This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DE4F9128A8311EDA0709B2AC4F9AE02.roa File: 0DE4F9128A8311EDA0709B2AC4F9AE02.roa (raw, json) Hash identifier: rNp0dLlqvDORnDVa9k1ZewiF282DneCxathlW4JVn08= Subject key identifier: FE:28:ED:DF:CC:E7:24:43:AE:68:7B:15:92:76:E6:1F:49:B6:4E:BF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B286 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DE4F9128A8311EDA0709B2AC4F9AE02.roa Signing time: Thu 08 May 2025 16:01:30 +0000 ROA not before: Thu 08 May 2025 16:01:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134330 IP address blocks: 103.118.157.0/24 maxlen: 24 103.133.38.0/24 maxlen: 24 103.155.147.0/24 maxlen: 24 2001:df1:5340::/48 maxlen: 48 Validation: Failed, certificate revoked on Tue 08 Jul 2025 11:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45702 (0xb286) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:01:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd55a-f513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:60:4e:df:67:2a:ad:0b:ce:ae:7f:e4:93:63: 7a:e5:0a:0d:16:a1:cc:0f:67:fd:c3:f2:32:35:bd: e0:9b:11:70:5f:91:19:0d:0b:84:04:05:6a:ed:43: 9b:b4:4f:0a:eb:28:2b:7b:be:e5:9b:e2:cc:bb:42: 92:61:6c:e8:55:31:83:68:13:d3:7e:c5:04:f2:ef: 81:ad:99:9e:0b:60:52:46:7b:4e:a7:44:e2:9f:6a: 0d:cc:f8:02:96:99:43:50:8c:d8:df:92:a1:34:06: 74:c9:7e:db:6d:1d:c0:2f:3c:c8:2c:be:9b:1f:26: 00:db:05:eb:6e:e7:ab:e6:0a:4d:41:61:14:8e:a3: 37:f6:82:5a:99:5d:e8:0e:95:9d:a0:cb:88:fb:20: b5:69:5f:9a:e0:fc:32:1a:d3:7b:1c:05:f8:85:df: 04:95:b6:ed:06:72:55:1b:3c:60:cb:ec:9c:25:66: 33:ca:b4:85:64:c9:40:ac:c3:7a:1c:73:01:cb:00: 29:ce:d7:86:bd:ed:57:9e:de:a3:db:f2:d4:26:2b: 59:0d:82:86:37:e9:d6:65:14:21:9e:a9:d8:df:6d: ac:3f:98:ae:f9:7e:ab:d9:c0:17:16:e2:b1:f9:0c: 8d:69:e8:98:a1:e4:ea:83:eb:3b:4b:09:05:a0:21: 05:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:28:ED:DF:CC:E7:24:43:AE:68:7B:15:92:76:E6:1F:49:B6:4E:BF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DE4F9128A8311EDA0709B2AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.118.157.0/24 103.133.38.0/24 103.155.147.0/24 IPv6: 2001:df1:5340::/48 Signature Algorithm: sha256WithRSAEncryption 15:48:f4:e7:4a:a6:b7:3e:db:c1:44:fe:cb:7d:d0:8e:8a:81: e3:1c:c3:14:0e:74:ca:45:99:5f:e0:e6:c9:9e:50:b4:ec:c3: bb:13:44:ba:4c:5a:5f:e5:71:e1:9c:57:9d:97:cc:5c:56:f4: 76:d8:ef:42:5f:73:78:6d:4c:b8:f2:d3:7b:fa:f0:96:ff:e0: 31:fc:26:dd:6b:77:ec:22:2f:68:2c:31:6e:3a:31:c0:0f:cc: d0:19:38:9e:d1:a7:47:65:47:99:cb:40:4c:3c:ff:b7:cf:06: 91:3c:03:aa:dc:5a:67:ec:89:86:e1:9c:34:91:8b:a4:a3:e1: e5:26:bc:b0:f9:da:93:c3:73:40:ad:5f:df:b2:58:c8:02:0f: f4:c1:77:65:6b:ac:0d:76:f4:ab:3c:4a:19:a9:df:0b:d1:7b: 13:11:2c:3e:0c:c1:0c:15:7a:f8:e2:76:54:81:72:40:e9:5c: c4:9b:cc:1b:d7:bc:93:21:28:9a:4b:a4:23:f3:e7:0f:12:d6: b2:b7:13:9a:3d:dc:73:76:61:eb:67:05:74:21:84:76:b8:05: ba:4b:8d:2c:80:57:7c:75:df:9c:c7:f0:80:e8:a3:95:93:d8: be:68:e2:5b:aa:ea:63:af:97:3c:51:3f:61:30:c6:1a:fd:a9: f5:d6:09:f8 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIDALKGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDEzMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q1NWEtZjUxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOZgTt9nKq0Lzq5/5JNjeuUKDRahzA9n/cPyMjW94JsRcF+RGQ0LhAQFau1D m7RPCusoK3u+5ZvizLtCkmFs6FUxg2gT037FBPLvga2ZngtgUkZ7TqdE4p9qDcz4 ApaZQ1CM2N+SoTQGdMl+220dwC88yCy+mx8mANsF627nq+YKTUFhFI6jN/aCWpld 6A6VnaDLiPsgtWlfmuD8MhrTexwF+IXfBJW27QZyVRs8YMvsnCVmM8q0hWTJQKzD ehxzAcsAKc7Xhr3tV57eo9vy1CYrWQ2Chjfp1mUUIZ6p2N9trD+Yrvl+q9nAFxbi sfkMjWnomKHk6oPrO0sJBaAhBYcCAwEAAaOCArIwggKuMB0GA1UdDgQWBBT+KO3f zOckQ65oexWSduYfSbZOvzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzBERTRGOTEy OEE4MzExRURBMDcwOUIyQUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDwGCCsGAQUFBwEHAQH/ BC0wKzAYBAIAATASAwQAZ3adAwQAZ4UmAwQAZ5uTMA8EAgACMAkDBwAgAQ3xU0Aw DQYJKoZIhvcNAQELBQADggEBABVI9OdKprc+28FE/st90I6KgeMcwxQOdMpFmV/g 5smeULTsw7sTRLpMWl/lceGcV52XzFxW9HbY70Jfc3htTLjy03v68Jb/4DH8Jt1r d+wiL2gsMW46McAPzNAZOJ7Rp0dlR5nLQEw8/7fPBpE8A6rcWmfsiYbhnDSRi6Sj 4eUmvLD52pPDc0CtX9+yWMgCD/TBd2VrrA129Ks8Shmp3wvRexMRLD4MwQwVevji dlSBckDpXMSbzBvXvJMhKJpLpCPz5w8S1rK3E5o93HN2YetnBXQhhHa4BbpLjSyA V3x135zH8IDoo5WT2L5o4luq6mOvlzxRP2Ewxhr9qfXWCfg= -----END CERTIFICATE-----Generated at Tue Dec 30 07:15:13 2025 by rpki-client