This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/1DDB4F803AE711F09B94E47FC4F9AE02.roa
File: 1DDB4F803AE711F09B94E47FC4F9AE02.roa (raw, json)
Hash identifier: jKGh7qYB9/mjUAeo3pLPwOPzfnYdxhoTS9Mo108a0Ok=
Subject key identifier: DF:D9:88:46:0C:18:F5:99:E7:0A:A1:39:A4:B7:B3:5E:6F:60:D0:08
Certificate issuer: /CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E
Certificate serial: 0668
Authority key identifier: 1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/1DDB4F803AE711F09B94E47FC4F9AE02.roa
Signing time: Tue 27 May 2025 10:41:16 +0000
ROA not before: Tue 27 May 2025 10:41:16 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 55954
IP address blocks: 125.214.88.0/21 maxlen: 21
125.214.88.0/24 maxlen: 24
125.214.89.0/24 maxlen: 24
125.214.90.0/24 maxlen: 24
125.214.91.0/24 maxlen: 24
125.214.92.0/24 maxlen: 24
125.214.93.0/24 maxlen: 24
125.214.94.0/24 maxlen: 24
125.214.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Oct 2025 23:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1640 (0x668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D19ED, serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E
Validity
Not Before: May 27 10:41:16 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=683596cc-7b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:eb:8d:ff:ed:bb:f2:86:e7:18:13:a9:b7:
d9:8f:2a:a1:3e:69:a6:d9:39:5b:67:e4:0a:2c:e4:
06:a0:84:d5:27:8a:75:3e:40:02:26:d2:6e:4c:df:
bd:ff:a6:1d:81:87:46:45:48:96:40:49:b5:34:e5:
86:ea:31:08:a7:a4:f3:1b:11:31:3e:a9:38:0f:14:
a9:ec:7b:ae:81:98:76:6f:8d:e0:39:47:0f:10:05:
1e:bc:0a:28:0a:ac:e1:66:d4:92:50:d4:dd:c7:b0:
a7:c7:d7:6f:c3:9d:ed:70:8d:7d:b8:84:b9:6d:f6:
e5:6a:5e:31:46:aa:c4:86:0c:66:af:e0:24:cd:bc:
8f:28:70:6c:81:c5:f9:b8:23:59:8c:63:fc:f8:b1:
cf:e2:e5:90:6d:4a:64:a5:d1:48:3b:99:81:e6:d5:
69:41:63:f2:cc:f3:31:91:b8:f1:a5:5c:07:f5:87:
2b:45:96:68:a7:c7:45:0d:ec:b3:70:df:c0:bd:e7:
7a:55:3d:9f:af:85:39:93:d2:f9:21:3a:d9:52:ab:
e7:02:31:8c:ed:82:13:c0:81:8b:4d:b1:80:bb:35:
c3:fc:9a:0a:30:d7:77:02:92:d3:87:7b:21:c0:07:
82:11:08:59:c7:b9:ec:89:33:2f:d0:b0:d6:37:24:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D9:88:46:0C:18:F5:99:E7:0A:A1:39:A4:B7:B3:5E:6F:60:D0:08
X509v3 Authority Key Identifier:
keyid:1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/1DDB4F803AE711F09B94E47FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.214.88.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:6d:5c:68:25:7f:51:09:2a:e2:a5:62:12:2a:03:86:e0:88:
0e:64:54:5d:44:a4:46:b0:9b:6c:66:2a:55:01:2c:e9:01:24:
71:42:3e:ff:30:92:6e:5b:6a:e7:bd:a4:80:e2:27:cb:7d:a4:
ec:61:bf:07:d4:a5:a3:12:24:9b:97:51:c6:80:55:55:2b:af:
fb:a2:9e:2b:90:93:48:c8:67:86:42:38:d2:48:2c:1d:d8:57:
f3:89:c1:7b:7b:16:eb:64:e8:a8:61:49:ab:5e:99:fb:3a:3c:
f6:ca:51:b5:01:f2:4c:8d:3d:f9:24:8a:1d:bc:1c:a2:96:a0:
25:10:37:55:ad:01:19:2d:f1:ee:7c:0c:33:7f:a1:ef:a5:e8:
e2:7d:96:25:78:49:5a:4e:f3:03:0e:83:7f:69:b5:49:a1:2e:
ae:8e:6a:95:88:af:b0:26:36:b9:fb:51:eb:c4:55:fa:f7:0e:
42:f8:9c:75:24:c6:1f:58:4c:ae:ad:0e:49:6d:32:f7:5f:25:
3d:88:5c:9b:fb:87:45:cf:50:7b:f8:37:a5:9f:c9:2a:d4:cb:
c7:db:b9:0e:03:69:9e:9d:a2:c3:2a:0c:0e:55:3a:68:13:be:
ff:38:5f:d2:63:ed:88:93:3d:96:85:51:50:35:61:55:57:1f:
f4:45:41:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 07:48:40 2025 by rpki-client