This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/F5C5A42C5ADC11EF8061F335C4F9AE02.roa File: F5C5A42C5ADC11EF8061F335C4F9AE02.roa (raw, json) Hash identifier: 91qXHXG0ZUd62Gbhc7tsCQP8v38el4cSjFoHSBDUbGo= Subject key identifier: 43:00:8B:10:A4:5F:41:E1:B1:DA:D3:DB:BA:F8:13:36:B8:8E:8B:0D Certificate issuer: /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Certificate serial: DE Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/F5C5A42C5ADC11EF8061F335C4F9AE02.roa Signing time: Sat 11 Oct 2025 09:02:59 +0000 ROA not before: Sat 11 Oct 2025 09:02:59 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 26658 IP address blocks: 45.127.160.0/22 maxlen: 22 103.196.100.0/22 maxlen: 22 Validation: Failed, certificate revoked on Sat 18 Oct 2025 01:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604A8, serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Validity Not Before: Oct 11 09:02:59 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68ea1d43-716c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:57:89:fb:da:4c:8b:6e:21:0d:07:c2:5d:fc: 6b:74:49:c0:fe:b0:8e:bd:0f:37:0d:7d:3e:db:32: e5:7f:1c:73:d1:54:3a:e3:02:3d:ef:90:8a:0f:92: c7:8f:a8:57:a1:e0:47:1e:67:91:8c:8e:3b:98:8d: ee:65:11:69:83:4c:fd:56:98:07:5e:0d:21:63:92: 6e:96:3c:82:6d:4c:c7:51:c5:07:6f:87:a3:5a:10: 2e:cf:2c:ab:fc:21:c6:28:0b:ef:93:31:57:20:61: 48:2e:94:82:78:df:b8:6d:01:9d:0e:5f:cc:d9:67: 47:f2:2f:4c:8c:3c:16:e1:05:d8:56:8e:b7:e0:06: 8e:ce:2f:e8:90:5b:20:4a:00:f9:d2:24:f2:2a:bd: 38:91:0a:0d:81:19:87:32:8b:3a:7c:aa:1a:d5:7b: 35:b1:a5:ca:66:fa:9b:a8:c7:d3:82:b2:2e:3f:9d: fd:cc:c5:90:66:7a:7e:45:14:4a:1b:9e:86:65:00: 12:e9:eb:15:4d:9c:33:5e:d7:8f:bd:c9:3d:7b:d7: 98:07:ac:f6:40:8e:bd:b4:47:cb:d8:ea:45:84:a0: 82:ac:3d:29:4f:7f:66:8b:a0:3a:a8:fe:39:d1:33: 51:1c:21:4d:8a:09:45:1f:67:b1:3b:60:50:b6:02: 07:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:00:8B:10:A4:5F:41:E1:B1:DA:D3:DB:BA:F8:13:36:B8:8E:8B:0D X509v3 Authority Key Identifier: keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/F5C5A42C5ADC11EF8061F335C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.127.160.0/22 103.196.100.0/22 Signature Algorithm: sha256WithRSAEncryption 21:7e:0f:fa:e1:a3:b8:5b:d2:f6:06:a2:c6:a4:a5:f7:23:25: 68:b0:d1:41:5e:55:1b:f3:2d:5d:a2:40:01:92:2f:ae:00:f0: fd:47:0f:5f:7f:51:ce:6a:23:1e:d3:c9:e8:30:50:26:a9:89: 64:52:65:0d:e5:fc:e4:9a:96:f4:42:88:80:13:14:41:30:8e: fb:83:4f:89:1b:0f:44:9b:2a:ff:40:03:a7:c6:ca:bc:80:80: 69:5f:6e:1c:53:28:9c:ed:cd:bc:3c:17:0d:16:34:5f:79:2f: ad:af:68:0a:4f:34:70:0c:98:bc:0a:e4:9a:0d:b0:6c:dd:fb: e5:2e:bc:a3:1f:34:14:f6:e6:53:d8:79:e9:88:cf:fd:c6:18: 50:d5:e3:1e:8b:3a:e6:e7:52:8a:2d:d6:b7:19:26:61:d0:a4: 21:e9:26:38:0c:6c:3c:d3:46:6d:ab:15:15:f3:f8:d6:bf:63: 1e:f4:a0:28:c1:a2:b4:08:01:84:42:0f:1b:2f:d3:02:41:72: d8:92:b9:68:2f:13:77:15:1d:a4:87:43:91:2d:1d:2f:e9:89: b4:14:42:ed:bf:50:01:1a:f9:4d:6f:84:c5:ac:c3:26:1e:05: 66:26:e0:7b:f1:63:a8:92:fd:11:5b:1c:b4:61:5c:04:a7:89: ba:81:18:af -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QTgxMTAvBgNVBAUTKDg2RTIzNEUyRTFFMjNBNDk3MTQ1OEQyQTcyNjE0REYx Mzg5NUUyOUEwHhcNMjUxMDExMDkwMjU5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGVhMWQ0My03MTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuleJ+9pMi24hDQfCXfxrdEnA/rCOvQ83DX0+2zLlfxxz0VQ64wI975CKD5LH j6hXoeBHHmeRjI47mI3uZRFpg0z9VpgHXg0hY5JuljyCbUzHUcUHb4ejWhAuzyyr /CHGKAvvkzFXIGFILpSCeN+4bQGdDl/M2WdH8i9MjDwW4QXYVo634AaOzi/okFsg SgD50iTyKr04kQoNgRmHMos6fKoa1Xs1saXKZvqbqMfTgrIuP539zMWQZnp+RRRK G56GZQAS6esVTZwzXtePvck9e9eYB6z2QI69tEfL2OpFhKCCrD0pT39mi6A6qP45 0TNRHCFNiglFH2exO2BQtgIHvwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEMAixCk X0HhsdrT27r4Eza4josNMB8GA1UdIwQYMBaAFIbiNOLh4jpJcUWNKnJhTfE4leKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBOC9BNUY4RTg3ODVB REMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9rbHhSWTBxY21GTjhUaVY0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h1STA0dUhpT2tseFJZMHFjbUZOOFRpVjRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjA0QTgvQTVGOEU4Nzg1QURDMTFFRjhGNEM5Mzc3QzRGOUFFMDIvRjVDNUE0MkM1 QURDMTFFRjgwNjFGMzM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAItf6ADBAJnxGQwDQYJKoZIhvcNAQELBQADggEBACF+D/rh o7hb0vYGosakpfcjJWiw0UFeVRvzLV2iQAGSL64A8P1HD19/Uc5qIx7TyegwUCap iWRSZQ3l/OSalvRCiIATFEEwjvuDT4kbD0SbKv9AA6fGyryAgGlfbhxTKJztzbw8 Fw0WNF95L62vaApPNHAMmLwK5JoNsGzd++UuvKMfNBT25lPYeemIz/3GGFDV4x6L OubnUoot1rcZJmHQpCHpJjgMbDzTRm2rFRXz+Na/Yx70oCjBorQIAYRCDxsv0wJB ctiSuWgvE3cVHaSHQ5EtHS/pibQUQu2/UAEa+U1vhMWswyYeBWYm4HvxY6iS/RFb HLRhXASnibqBGK8= -----END CERTIFICATE-----Generated at Mon Jan 5 03:03:14 2026 by rpki-client