This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/B253813E4AB811EF84191732C4F9AE02.roa File: B253813E4AB811EF84191732C4F9AE02.roa (raw, json) Hash identifier: HiT1d7Ok7irU6wONbhuRBD137rGB/VptbJDuicgsBA8= Subject key identifier: 34:FE:A9:F8:58:01:07:35:D8:60:68:00:5A:4E:EE:B8:B4:98:D9:1F Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Certificate serial: AF Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/B253813E4AB811EF84191732C4F9AE02.roa Signing time: Thu 25 Jul 2024 19:04:20 +0000 ROA not before: Thu 25 Jul 2024 19:04:20 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 134734 IP address blocks: 103.171.143.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Validity Not Before: Jul 25 19:04:20 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66a2a1b4-6e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:69:3f:70:89:cf:9e:3a:ee:9e:90:d8:2c:87: 5e:1a:cc:c2:b7:05:57:a2:15:27:f8:2e:e4:88:64: ba:b9:6c:c6:0b:60:1b:9d:53:96:19:39:2b:c2:e3: fa:ab:a0:5e:db:0a:12:8d:63:38:93:ff:da:c3:5e: 58:13:aa:c5:c4:8a:f2:85:ac:10:74:8e:8d:8c:fe: 87:39:0c:b0:bf:3e:52:9a:90:4b:3e:ad:cd:1f:fd: 1f:de:81:58:95:78:d6:4e:76:34:ea:7d:02:8d:3f: 9b:a5:00:f7:c0:69:61:06:7d:5f:1c:35:b2:67:da: 8e:2a:38:fa:93:4a:20:6e:19:0f:93:b2:cc:c7:1a: 56:bc:07:a1:6b:13:f5:8e:bd:09:45:08:05:37:32: 28:fc:f7:35:35:e1:6c:e7:8d:b6:2c:4f:07:45:b8: 43:00:5d:bc:20:82:69:bc:2b:23:88:1e:61:49:91: 5d:10:70:31:72:92:f1:5a:f5:f3:2f:9c:0e:5b:f9: ff:f4:d8:32:c7:d7:b6:29:70:80:5c:3a:b6:57:74: c0:87:e2:6e:05:46:27:09:09:91:81:c4:92:24:d7: 3b:c0:e0:eb:68:01:17:66:67:43:60:a5:a6:59:27: f3:69:32:a1:6e:94:a6:ce:53:c8:81:78:59:19:93: 35:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FE:A9:F8:58:01:07:35:D8:60:68:00:5A:4E:EE:B8:B4:98:D9:1F X509v3 Authority Key Identifier: keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/B253813E4AB811EF84191732C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.171.143.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:40:c4:20:75:4a:51:40:d1:f4:3d:a0:63:d7:c3:96:29:cc: 1a:dd:37:ff:3a:0e:a6:d5:05:19:a3:e5:b8:00:16:12:ff:0f: de:92:34:1a:e5:ac:20:e5:26:d6:54:6d:e3:36:f8:e1:d7:1c: c5:be:44:72:b1:73:40:83:f6:89:7b:28:bb:5b:5e:83:31:4b: a1:57:9e:a1:e0:24:56:af:83:53:28:9e:22:65:d9:40:14:a8: 97:31:3d:82:fc:06:00:84:f1:5e:1b:f5:67:35:28:aa:0b:a3: 5f:42:d3:6a:50:eb:04:59:0b:1b:11:b4:b0:70:0e:8b:cf:87: 8c:2b:7f:09:5a:27:ed:73:8e:53:3b:47:45:7b:a5:51:da:14: e4:68:bd:8d:05:38:5f:5a:c5:bc:4f:96:31:eb:72:e8:42:83: fb:d9:20:39:cb:ed:7e:89:7c:94:a6:9d:3d:45:d1:53:36:1b: 02:ee:dd:2c:1d:ff:d4:90:9d:2e:7c:30:40:ad:cb:94:fa:a2: af:ec:ce:d4:b1:ee:72:b0:38:3c:f1:82:bf:08:44:b8:39:9a: e0:21:92:7b:91:6b:e1:f3:69:48:d2:cf:ed:29:62:cb:2c:ed: 64:6e:90:5b:74:13:42:6a:1d:26:3b:45:ad:22:ba:4f:32:4f: fd:8a:32:3c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4OTgxMTAvBgNVBAUTKDk1NjU1RUU3MkUxNzdBMDIwOTZDMENCNjA2NzZBQTFF NjY5QUU3RTAwHhcNMjQwNzI1MTkwNDIwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmEyYTFiNC02ZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGk/cInPnjrunpDYLIdeGszCtwVXohUn+C7kiGS6uWzGC2AbnVOWGTkrwuP6 q6Be2woSjWM4k//aw15YE6rFxIryhawQdI6NjP6HOQywvz5SmpBLPq3NH/0f3oFY lXjWTnY06n0CjT+bpQD3wGlhBn1fHDWyZ9qOKjj6k0ogbhkPk7LMxxpWvAehaxP1 jr0JRQgFNzIo/Pc1NeFs5422LE8HRbhDAF28IIJpvCsjiB5hSZFdEHAxcpLxWvXz L5wOW/n/9Ngyx9e2KXCAXDq2V3TAh+JuBUYnCQmRgcSSJNc7wODraAEXZmdDYKWm WSfzaTKhbpSmzlPIgXhZGZM1EwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDT+qfhY AQc12GBoAFpO7ri0mNkfMB8GA1UdIwQYMBaAFJVlXucuF3oCCWwMtgZ2qh5mmufg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVnSUpiQXkyQm5hcUhtYWE1 LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xXVmU1eTRYZWdJSmJBeTJCbmFxSG1hYTUtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjc4OTgvMjA2OUY1RkNGQzBEMTFFQkFFOTUxNDdCQzRGOUFFMDIvQjI1MzgxM0U0 QUI4MTFFRjg0MTkxNzMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnq48wDQYJKoZIhvcNAQELBQADggEBACtAxCB1SlFA0fQ9 oGPXw5YpzBrdN/86DqbVBRmj5bgAFhL/D96SNBrlrCDlJtZUbeM2+OHXHMW+RHKx c0CD9ol7KLtbXoMxS6FXnqHgJFavg1MoniJl2UAUqJcxPYL8BgCE8V4b9Wc1KKoL o19C02pQ6wRZCxsRtLBwDovPh4wrfwlaJ+1zjlM7R0V7pVHaFORovY0FOF9axbxP ljHrcuhCg/vZIDnL7X6JfJSmnT1F0VM2GwLu3Swd/9SQnS58MECty5T6oq/sztSx 7nKwODzxgr8IRLg5muAhknuRa+HzaUjSz+0pYsss7WRukFt0E0JqHSY7Ra0iuk8y T/2KMjw= -----END CERTIFICATE-----Generated at Mon Jan 5 03:04:17 2026 by rpki-client