This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/E7CA9A12F28F11EF94898048C4F9AE02.roa File: E7CA9A12F28F11EF94898048C4F9AE02.roa (raw, json) Hash identifier: 81pcSGnQVVs4NUfFkM30moatmNOjQUrd7XABbRORB0M= Subject key identifier: FD:53:28:C2:CD:31:AE:90:F9:F2:CB:3C:B7:FE:4A:B7:29:D7:C0:C6 Certificate issuer: /CN=A9157DA0/serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44 Certificate serial: 3489 Authority key identifier: 88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/E7CA9A12F28F11EF94898048C4F9AE02.roa Signing time: Mon 14 Apr 2025 14:50:46 +0000 ROA not before: Mon 14 Apr 2025 14:50:46 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 58524 IP address blocks: 43.248.158.0/23 maxlen: 24 119.252.122.0/24 maxlen: 24 119.252.126.0/23 maxlen: 23 2407:4800:c000::/36 maxlen: 36 Validation: Failed, certificate revoked on Tue 24 Jun 2025 01:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13449 (0x3489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DA0, serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44 Validity Not Before: Apr 14 14:50:46 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=67fd20c6-15d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:72:bb:08:f2:10:3e:3f:b0:c0:16:ee:e7:37: ca:97:8a:6d:65:74:98:e6:18:60:4f:08:71:23:75: d3:61:a5:9a:ca:58:95:ca:24:2f:76:e8:ac:08:9b: 86:c2:18:e8:a3:25:60:20:69:33:77:7a:80:f8:fa: b1:76:8b:f8:9c:74:ab:c0:60:43:19:d9:b9:9a:6c: 29:cb:dc:96:2c:93:c2:d1:10:01:82:99:ea:63:a3: 93:0e:ff:32:ca:af:04:72:32:df:55:94:b7:38:4c: d4:09:29:86:c7:07:95:c8:4f:0f:ad:13:c3:63:50: cf:9f:9f:fc:7b:c4:30:18:f2:81:1d:2f:fe:2e:20: 2e:bc:25:6a:0a:38:1a:6f:1a:18:c5:9e:06:f1:b6: a7:1e:9a:be:36:1e:5f:5f:a8:96:f1:27:d4:83:eb: 9e:6a:bb:ff:2a:63:ac:a1:37:21:8b:5d:77:b9:72: d5:7c:c2:6c:d6:2f:4b:92:44:f2:64:96:08:59:bb: f7:eb:7b:04:1c:53:65:83:93:82:4b:0c:27:66:71: 71:9a:8a:db:7d:db:22:36:d8:9c:27:2f:dc:45:4d: 93:44:ed:d7:6c:41:e7:0d:01:20:e5:2c:fd:16:35: 59:c2:21:df:51:e2:df:62:1e:77:b3:61:4d:1f:53: 63:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:53:28:C2:CD:31:AE:90:F9:F2:CB:3C:B7:FE:4A:B7:29:D7:C0:C6 X509v3 Authority Key Identifier: keyid:88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/E7CA9A12F28F11EF94898048C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.248.158.0/23 119.252.122.0/24 119.252.126.0/23 IPv6: 2407:4800:c000::/36 Signature Algorithm: sha256WithRSAEncryption 9b:dd:7c:13:44:50:d5:71:9f:9b:75:f6:fc:d0:8a:9b:44:28: cf:99:b9:d2:44:55:e9:b6:4d:f9:b4:d8:4b:11:eb:c7:52:48: 92:4f:a3:6a:99:32:64:40:0e:ef:43:6a:42:a9:a8:c2:73:e3: cf:ab:6c:3c:30:7f:c0:b7:9f:fa:7f:5c:84:d0:50:ca:84:d5: 6d:b1:83:d2:23:71:96:86:3d:48:34:3f:94:ab:88:04:25:11: 43:8e:6d:7c:f9:c1:cc:f3:d9:cf:d8:38:ec:77:7a:7d:64:58: 1f:53:78:77:6f:88:fa:7e:e7:14:ba:50:de:71:f2:68:4f:eb: 78:4f:2a:7d:8d:db:aa:4e:58:86:de:a6:4e:68:58:36:80:55: 15:1f:7b:e7:34:09:5b:2a:86:92:af:70:c2:76:d3:47:ec:bf: fd:ae:c3:28:41:37:e2:db:64:b4:91:04:0f:8a:34:b3:54:dd: c5:6b:63:48:c7:1c:6b:a1:a4:53:7a:02:b5:e7:ec:d7:09:6e: 47:33:0e:70:af:a4:5f:51:cb:5c:d8:08:01:e9:99:3a:62:c1: a6:52:91:7e:04:55:20:97:00:a9:42:86:4d:94:5c:12:2d:7d: 5a:b9:ab:c2:5a:99:bb:09:52:88:40:4c:b1:f3:f2:7d:2b:5e: 67:43:3b:52 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICNIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQTAxMTAvBgNVBAUTKDg4ODdDRjZDRjUxMDJGMEZCNzEzRjRDNEExQkRFMzg5 NDgxRjFDNDQwHhcNMjUwNDE0MTQ1MDQ2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZkMjBjNi0xNWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7XK7CPIQPj+wwBbu5zfKl4ptZXSY5hhgTwhxI3XTYaWayliVyiQvduisCJuG whjooyVgIGkzd3qA+Pqxdov4nHSrwGBDGdm5mmwpy9yWLJPC0RABgpnqY6OTDv8y yq8EcjLfVZS3OEzUCSmGxweVyE8PrRPDY1DPn5/8e8QwGPKBHS/+LiAuvCVqCjga bxoYxZ4G8banHpq+Nh5fX6iW8SfUg+uearv/KmOsoTchi113uXLVfMJs1i9LkkTy ZJYIWbv363sEHFNlg5OCSwwnZnFxmorbfdsiNticJy/cRU2TRO3XbEHnDQEg5Sz9 FjVZwiHfUeLfYh53s2FNH1NjSwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFP1TKMLN Ma6Q+fLLPLf+Srcp18DGMB8GA1UdIwQYMBaAFIiHz2z1EC8PtxP0xKG944lIHxxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBMC8zQTBEOTMxMDFE OEMxMUUyOEVGRjU3RTcwOEIwMkNEMi9pSWZQYlBVUUx3LTNFX1RFb2IzamlVZ2ZI RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lJZlBiUFVRTHctM0VfVEVvYjNqaVVnZkhFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQTAvM0EwRDkzMTAxRDhDMTFFMjhFRkY1N0U3MDhCMDJDRDIvRTdDQTlBMTJG MjhGMTFFRjk0ODk4MDQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMBgEAgABMBIDBAEr+J4DBAB3/HoDBAF3/H4wDgQCAAIwCAMGBCQHSADAMA0G CSqGSIb3DQEBCwUAA4IBAQCb3XwTRFDVcZ+bdfb80IqbRCjPmbnSRFXptk35tNhL EevHUkiST6NqmTJkQA7vQ2pCqajCc+PPq2w8MH/At5/6f1yE0FDKhNVtsYPSI3GW hj1IND+Uq4gEJRFDjm18+cHM89nP2Djsd3p9ZFgfU3h3b4j6fucUulDecfJoT+t4 Typ9jduqTliG3qZOaFg2gFUVH3vnNAlbKoaSr3DCdtNH7L/9rsMoQTfi22S0kQQP ijSzVN3Fa2NIxxxroaRTegK15+zXCW5HMw5wr6RfUctc2AgB6Zk6YsGmUpF+BFUg lwCpQoZNlFwSLX1auavCWpm7CVKIQEyx8/J9K15nQztS -----END CERTIFICATE-----Generated at Thu Jan 1 18:01:42 2026 by rpki-client