This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/C5D4B6AC46CE11F08F711B62C4F9AE02.roa File: C5D4B6AC46CE11F08F711B62C4F9AE02.roa (raw, json) Hash identifier: BH+6AS79SAsmdxarOeLEJA1FOFo+RYmPfGqp/m8QHX8= Subject key identifier: 45:34:B0:05:10:BA:06:25:2C:84:DA:03:01:0F:2F:D6:3C:C4:A6:96 Certificate issuer: /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Certificate serial: 18FC Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/C5D4B6AC46CE11F08F711B62C4F9AE02.roa Signing time: Wed 11 Jun 2025 14:17:14 +0000 ROA not before: Wed 11 Jun 2025 14:17:14 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 137703 IP address blocks: 103.99.248.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 6396 (0x18fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Validity Not Before: Jun 11 14:17:14 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=68498fea-5c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:56:66:14:27:5f:e0:90:b6:05:e8:a5:70:22: e3:6f:5c:bf:2f:33:30:e0:09:a1:3c:4b:64:89:dd: 42:49:2b:3f:09:a9:2d:15:d5:80:99:fb:d5:fb:3b: b9:20:a2:3e:88:fc:ea:3e:f5:de:3b:d7:ee:18:c4: 0b:18:f5:d8:d0:aa:03:5c:2e:62:6d:87:ac:7f:3f: f3:a3:1e:a5:4f:17:63:25:9c:ce:6f:5f:e1:6c:b9: df:3c:4b:1e:3a:d4:02:56:e0:cb:3c:15:a7:bc:68: eb:36:98:1e:08:32:18:06:94:7b:87:8c:0f:e6:ef: f3:d6:84:e1:59:87:5c:81:c6:e0:95:2d:9f:16:50: 3a:0b:0d:9f:18:e5:8e:03:9c:8e:a6:3e:ac:73:13: f7:81:bc:e9:0a:8c:ea:f5:28:da:8f:28:f0:53:20: a1:59:3c:a6:87:1b:7c:a9:94:23:29:a4:c6:ba:89: 33:99:cd:28:30:21:25:77:18:54:47:aa:41:50:b7: 72:ba:55:dd:29:a2:e3:a6:01:a5:8c:5d:3d:09:79: 4c:37:85:11:85:2e:ec:70:c0:d3:1b:f3:cb:1d:72: a5:89:a8:2e:b3:58:8f:82:94:92:73:e4:9c:94:25: fe:ea:c0:64:13:58:5c:a4:d6:e5:ce:5c:89:40:15: 07:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:34:B0:05:10:BA:06:25:2C:84:DA:03:01:0F:2F:D6:3C:C4:A6:96 X509v3 Authority Key Identifier: keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/C5D4B6AC46CE11F08F711B62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.248.0/24 Signature Algorithm: sha256WithRSAEncryption 07:95:44:ff:9a:af:7d:e0:a4:de:c3:6c:40:67:2a:02:d9:17: 29:08:ad:2b:68:63:8c:60:23:17:2e:4a:c2:d9:c5:2a:ed:a1: ed:60:b8:66:62:ae:3c:9d:e0:2d:40:2e:7c:09:0b:a2:f2:71: 36:27:92:8e:11:d8:14:35:a1:0e:73:09:c3:b1:c9:03:f1:80: 1a:bc:a1:2d:4c:72:3e:37:0f:08:5a:4b:4e:2e:9b:c4:45:61: 6b:a3:b1:ce:68:b3:ba:42:25:39:a8:37:26:1e:58:58:ef:da: f6:fa:38:11:7d:7d:b8:19:e7:cc:1e:b6:77:0d:15:05:d1:3a: c3:71:63:86:af:7b:e7:16:b5:a9:70:fa:a0:c8:1a:74:1c:13: 6e:40:44:3b:68:62:62:b0:59:4d:78:6d:f4:18:50:b5:aa:27: 07:87:c3:88:d6:0b:ba:85:de:cb:13:fd:c9:8d:a6:25:ec:27: 38:b4:6f:0b:1d:4b:f4:de:18:d8:05:d6:85:13:f2:4e:c1:e5: bf:c4:14:60:34:6c:6a:b0:ab:76:f4:66:4e:91:37:6f:22:78: 6e:42:c3:a6:3f:64:63:2b:92:aa:81:a9:0e:21:d8:91:da:51: 4a:e1:fd:c1:16:a0:e5:fd:8e:f2:bc:14:83:48:a1:40:59:b7: 70:03:55:1f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwRTMxMTAvBgNVBAUTKEJCOTc2QTU5OEU1RUNCMDVFMzdGQUMwMEE1Qjc4ODhF NTdGNTFDNTIwHhcNMjUwNjExMTQxNzE0WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQ5OGZlYS01YzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFZmFCdf4JC2BeilcCLjb1y/LzMw4AmhPEtkid1CSSs/CaktFdWAmfvV+zu5 IKI+iPzqPvXeO9fuGMQLGPXY0KoDXC5ibYesfz/zox6lTxdjJZzOb1/hbLnfPEse OtQCVuDLPBWnvGjrNpgeCDIYBpR7h4wP5u/z1oThWYdcgcbglS2fFlA6Cw2fGOWO A5yOpj6scxP3gbzpCozq9SjajyjwUyChWTymhxt8qZQjKaTGuokzmc0oMCEldxhU R6pBULdyulXdKaLjpgGljF09CXlMN4URhS7scMDTG/PLHXKliagus1iPgpSSc+Sc lCX+6sBkE1hcpNblzlyJQBUHFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEU0sAUQ ugYlLITaAwEPL9Y8xKaWMB8GA1UdIwQYMBaAFLuXalmOXssF43+sAKW3iI5X9RxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTBFMy9EQTE4QjE4NDlB NDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3WGpmNndBcGJlSWpsZjFI RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1ZHFXWTVleXdYamY2d0FwYmVJamxmMUhGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTkwRTMvREExOEIxODQ5QTQ5MTFFNzlBOUYzMDMwQzRGOUFFMDIvQzVENEI2QUM0 NkNFMTFGMDhGNzExQjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnY/gwDQYJKoZIhvcNAQELBQADggEBAAeVRP+ar33gpN7D bEBnKgLZFykIrStoY4xgIxcuSsLZxSrtoe1guGZirjyd4C1ALnwJC6LycTYnko4R 2BQ1oQ5zCcOxyQPxgBq8oS1Mcj43DwhaS04um8RFYWujsc5os7pCJTmoNyYeWFjv 2vb6OBF9fbgZ58wetncNFQXROsNxY4ave+cWtalw+qDIGnQcE25ARDtoYmKwWU14 bfQYULWqJweHw4jWC7qF3ssT/cmNpiXsJzi0bwsdS/TeGNgF1oUT8k7B5b/EFGA0 bGqwq3b0Zk6RN28ieG5Cw6Y/ZGMrkqqBqQ4h2JHaUUrh/cEWoOX9jvK8FINIoUBZ t3ADVR8= -----END CERTIFICATE-----Generated at Sun Dec 28 22:13:13 2025 by rpki-client