This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4BBFA38A8AEB11EF9DD5904CC4F9AE02.roa File: 4BBFA38A8AEB11EF9DD5904CC4F9AE02.roa (raw, json) Hash identifier: cX/lwVhObOBAk8pNsLqHZ43a7EnInSKlD4d6QZbnT1E= Subject key identifier: C9:BF:14:64:EE:77:47:A3:94:02:6F:82:16:22:22:0E:86:B6:8B:A1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BA4B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4BBFA38A8AEB11EF9DD5904CC4F9AE02.roa Signing time: Thu 08 May 2025 16:31:47 +0000 ROA not before: Thu 08 May 2025 16:31:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58640 IP address blocks: 43.239.68.0/22 maxlen: 24 103.14.124.0/22 maxlen: 24 103.30.140.0/22 maxlen: 24 103.35.52.0/23 maxlen: 24 103.35.54.0/24 maxlen: 24 103.80.64.0/22 maxlen: 24 103.110.200.0/22 maxlen: 24 103.225.40.0/22 maxlen: 24 144.48.76.0/22 maxlen: 24 163.47.140.0/22 maxlen: 24 163.47.152.0/22 maxlen: 22 163.47.152.0/24 maxlen: 24 163.47.153.0/24 maxlen: 24 163.47.154.0/24 maxlen: 24 163.47.155.0/24 maxlen: 24 Validation: Failed, certificate revoked on Wed 16 Jul 2025 12:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47691 (0xba4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:31:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdc72-9ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ec:a0:d5:ed:7b:eb:6f:07:85:47:3b:f4:a9: fa:9d:83:56:0b:73:f5:51:2b:60:2f:ca:5f:88:1e: 19:12:91:da:85:4f:cd:db:18:c1:74:72:1d:a7:21: e4:fe:bf:36:6e:f9:d4:5e:15:99:7d:cb:3c:6c:75: 92:14:02:2f:d4:b1:9e:e2:f9:87:1f:e5:a6:79:94: 41:41:46:57:b5:c6:fd:23:1e:29:e6:c1:c9:a7:01: 4f:b4:48:8a:48:66:c4:a4:22:b0:9c:a8:8e:32:cb: 07:c5:2c:b9:b4:2c:3d:01:4b:74:14:a5:68:f9:fa: dd:20:df:af:e0:5b:59:70:d6:fb:21:5f:3a:60:e1: 04:a8:1c:51:82:fe:59:e5:f1:ba:84:58:88:47:35: fe:50:1e:ea:cc:1c:5a:07:21:66:05:ef:5a:26:ee: c2:be:2a:79:5a:54:fd:c7:02:83:84:f9:99:ca:1f: b9:42:51:c1:2c:ff:50:89:e8:62:2d:a2:0b:4b:f1: 37:bd:58:51:4c:b3:44:be:b2:0b:65:5d:4d:93:3b: 8f:8a:9d:b4:29:f1:29:76:3a:5c:eb:8b:7b:89:32: c0:a5:70:f7:cd:f3:10:fb:e1:aa:d8:9f:4f:12:18: b1:b2:27:f6:cd:d7:37:60:46:c4:55:82:ce:99:ef: d3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BF:14:64:EE:77:47:A3:94:02:6F:82:16:22:22:0E:86:B6:8B:A1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4BBFA38A8AEB11EF9DD5904CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.68.0/22 103.14.124.0/22 103.30.140.0/22 103.35.52.0-103.35.54.255 103.80.64.0/22 103.110.200.0/22 103.225.40.0/22 144.48.76.0/22 163.47.140.0/22 163.47.152.0/22 Signature Algorithm: sha256WithRSAEncryption 87:3f:45:44:61:94:79:20:b7:3a:64:d6:ab:72:1e:2d:ed:7e: bf:49:28:9c:2d:34:49:cf:49:82:ae:84:48:54:57:c3:9f:38: 8c:71:cb:42:df:2b:e2:4d:98:ec:38:0b:13:92:e1:11:bd:a9: b7:eb:1d:7e:d2:cf:f4:02:4d:1f:5c:13:a6:7b:35:f2:ad:0c: ef:a4:e1:a2:f6:6b:58:46:35:88:26:1a:ac:b5:bb:74:a1:3a: 4f:2d:9a:b3:c2:0e:f6:ec:4a:a8:9d:ac:a3:e8:cf:c1:b1:35: f9:ac:8d:09:3b:57:7f:4c:d4:43:db:90:2c:c0:05:74:b5:e9: a4:71:75:32:a2:4e:12:8d:82:9a:8b:3d:63:ed:e0:72:4a:ab: 78:fa:3d:42:99:71:f9:db:95:7a:a4:5b:ec:5e:75:dd:f4:d2: e5:79:03:df:ac:f5:06:87:2a:29:73:82:6c:62:73:30:35:b4: df:c0:a6:73:6b:2d:ef:f4:74:91:b9:1e:15:26:6b:d6:6b:63: 6e:9a:cb:eb:f4:a0:f0:53:d6:5d:d6:e6:cd:ca:b3:12:36:43: 74:8a:94:dd:71:ea:55:88:ae:65:71:a5:1a:8a:6a:67:35:82: 97:13:06:99:82:1f:d1:5f:84:cb:7d:73:bb:94:89:2a:8d:69: aa:bf:49:25 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIDALpLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MzE0N1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RjNzItOWZmYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANbsoNXte+tvB4VHO/Sp+p2DVgtz9VErYC/KX4geGRKR2oVPzdsYwXRyHach 5P6/Nm751F4VmX3LPGx1khQCL9SxnuL5hx/lpnmUQUFGV7XG/SMeKebByacBT7RI ikhmxKQisJyojjLLB8UsubQsPQFLdBSlaPn63SDfr+BbWXDW+yFfOmDhBKgcUYL+ WeXxuoRYiEc1/lAe6swcWgchZgXvWibuwr4qeVpU/ccCg4T5mcofuUJRwSz/UIno Yi2iC0vxN71YUUyzRL6yC2VdTZM7j4qdtCnxKXY6XOuLe4kywKVw983zEPvhqtif TxIYsbIn9s3XN2BGxFWCzpnv090CAwEAAaOCAtMwggLPMB0GA1UdDgQWBBTJvxRk 7ndHo5QCb4IWIiIOhraLoTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRCQkZBMzhB OEFFQjExRUY5REQ1OTA0Q0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMF0GCCsGAQUFBwEHAQH/ BE4wTDBKBAIAATBEAwQCK+9EAwQCZw58AwQCZx6MMAwDBAJnIzQDBABnIzYDBAJn UEADBAJnbsgDBAJn4SgDBAKQMEwDBAKjL4wDBAKjL5gwDQYJKoZIhvcNAQELBQAD ggEBAIc/RURhlHkgtzpk1qtyHi3tfr9JKJwtNEnPSYKuhEhUV8OfOIxxy0LfK+JN mOw4CxOS4RG9qbfrHX7Sz/QCTR9cE6Z7NfKtDO+k4aL2a1hGNYgmGqy1u3ShOk8t mrPCDvbsSqidrKPoz8GxNfmsjQk7V39M1EPbkCzABXS16aRxdTKiThKNgpqLPWPt 4HJKq3j6PUKZcfnblXqkW+xedd300uV5A9+s9QaHKilzgmxiczA1tN/ApnNrLe/0 dJG5HhUma9ZrY26ay+v0oPBT1l3W5s3KsxI2Q3SKlN1x6lWIrmVxpRqKamc1gpcT BpmCH9FfhMt9c7uUiSqNaaq/SSU= -----END CERTIFICATE-----Generated at Sat Dec 20 07:41:42 2025 by rpki-client