This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/6F1BA5A4EE9611EF8BBC4530C4F9AE02.roa File: 6F1BA5A4EE9611EF8BBC4530C4F9AE02.roa (raw, json) Hash identifier: xpvGcErEwJsYMUd0IN0+xOAllYfzKpwD+JL0yO2Vexo= Subject key identifier: 99:1C:26:4F:9E:BA:7C:D0:03:B3:FE:D8:FD:21:2B:95:8C:5A:27:C3 Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Certificate serial: 27C2 Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/6F1BA5A4EE9611EF8BBC4530C4F9AE02.roa Signing time: Wed 19 Feb 2025 07:52:15 +0000 ROA not before: Wed 19 Feb 2025 07:52:15 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 23920 IP address blocks: 203.208.31.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 10178 (0x27c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Validity Not Before: Feb 19 07:52:15 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67b58daf-4e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:60:25:21:6a:be:e8:04:83:b4:fe:7a:c0:d7: 51:23:91:ed:10:97:9c:ea:13:98:6f:f7:fd:c3:44: 33:f1:f2:c7:40:14:7e:2d:28:c0:92:76:5b:2d:11: cf:6a:08:96:77:55:d2:fa:d6:61:a9:04:ec:e5:8e: 80:cd:2e:6e:bc:3d:27:96:6c:2b:0b:2f:e6:4d:80: 1e:e4:fc:24:79:1c:73:40:73:30:a4:27:7c:b2:1d: 22:f0:7c:a2:0c:78:7f:37:03:ca:71:90:80:eb:3b: c2:df:fa:b3:47:17:95:c9:3f:db:08:6b:9e:19:80: 14:00:b8:a7:44:3f:1e:8e:ba:53:84:58:4c:8d:29: c5:88:f7:f7:d2:d7:2f:68:7b:fe:67:bc:89:a7:1f: 95:a9:7d:d6:69:23:ee:ec:49:88:53:a2:9d:0d:47: 54:c0:d5:c7:f7:73:e1:fa:4d:66:33:66:35:76:fd: 91:ab:3c:14:43:b3:22:13:18:13:46:08:25:ac:78: e0:cb:e2:5d:6c:ab:8b:90:b1:85:90:46:03:d2:a9: 34:27:33:fc:bb:25:ee:02:96:d1:c1:73:90:af:12: 6b:d8:f9:f6:38:26:f5:79:63:27:a5:3d:99:5b:f4: 4b:31:13:1f:00:9d:7e:91:49:f4:81:37:0e:04:97: 25:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1C:26:4F:9E:BA:7C:D0:03:B3:FE:D8:FD:21:2B:95:8C:5A:27:C3 X509v3 Authority Key Identifier: keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/6F1BA5A4EE9611EF8BBC4530C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.208.31.0/24 Signature Algorithm: sha256WithRSAEncryption 22:ee:be:4a:9f:0b:12:ba:77:4a:ac:73:4c:5d:28:6e:ef:05: 8e:83:e8:26:a3:32:7b:c8:a3:f0:b5:a2:c4:ae:43:dc:f5:89: fe:31:c1:ed:32:18:72:82:6f:da:ff:d3:82:00:81:71:ae:04: d3:b6:ae:86:1d:bc:4d:33:98:e7:8d:05:46:45:f7:10:2b:38: 59:3a:80:fc:06:fe:8c:00:ff:87:04:f7:4e:a5:bc:3c:c1:81: 5e:c2:0a:a7:03:b3:19:bf:0e:30:32:db:a2:fb:c9:c0:88:36: 83:0c:71:59:4d:9b:37:71:9d:a9:8f:5d:d2:a9:de:d0:8b:f0: 8b:2d:05:25:76:35:b4:e2:af:da:ca:4c:37:2a:22:87:5d:4c: 61:da:31:e8:db:71:1a:3d:e8:f4:df:d4:a8:80:3c:64:df:b1: 25:f1:06:d3:7b:c6:4d:bb:59:37:c9:3a:8a:5c:5f:6e:51:89: 29:6c:f1:0e:d9:94:8c:07:31:fc:eb:83:79:e2:16:b0:c6:80: 13:89:76:b9:4b:db:30:db:c9:47:73:08:c8:7f:ac:9f:ab:5f: e7:c3:dd:07:a5:77:ff:8b:92:74:02:e6:0a:d2:a5:6f:24:8c: bb:2a:8e:3e:e2:e3:66:d4:1c:bf:ba:c1:6b:2e:d2:6d:ec:0a: 0e:3b:32:48 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJ8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0NDYxMTAvBgNVBAUTKDdENjVFQkUxNEMzMDQ2RTczRTM5ODY5NTczMDJBMjZF MDgxRjFBRjgwHhcNMjUwMjE5MDc1MjE1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I1OGRhZi00ZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32AlIWq+6ASDtP56wNdRI5HtEJec6hOYb/f9w0Qz8fLHQBR+LSjAknZbLRHP agiWd1XS+tZhqQTs5Y6AzS5uvD0nlmwrCy/mTYAe5PwkeRxzQHMwpCd8sh0i8Hyi DHh/NwPKcZCA6zvC3/qzRxeVyT/bCGueGYAUALinRD8ejrpThFhMjSnFiPf30tcv aHv+Z7yJpx+VqX3WaSPu7EmIU6KdDUdUwNXH93Ph+k1mM2Y1dv2RqzwUQ7MiExgT RgglrHjgy+JdbKuLkLGFkEYD0qk0JzP8uyXuApbRwXOQrxJr2Pn2OCb1eWMnpT2Z W/RLMRMfAJ1+kUn0gTcOBJclrQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJkcJk+e unzQA7P+2P0hK5WMWifDMB8GA1UdIwQYMBaAFH1l6+FMMEbnPjmGlXMCom4IHxr4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ0Ni9BQ0EyRTc1QzFG QzUxMUU1QjQ1MERENjJDNEY5QUUwMi9mV1hyNFV3d1J1Yy1PWWFWY3dLaWJnZ2ZH dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZXWHI0VXd3UnVjLU9ZYVZjd0tpYmdnZkd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDU0NDYvQUNBMkU3NUMxRkM1MTFFNUI0NTBERDYyQzRGOUFFMDIvNkYxQkE1QTRF RTk2MTFFRjhCQkM0NTMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADL0B8wDQYJKoZIhvcNAQELBQADggEBACLuvkqfCxK6d0qs c0xdKG7vBY6D6CajMnvIo/C1osSuQ9z1if4xwe0yGHKCb9r/04IAgXGuBNO2roYd vE0zmOeNBUZF9xArOFk6gPwG/owA/4cE906lvDzBgV7CCqcDsxm/DjAy26L7ycCI NoMMcVlNmzdxnamPXdKp3tCL8IstBSV2NbTir9rKTDcqIoddTGHaMejbcRo96PTf 1KiAPGTfsSXxBtN7xk27WTfJOopcX25RiSls8Q7ZlIwHMfzrg3niFrDGgBOJdrlL 2zDbyUdzCMh/rJ+rX+fD3Qeld/+LknQC5grSpW8kjLsqjj7i42bUHL+6wWsu0m3s Cg47Mkg= -----END CERTIFICATE-----Generated at Mon Dec 22 00:24:30 2025 by rpki-client