This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/97F6216640AD11F0BB332714C4F9AE02.roa File: 97F6216640AD11F0BB332714C4F9AE02.roa (raw, json) Hash identifier: D/cwdq2qeau3nAVw8Sz3zqNDQKjgr7DJFvLl2UTQid4= Subject key identifier: 74:E3:E6:A1:02:D4:6B:D5:CF:84:B4:ED:60:B1:A6:4F:92:67:DA:8F Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 1132 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/97F6216640AD11F0BB332714C4F9AE02.roa Signing time: Tue 03 Jun 2025 19:05:45 +0000 ROA not before: Tue 03 Jun 2025 19:05:45 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 136406 IP address blocks: 103.86.193.0/24 maxlen: 24 103.86.194.0/24 maxlen: 24 103.86.195.0/24 maxlen: 24 220.152.114.0/24 maxlen: 24 2400:c640::/32 maxlen: 36 2400:c640:80::/48 maxlen: 48 Validation: Failed, certificate revoked on Sun 19 Oct 2025 11:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4402 (0x1132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Jun 3 19:05:45 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=683f4789-be23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:eb:09:fc:2f:d5:f2:3d:81:c0:f0:5b:5b:78: f4:b0:52:c7:89:7a:3c:60:97:c3:ac:eb:c6:b9:19: 8d:4b:59:09:67:da:b5:3d:70:a6:32:02:eb:55:56: 48:4b:93:2f:83:73:19:78:88:3b:6d:d2:10:01:de: 9d:b2:d1:ec:02:af:0d:52:85:84:e5:39:1d:1d:85: c6:0b:6e:ef:29:f4:07:58:5e:b9:35:d0:56:16:e4: 9b:79:0d:0c:6b:a0:7b:ec:f4:a8:d7:4a:22:a0:83: f9:6c:4e:60:49:d6:11:53:eb:a8:aa:33:2a:40:60: 77:9b:bc:c0:63:80:33:0b:e8:7e:cf:bf:bf:9c:d5: f9:5a:93:31:97:c7:2d:0e:d6:52:f1:ea:b2:8c:dc: 2b:fc:75:4a:6b:fc:ee:a3:2e:b5:b6:5f:dd:13:3d: c3:62:26:cb:d4:8b:ad:cf:2b:83:d0:44:b5:0e:18: 65:e9:f7:b0:a6:32:b3:ed:1b:b3:0f:a0:c3:29:39: 94:61:da:5e:33:5c:b0:12:f7:2c:67:cb:0f:f1:f2: 27:e6:1a:c8:9c:a2:8c:2a:08:a5:d4:0b:b2:84:43: 93:6f:39:98:42:bc:e2:c5:28:98:a1:dc:be:1b:07: ef:ae:7a:b3:59:3a:fc:f9:94:60:ed:0d:e2:1e:4b: 4b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E3:E6:A1:02:D4:6B:D5:CF:84:B4:ED:60:B1:A6:4F:92:67:DA:8F X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/97F6216640AD11F0BB332714C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.86.193.0-103.86.195.255 220.152.114.0/24 IPv6: 2400:c640::/32 Signature Algorithm: sha256WithRSAEncryption 0e:57:13:dd:f2:c6:e2:6b:da:f2:b5:f9:c5:88:34:18:24:5e: 4b:ba:5e:f6:19:98:71:25:02:2d:ac:46:dd:fc:22:85:24:a5: 41:69:4b:bb:98:69:e0:b6:e5:b8:29:2b:ad:4a:9a:36:8e:8a: e7:7b:63:5e:58:ed:7a:9c:fd:9d:bf:6a:80:51:f3:83:bd:df: e1:5f:b3:79:e7:76:80:2b:26:00:c7:32:0e:fd:39:8c:aa:bf: e1:89:52:6a:8f:f4:5c:54:7b:b2:27:16:c7:c9:b4:eb:70:f7: df:9b:69:3f:e4:52:28:8d:d8:29:8d:a9:7b:71:c6:ca:fb:61: 52:bf:40:1f:3c:a8:e1:07:6d:87:d9:b3:12:10:00:ce:9d:01: a3:b6:22:97:7e:0e:d1:93:cc:07:56:13:d8:37:47:69:ef:2a: 71:fe:19:41:57:2b:a4:00:2d:ca:b2:db:2b:17:aa:b1:e8:08: 95:b1:dd:fa:25:d1:5f:75:43:a8:a6:55:f8:8b:e2:ef:6f:ab: e5:8b:da:68:c6:21:8b:37:f2:36:2d:da:db:df:93:e1:25:5e: 65:04:be:0b:01:e7:f7:fa:0e:78:fd:71:f5:62:e6:55:b3:5a: 0e:3c:ca:8c:60:68:e9:0e:6d:64:ff:2f:98:df:61:1d:f8:79: 89:f0:c6:70 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICETIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjUwNjAzMTkwNTQ1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODNmNDc4OS1iZTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApesJ/C/V8j2BwPBbW3j0sFLHiXo8YJfDrOvGuRmNS1kJZ9q1PXCmMgLrVVZI S5Mvg3MZeIg7bdIQAd6dstHsAq8NUoWE5TkdHYXGC27vKfQHWF65NdBWFuSbeQ0M a6B77PSo10oioIP5bE5gSdYRU+uoqjMqQGB3m7zAY4AzC+h+z7+/nNX5WpMxl8ct DtZS8eqyjNwr/HVKa/zuoy61tl/dEz3DYibL1IutzyuD0ES1Dhhl6fewpjKz7Ruz D6DDKTmUYdpeM1ywEvcsZ8sP8fIn5hrInKKMKgil1AuyhEOTbzmYQrzixSiYody+ GwfvrnqzWTr8+ZRg7Q3iHktLHQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFHTj5qEC 1GvVz4S07WCxpk+SZ9qPMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU3REMvMzVGNzk4NjYxRjAxMTFFOUIxQUE5NDM2QzRGOUFFMDIvOTdGNjIxNjY0 MEFEMTFGMEJCMzMyNzE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBoEAgABMBQwDAMEAGdWwQMEAmdWwAMEANyYcjANBAIAAjAHAwUAJADGQDAN BgkqhkiG9w0BAQsFAAOCAQEADlcT3fLG4mva8rX5xYg0GCReS7pe9hmYcSUCLaxG 3fwihSSlQWlLu5hp4LbluCkrrUqaNo6K53tjXljtepz9nb9qgFHzg73f4V+zeed2 gCsmAMcyDv05jKq/4YlSao/0XFR7sicWx8m063D335tpP+RSKI3YKY2pe3HGyvth Ur9AHzyo4Qdth9mzEhAAzp0Bo7Yil34O0ZPMB1YT2DdHae8qcf4ZQVcrpAAtyrLb KxeqsegIlbHd+iXRX3VDqKZV+Ivi72+r5YvaaMYhizfyNi3a29+T4SVeZQS+CwHn 9/oOeP1x9WLmVbNaDjzKjGBo6Q5tZP8vmN9hHfh5ifDGcA== -----END CERTIFICATE-----Generated at Sun Jan 11 11:25:12 2026 by rpki-client