This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/369781F0FA4C11EFAEE82273C4F9AE02.roa
File: 369781F0FA4C11EFAEE82273C4F9AE02.roa (raw, json)
Hash identifier: oUQObkba+VwxGOYVcC/zUKJSXnqmUF5N3ZK0fRbHxJs=
Subject key identifier: B1:72:B5:CC:9E:C4:0B:73:58:4C:90:CB:2A:70:01:34:D1:4C:77:F7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C0E5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/369781F0FA4C11EFAEE82273C4F9AE02.roa
Signing time: Thu 24 Jul 2025 07:56:30 +0000
ROA not before: Thu 24 Jul 2025 07:56:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133252
IP address blocks: 103.38.150.0/24 maxlen: 24
103.233.120.0/24 maxlen: 24
103.235.64.0/24 maxlen: 24
203.78.128.0/24 maxlen: 24
203.78.129.0/24 maxlen: 24
203.78.130.0/24 maxlen: 24
203.78.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Aug 2025 09:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49381 (0xc0e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 24 07:56:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6881e72e-6977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:13:84:00:cf:f8:af:be:be:d4:fe:ac:c9:
14:b3:b8:ca:ef:c9:23:85:7f:49:01:98:a1:2a:34:
c9:fc:d3:01:82:e1:76:a1:e3:72:6d:53:c4:ef:4d:
ac:28:4c:5e:f6:6f:98:0f:c1:70:7a:c8:cc:23:90:
3d:8f:b7:de:7f:de:0c:7e:eb:93:61:7d:c7:da:bb:
f7:0e:5b:08:1e:35:3c:b2:4d:a1:f9:c2:6e:d1:d0:
90:21:93:f0:2e:5f:0d:86:6d:8b:bc:ea:66:21:56:
d6:69:22:9a:2b:cb:05:4e:f4:72:bc:f7:5b:d5:b5:
ed:3a:3a:a8:59:a4:e8:0f:a2:a2:ac:df:c2:f7:6d:
a3:43:00:e8:dd:80:8f:a2:d4:7b:e1:42:95:25:bf:
43:c5:0a:67:48:c2:ee:2a:c4:19:79:ae:cc:fb:f4:
10:6e:17:c8:6d:d3:d4:be:d7:70:d3:ab:ea:73:cb:
ee:8b:a6:d4:9f:87:7c:ed:0f:d5:65:f6:6c:ab:68:
b7:b8:a3:53:a8:8e:cf:38:49:bf:24:a5:56:2a:26:
47:ce:25:82:3b:89:77:34:5a:e0:17:48:03:a9:d1:
82:e5:52:8b:3d:2c:6c:4f:fe:a9:87:1e:e0:da:51:
3b:8b:74:86:08:6c:d4:db:fd:9b:cc:d4:27:8d:02:
28:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:72:B5:CC:9E:C4:0B:73:58:4C:90:CB:2A:70:01:34:D1:4C:77:F7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/369781F0FA4C11EFAEE82273C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.38.150.0/24
103.233.120.0/24
103.235.64.0/24
203.78.128.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:41:3c:c1:b3:7c:f2:df:8a:6f:7c:d7:5b:b4:ba:bc:dd:07:
6e:4c:0b:c8:c6:fd:1e:7c:7b:ea:ba:fe:8a:34:e7:46:98:48:
e5:79:4e:ab:d8:c1:d6:f1:10:ce:12:85:24:6d:8c:59:68:e9:
fb:e1:56:0b:b1:f7:d2:21:8f:79:25:78:0d:5e:9a:b0:9c:ad:
93:99:a3:68:0e:1a:f2:91:db:51:e5:fb:3f:12:82:a7:ed:ad:
70:da:2e:fb:b3:f0:1c:0a:f2:41:d1:96:8a:90:f5:72:54:51:
bd:aa:25:eb:30:ac:36:0b:51:9e:20:f7:6f:66:7d:53:37:c9:
c5:a9:0b:1f:a1:f0:a6:44:5d:00:35:4b:e8:3d:b6:15:e4:61:
d3:7b:3f:3e:db:ce:d8:c7:d4:0a:68:fb:15:60:dc:41:31:f1:
77:9c:84:23:07:f7:f5:fb:de:0a:7c:86:84:4f:7c:72:2e:4a:
a0:3d:04:7b:b5:f8:a2:f4:63:a3:67:b9:01:7a:41:8b:fd:4e:
c2:74:a3:33:77:1b:22:ea:e9:fa:76:af:6c:c2:d9:b0:ac:f0:
da:d5:f9:33:f8:b3:ae:ec:b0:4c:a1:fe:94:bf:f9:55:22:75:
d5:15:01:d1:75:fe:bc:74:6e:92:da:80:e1:db:ef:03:79:23:
2c:0c:24:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:50:35 2025 by rpki-client