This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870001/0/3230332e3137362e3138392e302f32342d3234203d3e203535343731.roa
File: 3230332e3137362e3138392e302f32342d3234203d3e203535343731.roa (raw, json)
Hash identifier: ohIIKisvv5h7278yV/JkVYKladaHmtDW77oTLbPD5mM=
Subject key identifier: 1A:25:79:E3:81:E1:65:6E:80:4C:8F:39:97:2B:D1:AA:67:B2:63:BF
Certificate issuer: /CN=A918C2870001/serialNumber=E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C
Certificate serial: 2B7CCC46279F10E2B6A344CA4EF2AF8A5DAEB91E
Authority key identifier: E4:A2:D2:F4:E4:87:25:65:FB:EB:0E:AA:00:02:F7:EB:05:9E:5C:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KLS9OSHJWX76w6qAAL36wWeXBw.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A918C2870001/0/3230332e3137362e3138392e302f32342d3234203d3e203535343731.roa
Signing time: Wed 17 Dec 2025 23:13:01 +0000
ROA not before: Wed 17 Dec 2025 23:08:01 +0000
ROA not after: Wed 16 Dec 2026 23:13:01 +0000
asID: 55471
IP address blocks: 203.176.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Dec 2025 23:41:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:7c:cc:46:27:9f:10:e2:b6:a3:44:ca:4e:f2:af:8a:5d:ae:b9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C2870001, serialNumber=E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C
Validity
Not Before: Dec 17 23:08:01 2025 GMT
Not After : Dec 16 23:13:01 2026 GMT
Subject: CN=1A2579E381E1656E804C8F39972BD1AA67B263BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d8:fe:9e:01:fd:23:6f:30:bb:85:f4:0b:a2:
99:1f:b7:1f:5d:e2:61:2a:19:e4:26:92:4f:65:c3:
d0:20:b0:0c:14:52:88:51:87:18:da:94:2e:45:96:
d2:7f:43:71:d8:43:b3:11:7d:cd:12:0f:1e:e2:83:
70:38:bc:34:00:a6:e7:c2:d2:e4:c9:70:45:ab:9f:
44:3c:e6:d5:67:c9:7b:25:ee:51:b9:9a:21:2c:94:
e9:56:03:b3:85:31:48:d1:b7:62:90:d7:9c:71:df:
3b:da:93:fd:d0:eb:87:35:50:c1:7c:13:05:63:af:
6f:e9:f1:70:dd:59:76:f8:21:c1:02:52:33:65:51:
80:ed:2e:81:56:3d:d1:07:b3:86:01:cf:2f:1b:c0:
09:c4:f9:28:76:a6:c1:56:fb:a7:07:18:92:c3:36:
49:6e:44:77:95:b7:48:b7:45:ff:ad:df:e9:2d:76:
fc:38:5e:4d:7c:d7:c8:2d:c5:4a:55:8f:ee:bc:18:
0c:ea:a6:d9:b0:77:09:bd:f0:d8:3f:36:f8:84:91:
1e:97:31:92:e0:e9:4b:81:be:fc:85:4c:45:d2:96:
93:37:13:4b:66:ea:03:ef:6a:77:65:94:16:4e:d4:
57:a6:37:3d:71:85:b6:9b:cc:b0:b6:9a:6a:bd:18:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:25:79:E3:81:E1:65:6E:80:4C:8F:39:97:2B:D1:AA:67:B2:63:BF
X509v3 Authority Key Identifier:
keyid:E4:A2:D2:F4:E4:87:25:65:FB:EB:0E:AA:00:02:F7:EB:05:9E:5C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KLS9OSHJWX76w6qAAL36wWeXBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870001/0/3230332e3137362e3138392e302f32342d3234203d3e203535343731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.176.189.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c3:35:c0:c3:a0:12:bd:d6:aa:f4:54:b6:b8:2b:f0:fd:7e:
c2:58:da:28:eb:59:95:18:b9:41:09:77:3b:41:26:64:a8:7b:
5d:92:59:4a:26:a0:50:95:28:92:1a:c7:4a:a5:d5:d7:e9:a7:
04:a7:30:08:6a:65:54:e9:04:06:10:cd:a5:b9:eb:5f:85:cd:
c6:8a:99:d5:4c:aa:ed:02:aa:e8:92:21:82:67:28:5c:31:61:
4d:1f:50:f1:fb:0e:18:39:18:25:93:23:d1:ed:98:05:93:be:
8c:32:b2:5e:4b:4b:3e:a3:c2:7b:03:62:bb:9e:ec:1c:ad:a7:
8e:f8:77:73:2a:b9:50:b5:7a:fc:be:1a:91:b7:4f:ec:33:87:
36:a2:ed:07:be:ed:fa:5a:31:ea:5d:95:e2:ab:38:de:08:2d:
52:ee:22:70:93:4f:f7:91:f9:4b:bc:d2:e5:39:fc:01:55:1d:
65:a0:66:84:99:68:5e:d9:30:76:01:80:a6:aa:a3:db:7a:20:
40:06:ff:a5:ae:21:f4:fb:20:d6:c5:ef:fb:53:7f:3b:bf:41:
49:19:af:d6:84:a1:83:50:b7:7b:7e:88:9a:4d:d1:33:c5:3d:
d3:7b:80:f3:e6:bd:85:dd:b9:59:02:48:dc:d1:79:32:20:99:
2d:74:9b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:16:51 2025 by rpki-client