This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A689FB54258B11F0844CAF7FC4F9AE02.roa File: A689FB54258B11F0844CAF7FC4F9AE02.roa (raw, json) Hash identifier: ribzh+UktCM/bEZTzCRMEvtVaA7xqMI3BI/lpjbFBas= Subject key identifier: 95:BE:B6:50:CB:D7:1E:C0:69:BC:8E:36:DA:C4:D6:29:E4:D1:31:37 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B020 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A689FB54258B11F0844CAF7FC4F9AE02.roa Signing time: Wed 30 Apr 2025 06:23:37 +0000 ROA not before: Wed 30 Apr 2025 06:23:37 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 58898 IP address blocks: 45.116.112.0/22 maxlen: 24 103.25.44.0/22 maxlen: 24 103.69.8.0/22 maxlen: 24 103.93.104.0/22 maxlen: 24 103.116.232.0/23 maxlen: 24 103.127.170.0/24 maxlen: 24 103.137.148.0/24 maxlen: 24 103.143.214.0/24 maxlen: 24 103.148.134.0/23 maxlen: 24 103.151.114.0/24 maxlen: 24 103.153.22.0/24 maxlen: 24 103.157.228.0/23 maxlen: 24 103.159.136.0/24 maxlen: 24 103.159.180.0/24 maxlen: 24 103.160.171.0/24 maxlen: 24 103.170.160.0/24 maxlen: 24 103.175.108.0/23 maxlen: 24 103.176.124.0/23 maxlen: 24 103.225.124.0/22 maxlen: 24 163.53.204.0/22 maxlen: 24 2001:df2:a640::/48 maxlen: 48 2403:f680::/40 maxlen: 48 2403:f680:102::/48 maxlen: 48 2403:f680:103::/48 maxlen: 48 2403:f680:104::/48 maxlen: 48 2403:f680:105::/48 maxlen: 48 2403:f680:106::/48 maxlen: 48 2403:f680:107::/48 maxlen: 48 2403:f680:108::/48 maxlen: 48 2403:f680:112::/48 maxlen: 48 2403:f680:113::/48 maxlen: 48 2403:f680:114::/48 maxlen: 48 2403:f680:115::/48 maxlen: 48 2403:f680:116::/48 maxlen: 48 2403:f680:117::/48 maxlen: 48 2403:f680:118::/48 maxlen: 48 2403:f680:119::/48 maxlen: 48 2403:f680:120::/48 maxlen: 48 2403:f680:121::/48 maxlen: 48 2403:f680:122::/48 maxlen: 48 2403:f680:123::/48 maxlen: 48 2403:f680:124::/48 maxlen: 48 2403:f680:125::/48 maxlen: 48 2403:f680:126::/48 maxlen: 48 2403:f680:127::/48 maxlen: 48 2403:f680:128::/48 maxlen: 48 2403:f680:129::/48 maxlen: 48 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 45088 (0xb020) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Apr 30 06:23:37 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6811c1e9-fac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e5:7d:27:e5:ec:b1:92:fd:6d:ab:e8:9e:74: 2c:93:24:38:c4:ba:d9:95:9e:2e:d1:48:8e:e5:af: 15:51:67:45:1a:0f:32:fa:03:8c:db:70:5a:56:d2: be:9a:54:10:50:11:d5:8e:bf:ff:7d:27:b9:6d:32: 42:b8:0d:2c:70:f6:37:57:32:b9:f2:20:0a:1f:d7: a5:7c:e4:44:b2:24:68:51:c9:b6:20:b1:45:b5:15: b5:65:34:3c:bf:01:1c:80:0e:4b:fd:11:b2:e1:a1: e8:37:88:eb:f0:a5:5a:99:3d:88:c1:78:d4:90:3d: 44:cd:70:9d:5b:be:8f:0a:da:1d:53:07:71:7d:ce: 2e:57:17:c8:42:5f:74:6c:1f:ae:d2:5a:21:d5:d4: df:3c:8b:45:cc:ff:73:c1:cd:80:91:84:0a:d0:88: 02:6f:72:00:5c:3f:48:4b:72:a8:33:7f:c4:f8:13: b7:24:ad:7c:48:59:8f:6c:0b:4e:68:69:a7:30:ca: e5:96:d9:7f:cb:3d:cd:77:da:13:85:45:67:a1:9d: 57:72:04:ae:1c:3b:f2:77:95:89:dd:38:12:9b:f0: b8:ba:2e:48:92:3b:17:a5:57:d6:45:b3:5b:5c:b8: 5c:f6:3c:5c:32:fb:92:56:e3:13:44:4c:d5:f5:41: 9b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BE:B6:50:CB:D7:1E:C0:69:BC:8E:36:DA:C4:D6:29:E4:D1:31:37 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A689FB54258B11F0844CAF7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.116.112.0/22 103.25.44.0/22 103.69.8.0/22 103.93.104.0/22 103.116.232.0/23 103.127.170.0/24 103.137.148.0/24 103.143.214.0/24 103.148.134.0/23 103.151.114.0/24 103.153.22.0/24 103.157.228.0/23 103.159.136.0/24 103.159.180.0/24 103.160.171.0/24 103.170.160.0/24 103.175.108.0/23 103.176.124.0/23 103.225.124.0/22 163.53.204.0/22 IPv6: 2001:df2:a640::/48 2403:f680::/40 2403:f680:102::-2403:f680:108:ffff:ffff:ffff:ffff:ffff 2403:f680:112::-2403:f680:119:ffff:ffff:ffff:ffff:ffff 2403:f680:120::-2403:f680:129:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption b7:23:41:7c:84:76:0f:46:8f:f7:b3:0d:40:bf:06:02:5b:42: 79:f2:c8:9b:6a:a5:d7:aa:97:79:6d:28:28:51:6d:09:b2:13: 9f:35:11:32:37:92:a7:8a:fc:15:92:ff:81:bd:81:e8:c4:d2: cd:e1:78:20:1b:42:da:e1:8c:1e:ae:03:97:a2:8f:df:0c:e9: 2b:9a:22:06:ab:0e:0c:e1:ab:be:2a:d0:c2:35:1f:e9:ca:a0: 7c:0c:68:ce:69:aa:43:ae:1c:e0:98:56:59:13:f1:d6:d0:f5: cc:b0:2b:0e:1f:8c:8c:fd:8e:0d:e8:4b:3b:b8:76:b7:34:5f: a9:57:a9:0e:42:ad:57:14:f6:59:7c:ab:64:4e:3c:8d:a4:44: 8a:6b:b9:12:7e:88:ce:d1:90:5b:0c:1a:a4:ee:72:f6:47:af: f8:4f:5f:d9:58:36:af:08:f3:2f:0d:ec:8f:65:1a:ff:52:bc: 9a:16:c5:ae:65:e5:f9:0b:58:c8:e0:0d:8b:5d:58:39:e8:ec: 95:38:2f:0e:26:68:84:46:42:bc:e4:62:ec:0f:9f:58:8d:49: 19:2d:2b:f0:d8:18:26:a4:4d:ad:c5:c0:0d:e1:0a:2f:2e:b9: d3:05:98:85:1a:d7:fc:4d:cd:e5:47:d4:2e:61:3f:57:4d:c7: 66:f2:ff:e7 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIDALAgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDQzMDA2MjMzN1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxMWMxZTktZmFjMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/lfSfl7LGS/W2r6J50LJMkOMS62ZWeLtFIjuWvFVFnRRoPMvoDjNtwWlbS vppUEFAR1Y6//30nuW0yQrgNLHD2N1cyufIgCh/XpXzkRLIkaFHJtiCxRbUVtWU0 PL8BHIAOS/0RsuGh6DeI6/ClWpk9iMF41JA9RM1wnVu+jwraHVMHcX3OLlcXyEJf dGwfrtJaIdXU3zyLRcz/c8HNgJGECtCIAm9yAFw/SEtyqDN/xPgTtyStfEhZj2wL TmhppzDK5ZbZf8s9zXfaE4VFZ6GdV3IErhw78neVid04EpvwuLouSJI7F6VX1kWz W1y4XPY8XDL7klbjE0RM1fVBm3UCAwEAAaOCA18wggNbMB0GA1UdDgQWBBSVvrZQ y9cewGm8jjbaxNYp5NExNzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E2ODlGQjU0 MjU4QjExRjA4NDRDQUY3RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIHoBggrBgEFBQcBBwEB /wSB2DCB1TB+BAIAATB4AwQCLXRwAwQCZxksAwQCZ0UIAwQCZ11oAwQBZ3ToAwQA Z3+qAwQAZ4mUAwQAZ4/WAwQBZ5SGAwQAZ5dyAwQAZ5kWAwQBZ53kAwQAZ5+IAwQA Z5+0AwQAZ6CrAwQAZ6qgAwQBZ69sAwQBZ7B8AwQCZ+F8AwQCozXMMFMEAgACME0D BwAgAQ3ypkADBgAkA/aAADASAwcBJAP2gAECAwcAJAP2gAEIMBIDBwEkA/aAARID BwEkA/aAARgwEgMHBSQD9oABIAMHASQD9oABKDANBgkqhkiG9w0BAQsFAAOCAQEA tyNBfIR2D0aP97MNQL8GAltCefLIm2ql16qXeW0oKFFtCbITnzURMjeSp4r8FZL/ gb2B6MTSzeF4IBtC2uGMHq4Dl6KP3wzpK5oiBqsODOGrvirQwjUf6cqgfAxozmmq Q64c4JhWWRPx1tD1zLArDh+MjP2ODehLO7h2tzRfqVepDkKtVxT2WXyrZE48jaRE imu5En6IztGQWwwapO5y9kev+E9f2Vg2rwjzLw3sj2Ua/1K8mhbFrmXl+QtYyOAN i11YOejslTgvDiZohEZCvORi7A+fWI1JGS0r8NgYJqRNrcXADeEKLy650wWYhRrX /E3N5UfULmE/V03HZvL/5w== -----END CERTIFICATE-----Generated at Mon Dec 29 00:47:55 2025 by rpki-client