This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C402F2D44CE211F0B7E84130C4F9AE02.roa
File: C402F2D44CE211F0B7E84130C4F9AE02.roa (raw, json)
Hash identifier: cCWY3njV7Z5OewOsi124AId3Ve3TA8HUL7F2hXGwLDM=
Subject key identifier: 97:F7:6B:24:18:AB:FB:7B:4A:36:5A:04:C6:61:2B:A2:8B:24:4C:B6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BE92
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C402F2D44CE211F0B7E84130C4F9AE02.roa
Signing time: Thu 19 Jun 2025 07:55:29 +0000
ROA not before: Thu 19 Jun 2025 07:55:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138764
IP address blocks: 103.139.70.0/24 maxlen: 24
103.139.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Jul 2025 08:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48786 (0xbe92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 19 07:55:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6853c270-b896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:77:73:8e:85:26:07:c6:93:23:19:c5:4e:
6d:87:d0:e8:cf:a3:e2:10:88:31:77:3f:35:65:c2:
ef:c6:84:48:f4:a0:e4:0d:a5:48:1e:89:14:e6:7b:
15:4e:75:67:92:50:80:ab:49:70:cc:80:2a:6b:bb:
c1:62:1a:37:79:7a:6f:29:be:d2:ce:41:2c:d1:5f:
94:b4:d3:a3:9a:f0:fe:76:7a:01:48:3d:64:08:a8:
77:9d:37:d4:46:87:24:32:6a:48:a7:09:e9:cd:3e:
1c:11:68:bc:42:ad:24:72:91:10:39:a6:9e:63:fe:
91:c1:d3:9a:7a:25:cf:40:09:ec:f5:79:68:55:9a:
d9:53:7d:1d:6b:1e:7a:b2:a8:04:e9:b4:54:47:33:
12:eb:ac:f9:f2:88:02:67:80:9b:91:10:1a:4e:8f:
98:8a:fc:9c:65:6f:e8:82:49:02:94:29:ad:03:10:
c1:91:79:4b:ff:c4:1c:d5:2a:1f:8e:30:64:71:fb:
6a:af:a7:36:4d:ff:78:94:6d:35:60:ea:a1:46:42:
f4:1b:40:e0:cb:33:e0:57:69:ff:79:da:6b:c4:44:
6e:4c:f3:9f:69:ec:4b:76:09:18:83:04:25:03:6d:
79:bf:d5:2a:a5:5b:ec:66:cf:4d:7e:39:68:d0:47:
91:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F7:6B:24:18:AB:FB:7B:4A:36:5A:04:C6:61:2B:A2:8B:24:4C:B6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C402F2D44CE211F0B7E84130C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.70.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:8a:bf:de:7f:ce:18:02:a2:43:63:58:14:21:50:05:f2:9b:
57:68:1d:34:55:28:7f:0f:81:fe:3f:f6:e4:c2:b5:3d:a4:2b:
19:fe:0f:0c:5a:fb:85:97:5e:a3:9d:aa:ac:b0:56:d8:a4:79:
e7:21:3f:dd:f8:3e:7f:b1:39:e9:99:14:94:ff:69:8c:45:f7:
e5:ae:4f:20:fe:a5:e0:84:2c:68:47:50:79:0b:58:f9:ee:26:
00:91:33:a3:fb:71:b7:43:cd:b5:7f:1e:2d:75:fe:e5:dc:ca:
86:0e:35:62:33:32:d4:d3:48:1a:8d:f3:7b:f7:50:a2:5a:24:
90:5f:34:5b:f4:4a:c4:1e:da:1f:f4:32:34:ef:ce:65:f8:9b:
31:37:6c:70:90:fd:4d:f4:fb:ca:05:39:45:25:0d:a2:14:e5:
18:47:94:0a:eb:0d:a4:12:97:60:e0:40:4c:ad:b9:4f:f2:12:
ba:39:73:b3:5b:cf:59:4a:9c:2a:e5:0a:14:02:72:5c:8a:e6:
d6:aa:1a:1d:f2:b7:f0:b9:8f:ae:c7:f0:9a:93:cd:4f:88:3a:
03:64:a6:1e:e7:73:13:c8:cd:40:20:cc:4f:f2:55:cc:a1:37:
06:eb:e8:fb:56:60:ce:32:dd:58:7e:e2:e9:fc:fe:a2:54:bc:
7c:8d:59:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 06:47:33 2025 by rpki-client