This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/2636C6C6FBFC11EE85221046C4F9AE02.roa
File: 2636C6C6FBFC11EE85221046C4F9AE02.roa (raw, json)
Hash identifier: NQkxPngv0JrH8cspg2pDqvSp/RuMqfTf6Ox9XHDfB5k=
Subject key identifier: 87:C4:00:D5:87:8A:BE:6A:00:23:16:FC:2E:AE:7B:D7:08:FE:6A:7C
Certificate issuer: /CN=A91EF175/serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15
Certificate serial: D8
Authority key identifier: EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/2636C6C6FBFC11EE85221046C4F9AE02.roa
Signing time: Tue 03 Jun 2025 05:25:38 +0000
ROA not before: Tue 03 Jun 2025 05:25:38 +0000
ROA not after: Wed 01 Oct 2025 00:00:00 +0000
asID: 58655
IP address blocks: 203.26.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF175, serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15
Validity
Not Before: Jun 3 05:25:38 2025 GMT
Not After : Oct 1 00:00:00 2025 GMT
Subject: CN=683e8752-e8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:7d:3c:81:e2:88:24:f2:26:7e:48:08:5a:
95:1d:93:00:0b:48:2f:cb:e8:ad:5d:c0:3f:9e:f3:
48:e3:e8:33:12:85:8c:a5:c6:52:a5:42:22:0b:31:
dd:76:ac:0e:31:55:34:fe:4b:fa:ff:5d:50:b5:a6:
42:eb:63:2f:85:53:3d:e0:49:9b:c7:62:8f:2d:c1:
87:60:79:a6:70:6c:d1:1b:31:d0:f7:1c:03:1b:79:
ed:e1:db:72:b6:43:94:14:5a:6a:1c:27:a0:9d:72:
fd:1b:98:8e:a8:23:d8:9e:1b:7d:86:72:30:1f:5c:
dc:7c:4e:d6:1b:4f:04:e1:d3:54:16:74:9e:fd:d4:
0a:0f:42:20:e3:74:9c:89:cf:97:29:f3:08:29:c5:
69:42:70:04:1d:ce:83:74:c2:b5:99:02:c1:56:56:
f7:19:72:5f:a9:87:af:c0:2f:60:13:ed:fb:25:44:
91:19:88:8f:6d:ed:9b:46:69:58:29:8c:67:c2:ea:
aa:3e:ce:24:d1:a5:4b:1b:f5:d1:ed:35:2d:c3:ce:
42:e7:42:98:92:1b:e4:7f:8e:ab:d1:4c:16:98:3b:
2c:0a:1a:67:fa:3f:0b:31:2e:dc:5d:54:10:ea:bd:
8a:6f:c4:bb:fe:ec:0e:1e:43:71:76:d2:6f:a2:1e:
68:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C4:00:D5:87:8A:BE:6A:00:23:16:FC:2E:AE:7B:D7:08:FE:6A:7C
X509v3 Authority Key Identifier:
keyid:EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/2636C6C6FBFC11EE85221046C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.26.241.0/24
Signature Algorithm: sha256WithRSAEncryption
11:cc:74:28:75:98:f8:99:d8:ee:b0:3b:d3:2e:1e:d8:01:01:
ef:fa:68:4b:0f:6d:d1:83:ef:e5:70:a0:43:bd:15:be:b4:8e:
27:e5:e8:e4:8b:04:07:c3:5c:89:ad:f5:7d:ef:b5:73:e4:a9:
6f:68:ea:97:15:55:eb:40:55:d8:c6:5c:04:3c:ba:a5:12:d2:
29:6d:10:f2:1f:26:d7:1d:2a:85:87:cf:22:0a:b9:a5:ec:1a:
32:1b:e7:37:df:c7:66:e7:5d:b7:0b:91:65:07:bc:ff:40:2b:
48:c0:f1:03:54:bc:35:54:10:a6:fd:69:0f:86:65:b4:b5:c8:
57:88:86:c9:90:10:4e:c8:0e:91:6c:61:8a:71:b6:9b:c5:24:
22:8a:b1:80:77:0f:d4:6c:6d:c4:00:31:3d:d2:f1:b7:67:8a:
64:93:96:b0:aa:08:48:8b:31:f2:05:bf:4a:59:3d:3f:c7:03:
d9:fd:8d:55:49:8a:60:04:e8:d1:10:fb:6c:df:1e:24:c6:99:
c8:e4:49:8c:e6:e5:66:bb:d7:b9:bd:fa:6a:17:24:32:24:14:
18:8b:6b:dd:94:64:ad:e8:f1:db:13:cc:f1:d4:34:57:58:e5:
fa:9b:8f:7e:e5:e3:f8:f6:b5:68:4c:d9:54:5f:04:4a:b5:36:
83:02:bf:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 23:23:17 2026 by rpki-client