This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/406CF45A146711F0B71BEA5FC4F9AE02.roa File: 406CF45A146711F0B71BEA5FC4F9AE02.roa (raw, json) Hash identifier: MdU2nwfghXB3Jsfj9ETZVTqaYKyu88MQ74THF6JrFjc= Subject key identifier: 8C:49:8B:2D:FB:EF:DC:3A:83:65:3A:DC:9A:A5:FE:DB:38:F6:6E:28 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: ADFE Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/406CF45A146711F0B71BEA5FC4F9AE02.roa Signing time: Tue 08 Apr 2025 11:17:16 +0000 ROA not before: Tue 08 Apr 2025 11:17:16 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 0 IP address blocks: 103.29.197.0/24 maxlen: 24 103.95.100.0/24 maxlen: 24 103.136.240.0/24 maxlen: 24 103.142.106.0/23 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 44542 (0xadfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Apr 8 11:17:16 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67f505bc-b451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:3b:07:e8:bc:a6:ee:78:e0:ba:6d:c2:d9: 07:2f:3f:86:5f:46:4a:75:a4:90:91:aa:a2:e3:e8: 59:c9:3c:d9:ba:c3:23:89:4b:db:6f:b6:c7:bf:51: 86:39:aa:98:4b:c4:93:4a:93:01:9d:c5:78:aa:01: 3e:6a:b6:4b:e1:da:08:9f:65:2c:0e:ec:d8:42:5e: 5e:9e:d2:c4:54:00:14:d5:0b:a9:fd:a4:ba:a8:5d: 10:ba:c8:0c:88:e1:af:45:18:39:03:9b:73:f1:86: 1c:fa:47:84:17:d0:2c:ff:36:89:78:5f:69:ca:95: 73:3d:55:d1:a8:f6:e2:9e:0a:0d:6d:fb:6c:6e:1c: 79:d2:d2:7f:14:25:32:b4:26:af:ce:c1:df:63:74: 90:cf:4d:72:6c:8f:66:da:65:d6:71:1c:a3:2e:22: 15:ae:90:47:0c:a7:04:ad:b5:2a:cf:27:51:4f:1f: 1e:11:bb:be:e4:d7:4a:ce:d4:79:80:ff:7b:ec:a2: c7:bd:14:b5:54:c3:a2:44:c7:cb:d1:79:de:a5:73: 42:cf:68:43:df:e0:ab:3b:42:4b:38:80:0b:a9:2e: 47:16:c6:47:1d:69:36:78:e2:81:64:f4:81:4d:ea: 18:fa:6b:d0:ba:d3:c8:11:d9:67:35:f1:08:27:46: 25:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:49:8B:2D:FB:EF:DC:3A:83:65:3A:DC:9A:A5:FE:DB:38:F6:6E:28 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/406CF45A146711F0B71BEA5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.29.197.0/24 103.95.100.0/24 103.136.240.0/24 103.142.106.0/23 Signature Algorithm: sha256WithRSAEncryption 14:67:6f:69:3d:9a:c8:e8:5c:16:e7:9e:92:ac:fb:75:2a:43: ae:e1:4f:34:d0:78:98:e2:5d:f3:be:bf:a4:4e:a8:50:ef:ad: 64:94:02:a5:77:55:d9:58:13:88:ab:09:21:35:28:4d:0a:da: 0f:10:fa:0a:1f:b3:e3:b5:5f:83:a4:77:cc:85:44:61:03:28: 9f:ec:95:c9:cd:71:44:0e:bf:f2:b5:fc:01:46:ba:6a:39:32: ad:8f:e0:cd:fd:32:1e:a5:6f:37:c9:9d:98:41:77:70:86:08: 6f:f3:e1:6a:d2:67:16:f1:7b:be:98:f7:0e:cc:4b:3a:23:09: 32:6e:ed:e4:b7:59:5c:46:c4:85:58:a7:45:e8:76:7f:63:67: a0:d3:5d:8a:cc:cd:e6:da:92:bb:09:7c:da:ce:7c:4f:9f:93: eb:f2:fa:88:16:99:ba:dc:4f:0a:11:ef:36:f9:37:21:5c:e4: ef:ca:24:8e:8a:0d:d1:d2:e2:56:b3:0a:6c:ab:de:71:0c:a5: e5:b5:a0:68:77:2b:0a:19:50:59:d6:a4:9e:ce:e4:ee:83:44: f6:37:14:1b:9f:db:55:c5:2b:7c:f7:eb:b4:01:94:c5:39:eb: 04:88:1d:82:cb:8a:03:ea:05:7b:be:62:40:9a:68:82:1c:7a: 5c:8d:5d:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAK3+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDQwODExMTcxNloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjdmNTA1YmMtYjQ1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALF5OwfovKbueOC6bcLZBy8/hl9GSnWkkJGqouPoWck82brDI4lL22+2x79R hjmqmEvEk0qTAZ3FeKoBPmq2S+HaCJ9lLA7s2EJeXp7SxFQAFNULqf2kuqhdELrI DIjhr0UYOQObc/GGHPpHhBfQLP82iXhfacqVcz1V0aj24p4KDW37bG4cedLSfxQl MrQmr87B32N0kM9NcmyPZtpl1nEcoy4iFa6QRwynBK21Ks8nUU8fHhG7vuTXSs7U eYD/e+yix70UtVTDokTHy9F53qVzQs9oQ9/gqztCSziAC6kuRxbGRx1pNnjigWT0 gU3qGPpr0LrTyBHZZzXxCCdGJU0CAwEAAaOCAqcwggKjMB0GA1UdDgQWBBSMSYst ++/cOoNlOtyapf7bOPZuKDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQwNkNGNDVB MTQ2NzExRjBCNzFCRUE1RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDEGCCsGAQUFBwEHAQH/ BCIwIDAeBAIAATAYAwQAZx3FAwQAZ19kAwQAZ4jwAwQBZ45qMA0GCSqGSIb3DQEB CwUAA4IBAQAUZ29pPZrI6FwW556SrPt1KkOu4U800HiY4l3zvr+kTqhQ761klAKl d1XZWBOIqwkhNShNCtoPEPoKH7PjtV+DpHfMhURhAyif7JXJzXFEDr/ytfwBRrpq OTKtj+DN/TIepW83yZ2YQXdwhghv8+Fq0mcW8Xu+mPcOzEs6Iwkybu3kt1lcRsSF WKdF6HZ/Y2eg012KzM3m2pK7CXzaznxPn5Pr8vqIFpm63E8KEe82+TchXOTvyiSO ig3R0uJWswpsq95xDKXltaBodysKGVBZ1qSezuTug0T2NxQbn9tVxSt89+u0AZTF OesEiB2Cy4oD6gV7vmJAmmiCHHpcjV0B -----END CERTIFICATE-----Generated at Fri Jan 2 23:25:58 2026 by rpki-client