This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/562B3D3E7A9411ED91BE2586C4F9AE02.roa
File: 562B3D3E7A9411ED91BE2586C4F9AE02.roa (raw, json)
Hash identifier: c8J7SdmNgOAa8qtX4cxDC1hXrfyTZV6vYro1NteHib0=
Subject key identifier: 83:3D:D0:1D:A8:09:EB:71:1B:0A:DE:34:07:25:4A:4A:1B:5E:32:73
Certificate issuer: /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Certificate serial: 01FE
Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/562B3D3E7A9411ED91BE2586C4F9AE02.roa
Signing time: Tue 05 Aug 2025 03:11:05 +0000
ROA not before: Tue 05 Aug 2025 03:11:05 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 4826
IP address blocks: 45.117.24.0/24 maxlen: 24
45.117.25.0/24 maxlen: 24
45.117.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Oct 2025 00:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127E99, serialNumber=E2534D26C78C9701790996438C114108254776AA
Validity
Not Before: Aug 5 03:11:05 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68917649-3cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:2c:2a:1f:56:2e:01:07:e7:7d:dd:84:ef:
95:79:ad:e0:3a:7d:c9:e0:af:a4:02:88:5b:ef:31:
5b:70:26:b1:a6:4c:58:ae:bb:15:9c:3c:24:2a:44:
42:90:7a:fb:ea:89:59:86:d1:5e:d4:4b:75:b6:e1:
aa:6e:a9:14:4e:3d:01:8d:aa:8c:cc:df:73:58:47:
9a:bf:22:0b:78:af:7e:d5:0e:8c:e0:b2:29:03:70:
d1:e3:fd:4c:e2:48:85:02:8f:b1:86:7b:4d:b2:19:
09:62:d7:1a:10:d4:c9:18:ce:fb:52:52:57:fa:4a:
01:d8:c0:47:f1:9b:80:e7:87:76:36:7e:3b:ee:81:
a2:ee:b2:38:0e:0f:c7:7b:b4:ad:01:63:e0:ab:bc:
dd:bb:a9:fe:71:95:f8:b7:eb:9a:cf:51:cb:85:92:
b8:40:b8:7a:56:6c:61:c5:fe:0b:19:f2:ff:a0:6c:
8c:02:2b:cf:6a:66:ab:e6:0c:b5:25:f7:60:d2:69:
66:f2:94:10:10:30:7e:6b:16:e4:a0:8b:fe:db:3b:
26:92:c0:5f:fd:1c:01:af:12:94:5f:f6:7c:fa:6b:
73:62:7e:1e:9b:f5:d4:32:f0:13:0e:12:a6:32:b8:
ac:03:20:98:66:3a:db:ee:39:6a:4b:49:34:7d:c0:
4f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3D:D0:1D:A8:09:EB:71:1B:0A:DE:34:07:25:4A:4A:1B:5E:32:73
X509v3 Authority Key Identifier:
keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/562B3D3E7A9411ED91BE2586C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.24.0-45.117.26.255
Signature Algorithm: sha256WithRSAEncryption
28:c5:c9:c7:2a:5c:3e:41:74:27:8b:88:c7:77:ba:cd:0a:38:
a1:a1:08:86:6a:d7:5a:30:26:68:ee:bb:da:65:05:15:34:0c:
82:90:a2:4c:40:f3:04:bd:62:43:22:18:e8:0a:f4:dd:cc:4a:
e8:c2:79:5d:51:66:c4:0a:3c:8c:b6:77:d2:ff:96:f9:0a:4d:
f3:ab:78:5e:5e:72:ad:a9:bc:a0:41:6c:d0:82:f4:4e:18:36:
fc:9e:27:d8:00:05:33:d0:6d:26:4c:93:a2:4d:03:7d:02:5c:
90:6f:5f:52:43:3a:4d:b1:c9:7e:b6:60:ab:b8:f7:84:e2:c0:
d9:77:a7:83:d8:29:2e:1e:58:15:c9:07:b6:b2:82:79:a7:fd:
ef:b8:79:b6:10:e6:2b:d5:35:37:53:e4:c5:20:cb:ad:43:8f:
17:33:1c:cb:7e:f9:16:e5:e0:6d:a9:99:16:2e:f2:e3:6b:2e:
fb:e2:8a:b1:9c:52:8d:e4:e7:7f:30:46:e0:40:96:30:5a:52:
52:d2:4f:02:8e:b2:b5:e8:15:14:b1:8c:4d:62:ab:df:b4:18:
1d:34:76:69:18:87:f0:90:c0:70:ae:87:90:08:72:c6:80:cd:
6a:24:3e:a5:9c:27:32:c8:cf:77:ac:d9:45:12:53:0f:a6:24:
eb:51:a0:14
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdFOTkxMTAvBgNVBAUTKEUyNTM0RDI2Qzc4Qzk3MDE3OTA5OTY0MzhDMTE0MTA4
MjU0Nzc2QUEwHhcNMjUwODA1MDMxMTA1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODkxNzY0OS0zY2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsi0sKh9WLgEH533dhO+Vea3gOn3J4K+kAohb7zFbcCaxpkxYrrsVnDwkKkRC
kHr76olZhtFe1Et1tuGqbqkUTj0BjaqMzN9zWEeavyILeK9+1Q6M4LIpA3DR4/1M
4kiFAo+xhntNshkJYtcaENTJGM77UlJX+koB2MBH8ZuA54d2Nn477oGi7rI4Dg/H
e7StAWPgq7zdu6n+cZX4t+uaz1HLhZK4QLh6Vmxhxf4LGfL/oGyMAivPamar5gy1
Jfdg0mlm8pQQEDB+axbkoIv+2zsmksBf/RwBrxKUX/Z8+mtzYn4em/XUMvATDhKm
MrisAyCYZjrb7jlqS0k0fcBP5wIDAQABo4ICnTCCApkwHQYDVR0OBBYEFIM90B2o
CetxGwreNAclSkobXjJzMB8GA1UdIwQYMBaAFOJTTSbHjJcBeQmWQ4wRQQglR3aq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U5OS8wQUNFMTlCMDdB
ODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3RjVDWlpEakJGQkNDVkhk
cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRsTk5Kc2VNbHdGNUNaWkRqQkZCQ0NWSGRxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjdFOTkvMEFDRTE5QjA3QTg1MTFFREFENjkyODg3QzRGOUFFMDIvNTYyQjNEM0U3
QTk0MTFFRDkxQkUyNTg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAy11GAMEAC11GjANBgkqhkiG9w0BAQsFAAOCAQEAKMXJ
xypcPkF0J4uIx3e6zQo4oaEIhmrXWjAmaO672mUFFTQMgpCiTEDzBL1iQyIY6Ar0
3cxK6MJ5XVFmxAo8jLZ30v+W+QpN86t4Xl5yram8oEFs0IL0Thg2/J4n2AAFM9Bt
JkyTok0DfQJckG9fUkM6TbHJfrZgq7j3hOLA2Xeng9gpLh5YFckHtrKCeaf977h5
thDmK9U1N1PkxSDLrUOPFzMcy375FuXgbamZFi7y42su++KKsZxSjeTnfzBG4ECW
MFpSUtJPAo6ytegVFLGMTWKr37QYHTR2aRiH8JDAcK6HkAhyxoDNaiQ+pZwnMsjP
d6zZRRJTD6Yk61GgFA==
-----END CERTIFICATE-----
Generated at Fri Jan 9 07:50:56 2026 by rpki-client