This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/1856F8E8CCC411EFBDE7CF74C4F9AE02.roa File: 1856F8E8CCC411EFBDE7CF74C4F9AE02.roa (raw, json) Hash identifier: RycERcaX3HufvFb9p2Fr3zJ7mtcOuKcLt1prJ/d2INs= Subject key identifier: E7:AF:49:63:9D:78:53:9F:9A:5E:E4:78:B0:86:65:32:02:05:3E:53 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 111E Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/1856F8E8CCC411EFBDE7CF74C4F9AE02.roa Signing time: Tue 03 Jun 2025 16:46:49 +0000 ROA not before: Tue 03 Jun 2025 16:46:49 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 136406 IP address blocks: 103.86.193.0/24 maxlen: 24 103.86.194.0/24 maxlen: 24 103.86.195.0/24 maxlen: 24 220.152.114.0/24 maxlen: 24 2400:c640::/32 maxlen: 32 2400:c640:80::/48 maxlen: 48 Validation: Failed, certificate revoked on Tue 03 Jun 2025 18:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4382 (0x111e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Jun 3 16:46:49 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=683f26f9-5180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d1:89:58:29:10:f5:3f:7d:2e:28:f9:5b:41: cb:3c:ed:bc:9d:17:f2:54:60:27:cd:e2:aa:42:05: 81:e2:b6:6f:32:53:f0:68:7e:e8:9a:8e:4c:62:90: 01:14:d0:4d:e1:aa:24:4d:d7:df:97:6c:26:1f:b1: f8:4a:30:31:46:b9:1e:85:87:1c:cc:62:da:70:39: 9f:94:41:f7:57:ce:9f:37:48:b4:b7:30:e1:ba:09: 1e:16:03:f3:5e:80:cc:d6:fc:1f:bc:49:89:5d:73: 15:be:b6:6d:d4:e5:6a:c7:2c:99:21:01:c5:80:5a: bb:5f:94:91:4f:97:4a:95:f6:70:cc:4d:2a:ce:9d: b9:e1:b4:25:64:58:75:55:ec:63:79:36:f3:b4:bf: 86:08:cd:55:fb:f4:b6:bc:92:e7:4e:42:45:b5:5a: 19:da:27:87:bf:ca:4d:f4:82:e5:86:90:b0:f8:9c: 73:31:3d:b1:dd:1d:f8:4d:86:d0:c3:ef:4b:ca:04: f8:1b:50:21:73:b6:43:3d:30:0f:e2:de:4b:4a:d6: 32:34:04:3c:1d:40:b6:be:34:a9:e9:14:27:0d:be: 2b:b8:70:21:55:53:cb:10:f2:cb:d5:0e:6e:3a:30: de:14:d6:0b:a5:e6:de:98:53:71:0a:13:02:1c:b4: b9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AF:49:63:9D:78:53:9F:9A:5E:E4:78:B0:86:65:32:02:05:3E:53 X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/1856F8E8CCC411EFBDE7CF74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.86.193.0-103.86.195.255 220.152.114.0/24 IPv6: 2400:c640::/32 Signature Algorithm: sha256WithRSAEncryption 90:16:dd:00:f7:67:a3:ea:cf:10:c4:9e:43:fd:0b:9e:57:1d: d6:48:d8:5b:27:4c:23:33:0e:5e:ce:5f:c5:ee:1d:a8:df:9e: a7:52:9d:73:b0:a9:37:ed:f2:40:18:10:e4:e9:e6:9b:f8:bd: fd:aa:52:99:75:b7:cb:84:8d:ae:32:74:5b:ab:1a:b5:86:e6: b2:38:7e:6f:ba:e2:cb:29:00:c5:57:7d:20:a7:83:86:cc:ac: a4:65:8f:c0:66:5b:dc:1d:84:54:24:13:81:53:53:8b:fb:88: 7e:4c:ee:26:34:77:1b:13:44:99:0c:a1:b7:5d:50:f4:21:4f: 06:ec:ba:cd:cc:ba:64:f3:9e:2c:36:b9:8e:96:91:9c:5a:5f: 8e:f2:d1:17:ad:86:65:6b:39:4b:aa:be:3f:a4:91:8c:fb:10: e8:90:7b:4c:05:91:56:bb:1f:b1:eb:d3:dd:ef:e0:3b:16:2b: 25:15:80:4e:e5:d9:22:de:9f:2f:3f:56:27:34:97:0e:d8:5c: 1e:42:b7:a1:6b:0c:04:b2:09:26:81:01:e8:c1:41:12:06:fa: 56:2c:08:c1:ae:e7:50:67:30:59:38:b8:51:89:0c:d2:0b:0a: 70:a1:a6:24:b8:97:26:9c:40:92:76:9e:97:09:8b:39:42:cc: 19:fb:a4:d4 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICER4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjUwNjAzMTY0NjQ5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODNmMjZmOS01MTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dGJWCkQ9T99Lij5W0HLPO28nRfyVGAnzeKqQgWB4rZvMlPwaH7omo5MYpAB FNBN4aokTdffl2wmH7H4SjAxRrkehYcczGLacDmflEH3V86fN0i0tzDhugkeFgPz XoDM1vwfvEmJXXMVvrZt1OVqxyyZIQHFgFq7X5SRT5dKlfZwzE0qzp254bQlZFh1 VexjeTbztL+GCM1V+/S2vJLnTkJFtVoZ2ieHv8pN9ILlhpCw+JxzMT2x3R34TYbQ w+9LygT4G1Ahc7ZDPTAP4t5LStYyNAQ8HUC2vjSp6RQnDb4ruHAhVVPLEPLL1Q5u OjDeFNYLpebemFNxChMCHLS5zQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFOevSWOd eFOfml7keLCGZTICBT5TMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU3REMvMzVGNzk4NjYxRjAxMTFFOUIxQUE5NDM2QzRGOUFFMDIvMTg1NkY4RThD Q0M0MTFFRkJERTdDRjc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBoEAgABMBQwDAMEAGdWwQMEAmdWwAMEANyYcjANBAIAAjAHAwUAJADGQDAN BgkqhkiG9w0BAQsFAAOCAQEAkBbdAPdno+rPEMSeQ/0Lnlcd1kjYWydMIzMOXs5f xe4dqN+ep1Kdc7CpN+3yQBgQ5Onmm/i9/apSmXW3y4SNrjJ0W6satYbmsjh+b7ri yykAxVd9IKeDhsyspGWPwGZb3B2EVCQTgVNTi/uIfkzuJjR3GxNEmQyht11Q9CFP Buy6zcy6ZPOeLDa5jpaRnFpfjvLRF62GZWs5S6q+P6SRjPsQ6JB7TAWRVrsfsevT 3e/gOxYrJRWATuXZIt6fLz9WJzSXDthcHkK3oWsMBLIJJoEB6MFBEgb6ViwIwa7n UGcwWTi4UYkM0gsKcKGmJLiXJpxAknaelwmLOULMGfuk1A== -----END CERTIFICATE-----Generated at Mon Jan 12 04:14:11 2026 by rpki-client