This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/4990571EF7C311EE84D13C30C4F9AE02.roa
File: 4990571EF7C311EE84D13C30C4F9AE02.roa (raw, json)
Hash identifier: Fzi3tD+Nn9gL7KmhNrbFExWBGDDhphRncIYZAU4Cs6s=
Subject key identifier: 51:F9:40:BF:92:6F:25:1A:4D:18:1F:AE:0F:35:CC:FC:57:1A:F7:C4
Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial: 353A
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/4990571EF7C311EE84D13C30C4F9AE02.roa
Signing time: Thu 11 Apr 2024 05:21:02 +0000
ROA not before: Thu 11 Apr 2024 05:21:02 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 3758
IP address blocks: 14.100.0.0/17 maxlen: 17
42.60.0.0/16 maxlen: 24
42.61.0.0/16 maxlen: 24
58.185.0.0/16 maxlen: 24
101.78.64.0/18 maxlen: 24
115.42.128.0/17 maxlen: 17
115.42.160.0/24 maxlen: 24
115.42.161.0/24 maxlen: 24
115.42.181.0/24 maxlen: 24
115.42.185.0/24 maxlen: 24
115.42.195.0/24 maxlen: 24
115.42.196.0/24 maxlen: 24
115.42.204.0/24 maxlen: 24
115.42.206.0/24 maxlen: 24
115.42.217.0/24 maxlen: 24
115.42.219.0/24 maxlen: 24
115.42.222.0/24 maxlen: 24
115.42.251.0/24 maxlen: 24
115.42.255.0/24 maxlen: 24
115.66.0.0/16 maxlen: 16
115.66.0.0/17 maxlen: 17
115.66.128.0/17 maxlen: 17
116.12.128.0/17 maxlen: 17
116.12.137.0/24 maxlen: 24
116.12.138.0/24 maxlen: 24
116.12.147.0/24 maxlen: 24
116.12.154.0/24 maxlen: 24
116.12.156.0/24 maxlen: 24
116.12.205.0/24 maxlen: 24
116.12.206.0/24 maxlen: 24
116.12.213.0/24 maxlen: 24
116.12.214.0/24 maxlen: 24
116.12.226.0/24 maxlen: 24
116.12.229.0/24 maxlen: 24
116.12.234.0/24 maxlen: 24
116.12.235.0/24 maxlen: 24
116.12.238.0/24 maxlen: 24
116.12.243.0/24 maxlen: 24
116.14.0.0/15 maxlen: 15
116.14.0.0/16 maxlen: 16
116.14.0.0/17 maxlen: 17
116.14.64.0/21 maxlen: 21
116.14.128.0/17 maxlen: 17
116.15.0.0/16 maxlen: 16
116.15.40.0/21 maxlen: 21
116.15.96.0/22 maxlen: 22
116.15.108.0/23 maxlen: 23
116.15.112.0/21 maxlen: 21
116.15.136.0/22 maxlen: 22
118.200.0.0/16 maxlen: 24
118.201.0.0/17 maxlen: 24
118.201.128.0/18 maxlen: 24
118.201.192.0/18 maxlen: 18
118.201.192.0/19 maxlen: 24
118.201.224.0/19 maxlen: 24
119.73.128.0/17 maxlen: 17
119.73.130.0/24 maxlen: 24
119.73.145.0/24 maxlen: 24
119.73.148.0/24 maxlen: 24
119.73.162.0/24 maxlen: 24
119.73.191.0/24 maxlen: 24
119.73.197.0/24 maxlen: 24
119.73.201.0/24 maxlen: 24
119.73.226.0/24 maxlen: 24
119.73.242.0/24 maxlen: 24
119.73.246.0/24 maxlen: 24
119.73.251.0/24 maxlen: 24
119.73.253.0/24 maxlen: 24
119.74.0.0/16 maxlen: 16
119.74.16.0/22 maxlen: 22
119.74.74.0/23 maxlen: 23
119.75.0.0/18 maxlen: 18
119.75.19.0/24 maxlen: 24
119.75.33.0/24 maxlen: 24
119.75.36.0/24 maxlen: 24
119.75.41.0/24 maxlen: 24
119.75.48.0/24 maxlen: 24
119.75.53.0/24 maxlen: 24
119.75.57.0/24 maxlen: 24
121.6.0.0/16 maxlen: 24
121.7.0.0/16 maxlen: 24
124.66.128.0/19 maxlen: 19
124.66.133.0/24 maxlen: 24
124.66.150.0/24 maxlen: 24
124.66.156.0/24 maxlen: 24
124.66.157.0/24 maxlen: 24
124.66.158.0/24 maxlen: 24
124.66.159.0/24 maxlen: 24
180.255.0.0/18 maxlen: 24
180.255.64.0/18 maxlen: 18
203.125.0.0/16 maxlen: 24
203.126.0.0/16 maxlen: 24
203.127.0.0/16 maxlen: 24
203.169.64.0/18 maxlen: 18
219.74.0.0/16 maxlen: 24
219.75.0.0/17 maxlen: 17
219.75.24.0/24 maxlen: 24
219.75.32.0/24 maxlen: 24
219.75.94.0/23 maxlen: 23
220.255.0.0/22 maxlen: 22
220.255.0.0/24 maxlen: 24
220.255.1.0/24 maxlen: 24
220.255.2.0/24 maxlen: 24
220.255.3.0/24 maxlen: 24
220.255.4.0/22 maxlen: 22
220.255.4.0/24 maxlen: 24
220.255.5.0/24 maxlen: 24
220.255.6.0/24 maxlen: 24
220.255.7.0/24 maxlen: 24
220.255.8.0/21 maxlen: 21
220.255.11.0/24 maxlen: 24
220.255.12.0/24 maxlen: 24
220.255.13.0/24 maxlen: 24
220.255.14.0/24 maxlen: 24
220.255.15.0/24 maxlen: 24
220.255.16.0/20 maxlen: 20
220.255.32.0/19 maxlen: 19
220.255.64.0/18 maxlen: 18
220.255.128.0/17 maxlen: 17
220.255.175.0/24 maxlen: 24
220.255.206.0/23 maxlen: 23
220.255.221.0/24 maxlen: 24
2001:c20::/32 maxlen: 32
2001:c20::/38 maxlen: 38
2001:c20:10::/48 maxlen: 48
2001:c20:18::/48 maxlen: 48
2001:c20:400::/38 maxlen: 38
2001:c20:401::/48 maxlen: 48
2001:c20:403::/48 maxlen: 48
2001:c20:801::/48 maxlen: 48
2001:c20:2006::/48 maxlen: 48
2001:c20:2007::/48 maxlen: 48
2001:c20:2010::/48 maxlen: 48
2001:c20:3001::/48 maxlen: 48
2001:c20:3c00::/38 maxlen: 38
2001:c20:4800::/38 maxlen: 38
2001:c20:4805::/48 maxlen: 48
2001:c20:48ba::/48 maxlen: 48
2001:c20:48da::/48 maxlen: 48
2001:c20:48fe::/48 maxlen: 48
2001:c20:4c00::/38 maxlen: 38
2001:c20:5000::/38 maxlen: 38
2001:c20:5008::/48 maxlen: 48
2001:c20:6c00::/38 maxlen: 38
2001:c20:7009::/48 maxlen: 48
2001:c20:7800::/38 maxlen: 38
2001:c20:7804::/48 maxlen: 48
2001:c20:7806::/48 maxlen: 48
2001:c20:7807::/48 maxlen: 48
2001:c20:8400::/38 maxlen: 38
2001:c20:8405::/48 maxlen: 48
2001:c20:8406::/48 maxlen: 48
2001:c20:8407::/48 maxlen: 48
2001:c20:8408::/48 maxlen: 48
2001:c20:8409::/48 maxlen: 48
2001:c20:a005::/48 maxlen: 48
2001:c20:b005::/48 maxlen: 48
2001:c20:c814::/48 maxlen: 48
2001:c20:d004::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13626 (0x353a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Validity
Not Before: Apr 11 05:21:02 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=6617733e-a7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:a9:0f:4c:90:75:f7:c6:bb:00:49:d4:14:
11:86:5c:09:14:88:47:d4:b9:fd:a0:3b:79:af:ce:
90:17:fb:05:a2:8b:d9:51:64:e5:49:cf:0b:21:5d:
3e:09:cb:2d:5b:77:03:61:16:6f:50:19:0a:97:51:
8b:91:9d:c0:6f:1d:0e:da:23:ea:3b:d9:a3:6e:cf:
35:6f:51:14:ac:74:6c:d4:3c:2b:0c:ae:a4:35:96:
78:75:27:1b:dc:2b:29:a6:53:5f:90:e9:ab:ab:ee:
49:9b:e7:6a:3a:5a:7d:7b:df:92:c6:7b:29:95:23:
aa:db:89:d2:ed:03:2e:67:a7:1d:72:ee:2e:26:f0:
d2:e6:0c:c2:4a:ea:41:f1:f4:52:fe:5d:2b:26:7f:
ca:4d:f5:b8:ec:05:17:e2:66:fd:97:e9:9f:4a:42:
d8:d1:99:80:64:cf:31:19:e5:9d:a4:7a:5c:9e:07:
08:22:97:9f:ca:a4:b3:2e:9f:e1:fa:c2:ea:c8:f6:
29:f6:f2:7b:f7:8c:41:d4:cd:5d:05:c6:b0:5e:16:
d5:ab:5c:18:f7:ba:1f:1b:76:97:9c:41:12:4c:54:
91:1b:d1:d5:e6:36:b2:1f:94:c3:52:f9:0e:11:bd:
c3:17:d9:e7:fd:38:bf:25:cd:da:eb:40:d1:5b:bd:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F9:40:BF:92:6F:25:1A:4D:18:1F:AE:0F:35:CC:FC:57:1A:F7:C4
X509v3 Authority Key Identifier:
keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/4990571EF7C311EE84D13C30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.100.0.0/17
42.60.0.0/15
58.185.0.0/16
101.78.64.0/18
115.42.128.0/17
115.66.0.0/16
116.12.128.0/17
116.14.0.0/15
118.200.0.0/15
119.73.128.0-119.75.63.255
121.6.0.0/15
124.66.128.0/19
180.255.0.0/17
203.125.0.0-203.127.255.255
203.169.64.0/18
219.74.0.0-219.75.127.255
220.255.0.0/16
IPv6:
2001:c20::/32
Signature Algorithm: sha256WithRSAEncryption
97:94:d7:48:2c:8f:f6:de:f7:ee:04:b4:34:ac:1c:b8:b8:58:
fa:8f:cf:50:2a:4d:aa:fb:71:33:cb:6e:3a:f8:b9:72:f1:af:
c5:73:d4:de:1b:07:84:ae:95:f9:13:bb:37:7e:9e:ea:22:07:
8f:9d:de:7a:fc:22:15:64:8e:09:86:d2:14:85:ab:29:26:99:
3a:8f:01:8d:1e:df:80:d4:58:82:cd:14:d7:ee:b2:3f:30:7b:
b8:d4:9c:df:2f:60:0b:c5:b1:ba:d8:6e:df:65:06:b7:8b:74:
57:9e:c3:d0:31:ff:dc:79:68:07:63:3a:a4:5c:57:f5:f9:a5:
a7:5b:d0:ca:d5:1c:52:29:a7:f1:49:e0:16:c5:dc:c4:40:38:
3f:e9:71:1e:e5:cf:9f:cd:7e:ed:90:eb:f5:9a:d9:bf:f3:c0:
7a:e4:85:b6:af:81:86:57:d3:aa:14:ef:ed:55:da:de:70:b1:
57:e9:55:16:d3:82:23:cb:4c:1d:0a:8d:19:06:85:3b:14:23:
fe:a4:5b:b2:a0:f3:67:37:1e:67:7d:ae:85:8f:bb:b8:12:03:
b5:98:13:b6:da:ef:1d:09:58:ab:62:28:dc:97:52:79:5a:e0:
ec:be:18:05:2a:66:5a:37:c6:59:cd:b0:05:b3:84:4d:a8:d0:
81:1c:d6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:10:31 2025 by rpki-client