maxlen: 48 2403:f680:104::/48 maxlen: 48 2403:f680:105::/48 maxlen: 48 2403:f680:106::/48 maxlen: 48 2403:f680:107::/48 maxlen: 48 2403:f680:108::/48 maxlen: 48 2403:f680:112::/48 maxlen: 48 2403:f680:113::/48 maxlen: 48 2403:f680:114::/48 maxlen: 48 2403:f680:115::/48 maxlen: 48 2403:f680:116::/48 maxlen: 48 2403:f680:117::/48 maxlen: 48 2403:f680:118::/48 maxlen: 48 2403:f680:119::/48 maxlen: 48 2403:f680:120::/48 maxlen: 48 2403:f680:121::/48 maxlen: 48 2403:f680:122::/48 maxlen: 48 2403:f680:123::/48 maxlen: 48 2403:f680:124::/48 maxlen: 48 2403:f680:125::/48 maxlen: 48 2403:f680:126::/48 maxlen: 48 2403:f680:127::/48 maxlen: 48 2403:f680:128::/48 maxlen: 48 2403:f680:129::/48 maxlen: 48 Validation: Failed, certificate revoked on Tue 01 Jul 2025 06:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48742 (0xbe66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 17 10:03:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68513d84-405d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:9e:2c:5c:c7:b2:ed:44:03:8f:0e:0c:f7: ea:ab:f4:f2:d0:03:5f:9c:de:22:0a:59:82:ab:ec: ff:9b:b6:39:f8:d8:d8:53:ee:3c:df:be:e0:f0:5c: 2f:61:77:d6:2e:1c:28:40:34:c9:72:d2:27:80:af: 99:62:39:11:44:22:02:98:b2:1f:2a:59:e2:3f:1b: 77:dd:f7:95:85:81:f1:75:91:81:07:27:94:26:ee: 66:5e:37:e0:b7:89:6c:a2:b4:87:d1:70:e8:64:fb: 3e:6f:78:24:5a:13:38:e3:56:5a:e6:72:2d:ed:14: 5f:89:d7:28:b9:46:86:26:f0:39:31:db:79:03:73: 52:46:65:37:6b:92:bc:f9:fb:ee:08:08:80:71:dd: 30:aa:e2:66:ff:a2:e2:27:28:98:99:02:0f:f9:f9: 9b:29:72:d8:4c:1e:40:41:e9:e1:1c:16:24:f6:cd: 74:e5:7e:4f:64:a7:69:87:47:02:09:b3:82:85:86: f5:55:63:4b:99:31:f1:f9:27:23:cb:cc:ee:c9:dc: 25:dd:52:53:86:4c:a7:4a:e7:ab:1c:fe:48:c0:61: d8:fe:18:1b:d3:9e:89:26:bb:cd:90:9c:1c:79:26: dc:05:21:6b:1a:ef:a5:a4:29:b4:20:7d:49:a5:d2: ae:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A3:04:52:CC:FF:5A:58:A6:59:2D:7C:06:66:A8:F2:96:84:49:D6 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2CA2EACE451811F08D41135FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.116.112.0/22 103.25.44.0/22 103.69.8.0/22 103.93.104.0/22 103.127.170.0/24 103.137.148.0/24 103.143.214.0/24 103.148.134.0/23 103.151.114.0/24 103.153.22.0/24 103.157.228.0/23 103.159.136.0/24 103.159.180.0/24 103.160.171.0/24 103.170.160.0/24 103.175.108.0/23 103.176.124.0/23 103.225.124.0/22 163.53.204.0/22 IPv6: 2001:df2:a640::/48 2403:f680::/40 2403:f680:102::-2403:f680:108:ffff:ffff:ffff:ffff:ffff 2403:f680:112::-2403:f680:119:ffff:ffff:ffff:ffff:ffff 2403:f680:120::-2403:f680:129:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 92:07:f0:a2:a6:a4:de:e9:f6:76:31:7d:40:4c:59:ce:cc:14: 30:2e:10:6e:7b:71:cd:d7:b5:9d:a1:f9:3e:50:7e:03:c3:5b: c6:8a:ff:5d:6e:61:fc:cd:63:39:31:1c:92:c5:a5:53:35:8f: 02:1d:e9:9b:73:a2:6e:94:69:ba:3c:28:27:27:40:db:b4:55: fb:8c:c6:0e:0a:0c:9d:a3:e6:b0:0c:49:2a:a3:17:f0:89:46: 7f:69:02:16:9c:6c:35:46:9d:aa:64:f4:eb:bb:26:b4:e1:bf: 25:9d:8e:d2:93:23:bd:dc:3e:78:95:ed:31:e4:86:3d:28:44: 1c:fd:21:82:5c:c9:ed:f4:df:eb:96:d4:af:96:fc:93:a6:c2: c6:ae:93:b5:29:9e:b0:5a:e7:86:57:a2:af:eb:65:ce:5a:4c: b6:26:b0:1d:91:8c:53:02:d4:79:37:57:79:8e:9c:e1:d4:6a: 07:06:3c:de:2c:8c:bc:0f:e4:7f:42:f9:0f:b1:90:47:05:48: e2:b9:2c:2a:0e:ff:80:30:c7:4e:6c:0b:01:2e:32:a1:02:09: 89:48:06:09:1b:67:1c:63:bc:f0:3b:8f:4d:74:3b:6e:f1:d1: 22:67:c9:a3:f2:f9:2f:89:f3:e1:54:2e:c6:17:1f:64:bd:31: b9:2b:49:d1 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIDAL5mMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDYxNzEwMDM0OFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg1MTNkODQtNDA1ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMoxnixcx7LtRAOPDgz36qv08tADX5zeIgpZgqvs/5u2OfjY2FPuPN++4PBc L2F31i4cKEA0yXLSJ4CvmWI5EUQiApiyHypZ4j8bd933lYWB8XWRgQcnlCbuZl43 4LeJbKK0h9Fw6GT7Pm94JFoTOONWWuZyLe0UX4nXKLlGhibwOTHbeQNzUkZlN2uS vPn77ggIgHHdMKriZv+i4icomJkCD/n5myly2EweQEHp4RwWJPbNdOV+T2SnaYdH AgmzgoWG9VVjS5kx8fknI8vM7sncJd1SU4ZMp0rnqxz+SMBh2P4YG9OeiSa7zZCc HHkm3AUhaxrvpaQptCB9SaXSrr8CAwEAAaOCA1kwggNVMB0GA1UdDgQWBBRuowRS zP9aWKZZLXwGZqjyloRJ1jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJDQTJFQUNF NDUxODExRjA4RDQxMTM1RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIHiBggrBgEFBQcBBwEB /wSB0jCBzzB4BAIAATByAwQCLXRwAwQCZxksAwQCZ0UIAwQCZ11oAwQAZ3+qAwQA Z4mUAwQAZ4/WAwQBZ5SGAwQAZ5dyAwQAZ5kWAwQBZ53kAwQAZ5+IAwQAZ5+0AwQA Z6CrAwQAZ6qgAwQBZ69sAwQBZ7B8AwQCZ+F8AwQCozXMMFMEAgACME0DBwAgAQ3y pkADBgAkA/aAADASAwcBJAP2gAECAwcAJAP2gAEIMBIDBwEkA/aAARIDBwEkA/aA ARgwEgMHBSQD9oABIAMHASQD9oABKDANBgkqhkiG9w0BAQsFAAOCAQEAkgfwoqak 3un2djF9QExZzswUMC4Qbntxzde1naH5PlB+A8Nbxor/XW5h/M1jOTEcksWlUzWP Ah3pm3OibpRpujwoJydA27RV+4zGDgoMnaPmsAxJKqMX8IlGf2kCFpxsNUadqmT0 67smtOG/JZ2O0pMjvdw+eJXtMeSGPShEHP0hglzJ7fTf65bUr5b8k6bCxq6TtSme sFrnhleir+tlzlpMtiawHZGMUwLUeTdXeY6c4dRqBwY83iyMvA/kf0L5D7GQRwVI 4rksKg7/gDDHTmwLAS4yoQIJiUgGCRtnHGO88DuPTXQ7bvHRImfJo/L5L4nz4VQu xhcfZL0xuStJ0Q== -----END CERTIFICATE-----Generated at Fri Dec 19 22:09:54 2025 by rpki-client