This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D369A28CBDD011EA9702FC12C4F9AE02.roa
File: D369A28CBDD011EA9702FC12C4F9AE02.roa (raw, json)
Hash identifier: gp33ghPzOkoFjOKxa9q7QYerjbNgOsl4AfJIhEQ+kYg=
Subject key identifier: 86:F7:21:EC:33:91:3F:C2:44:85:58:00:4D:7E:13:C7:B1:8A:03:33
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C0DF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D369A28CBDD011EA9702FC12C4F9AE02.roa
Signing time: Thu 24 Jul 2025 07:01:26 +0000
ROA not before: Thu 24 Jul 2025 07:01:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135761
IP address blocks: 103.70.164.0/22 maxlen: 24
103.143.166.0/23 maxlen: 24
103.152.159.0/24 maxlen: 24
103.158.174.0/23 maxlen: 24
103.160.196.0/23 maxlen: 24
103.168.2.0/23 maxlen: 24
2407:1f40::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 24 Jul 2025 08:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49375 (0xc0df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 24 07:01:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6881da45-7666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:d2:1e:65:4f:d3:0c:cd:09:37:6b:ce:ba:
ae:9b:51:ae:d2:17:0e:8d:45:c9:57:34:8c:fa:04:
42:44:cf:6b:7d:73:a9:a7:31:ba:c4:29:0b:53:75:
e7:32:81:f4:2d:af:ab:78:ea:ce:62:ad:47:07:bc:
05:3a:e3:ec:5b:60:71:5a:29:0c:e9:6b:49:12:95:
49:d7:4d:3a:cc:93:04:cc:31:8e:3f:02:39:e5:38:
a3:53:07:ca:ee:90:4c:b5:94:0e:a2:0f:03:62:d6:
8d:d7:13:4b:63:a5:51:b1:2b:16:99:67:ca:22:96:
51:75:36:e7:02:0a:d3:fb:27:a5:68:77:3b:5d:6b:
be:33:94:8b:be:13:01:10:e1:94:9b:7b:74:c9:70:
b7:e2:82:7d:82:7f:5e:1c:15:ff:a6:20:3e:dd:54:
7d:49:25:83:79:2f:98:b2:d7:e7:28:93:05:6f:38:
38:a0:0f:78:d6:5d:13:fb:ad:c9:3f:df:5a:a3:dc:
0e:f6:be:ba:d2:70:42:21:43:97:6d:b2:c2:91:b5:
32:d2:a5:46:5c:b0:9e:8c:fe:26:e6:2d:68:b2:fc:
bd:36:3f:0a:4e:73:45:78:34:ca:96:e8:14:f5:d2:
7a:5e:a9:fa:8c:9e:dd:b2:8f:33:fb:a3:7a:db:e3:
30:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F7:21:EC:33:91:3F:C2:44:85:58:00:4D:7E:13:C7:B1:8A:03:33
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D369A28CBDD011EA9702FC12C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.70.164.0/22
103.143.166.0/23
103.152.159.0/24
103.158.174.0/23
103.160.196.0/23
103.168.2.0/23
IPv6:
2407:1f40::/32
Signature Algorithm: sha256WithRSAEncryption
83:ad:04:c4:c4:43:81:c5:ef:21:8f:da:46:e0:be:5a:e1:4b:
ee:e6:e7:5d:6f:f6:7b:08:19:5d:bf:24:d1:2c:ff:f6:08:d7:
e4:f3:c5:d9:58:38:a3:8f:46:ed:52:73:cd:6f:5b:ed:65:60:
a6:72:97:92:88:5b:e1:a4:79:97:ff:86:fe:4c:8e:34:c3:37:
a3:3c:c0:92:39:14:e7:8f:7c:83:b7:0e:ab:2e:65:47:35:b5:
05:6c:4b:ec:22:e6:ca:8a:42:73:33:ac:54:2a:e0:de:87:bb:
9d:1a:56:c7:bf:72:6c:32:c3:f1:aa:df:9b:ff:12:d2:6d:ac:
cd:14:b5:9d:fc:c5:05:c7:96:5d:15:e1:4c:bf:5d:a7:e9:e6:
f4:b0:6c:4c:73:e4:0e:fe:3c:97:2d:25:fe:34:3a:15:07:65:
e9:75:fb:24:ea:49:e4:e5:09:78:b6:2c:6c:e4:17:e7:b8:f0:
4f:1e:9a:3d:a4:4d:c4:79:e6:ec:73:d5:6b:35:ce:7b:14:c0:
3c:6e:5d:35:63:17:c5:e1:ff:97:ba:a0:cf:8e:f2:19:7b:82:
ee:ba:4b:63:9c:08:1b:da:e2:66:d7:bf:e1:e1:5e:ff:fb:1a:
24:d2:9e:54:6a:c7:ae:7a:8c:6b:9a:cd:b4:75:a5:ca:43:6a:
f4:ce:c0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 04:15:11 2025 by rpki-client