This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/120309CED9A711EFA1A06175C4F9AE02.roa File: 120309CED9A711EFA1A06175C4F9AE02.roa (raw, json) Hash identifier: PgU5rv3XZ2DGWzSKRcCr8PBcvYh82MbgrQPI1/Sv0Dg= Subject key identifier: B5:8A:93:11:7F:E1:CB:34:6E:99:54:5E:66:BA:99:28:48:A6:16:9E Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0C70 Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/120309CED9A711EFA1A06175C4F9AE02.roa Signing time: Mon 10 Feb 2025 17:01:46 +0000 ROA not before: Mon 10 Feb 2025 17:01:46 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 137842 IP address blocks: 103.115.156.0/22 maxlen: 22 103.115.156.0/24 maxlen: 24 103.115.157.0/24 maxlen: 24 103.115.158.0/24 maxlen: 24 103.115.159.0/24 maxlen: 24 2402:ea40::/32 maxlen: 36 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 3184 (0xc70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: Feb 10 17:01:46 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67aa30fa-0760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:10:0f:68:af:8c:44:12:85:26:1e:1c:cd:c0: 79:56:7a:6a:cf:ef:28:27:97:09:7e:ca:41:04:bf: 04:ae:08:0c:64:7b:90:68:c9:15:4c:18:ae:e2:ad: 0b:e7:3b:3d:2f:bc:ee:b7:07:ca:9b:0d:6f:9d:c5: db:4a:04:6f:5d:60:bd:e3:1c:2e:d1:09:a0:50:31: 56:cb:77:f9:0c:10:7e:bc:c2:e0:d1:86:1d:59:fe: 18:75:19:64:19:32:e7:75:cf:42:ad:8d:34:cc:29: b3:44:1e:57:c3:aa:96:99:d7:09:d6:37:f6:d5:11: f9:6b:21:75:f3:e6:b5:42:56:d6:df:57:13:28:36: a3:75:8b:77:a7:57:be:15:2b:f6:c0:a8:92:a7:1f: fd:32:47:74:7e:68:87:af:15:1e:b5:e2:83:e1:e5: 9a:9d:10:3a:00:85:7d:8b:b8:c5:8a:60:43:6a:4c: 0c:d0:28:e4:3b:cd:e4:bc:92:1d:c2:ab:1e:2a:fa: 04:27:64:ba:82:d5:0d:b5:0c:1c:7e:1a:70:e0:78: 13:88:63:03:40:f0:bc:ed:b7:5d:fd:d1:43:7d:00: 08:a4:29:9d:5f:8d:1a:e0:d3:2e:8b:ba:1d:a8:aa: 62:94:3d:f0:cb:39:a6:5a:5c:e6:d7:c8:3d:85:fd: 89:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8A:93:11:7F:E1:CB:34:6E:99:54:5E:66:BA:99:28:48:A6:16:9E X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/120309CED9A711EFA1A06175C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.156.0/22 IPv6: 2402:ea40::/32 Signature Algorithm: sha256WithRSAEncryption 35:a5:db:a5:21:6a:6b:9b:a9:3f:07:bf:81:75:c6:ec:9b:76: 98:84:8c:80:f4:29:f5:f2:fe:88:98:7a:f7:33:80:b2:df:c2: 5f:72:86:25:a8:ff:83:f2:17:20:a3:72:83:05:6c:2a:35:ec: 27:2b:9a:59:7e:e0:ab:32:b5:e1:c6:80:23:e3:a0:8e:92:66: ad:46:cc:a2:d0:32:7a:9e:9e:ca:1f:8a:57:1d:58:5c:84:d4: dc:c1:85:9a:e0:18:6a:ad:6e:ee:2c:4c:ec:c5:d4:cb:bb:86: cd:aa:96:32:58:ad:ec:0b:6f:16:1d:69:6f:2a:a0:b5:8e:05: 94:36:ec:c5:dd:d2:11:ae:45:19:fc:4f:40:2e:0f:c2:ea:a8: 57:96:c9:44:ea:2f:2c:a5:d4:ec:b7:bf:5b:00:37:37:28:3b: 58:2b:1c:be:09:23:dd:36:ed:56:e3:72:38:03:89:23:b8:82: 7f:b1:99:4d:4e:e3:95:5c:29:c8:ff:6e:bf:06:45:b7:02:65: 4a:02:5e:d8:eb:34:71:f2:cb:50:12:c8:1d:d3:88:4b:a9:98: 6f:74:43:44:5f:14:43:ed:66:7a:84:b7:ca:4d:ef:e4:bd:0d: c0:22:28:41:b1:ea:0f:75:1c:ab:e7:17:75:1a:4b:57:ff:04: b6:09:b5:3d -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjUwMjEwMTcwMTQ2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FhMzBmYS0wNzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBAPaK+MRBKFJh4czcB5Vnpqz+8oJ5cJfspBBL8ErggMZHuQaMkVTBiu4q0L 5zs9L7zutwfKmw1vncXbSgRvXWC94xwu0QmgUDFWy3f5DBB+vMLg0YYdWf4YdRlk GTLndc9CrY00zCmzRB5Xw6qWmdcJ1jf21RH5ayF18+a1QlbW31cTKDajdYt3p1e+ FSv2wKiSpx/9Mkd0fmiHrxUeteKD4eWanRA6AIV9i7jFimBDakwM0CjkO83kvJId wqseKvoEJ2S6gtUNtQwcfhpw4HgTiGMDQPC87bdd/dFDfQAIpCmdX40a4NMui7od qKpilD3wyzmmWlzm18g9hf2J/wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLWKkxF/ 4cs0bplUXma6mShIphaeMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzQ2MTQvMUM5NDg5OUFGNEYwMTFFOUFDMjAyQjFEQzRGOUFFMDIvMTIwMzA5Q0VE OUE3MTFFRkExQTA2MTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnc5wwDQQCAAIwBwMFACQC6kAwDQYJKoZIhvcNAQELBQAD ggEBADWl26UhamubqT8Hv4F1xuybdpiEjID0KfXy/oiYevczgLLfwl9yhiWo/4Py FyCjcoMFbCo17Ccrmll+4KsyteHGgCPjoI6SZq1GzKLQMnqensofilcdWFyE1NzB hZrgGGqtbu4sTOzF1Mu7hs2qljJYrewLbxYdaW8qoLWOBZQ27MXd0hGuRRn8T0Au D8LqqFeWyUTqLyyl1Oy3v1sANzcoO1grHL4JI9027VbjcjgDiSO4gn+xmU1O45Vc Kcj/br8GRbcCZUoCXtjrNHHyy1ASyB3TiEupmG90Q0RfFEPtZnqEt8pN7+S9DcAi KEGx6g91HKvnF3UaS1f/BLYJtT0= -----END CERTIFICATE-----Generated at Tue Dec 23 06:55:47 2025 by rpki-client