This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/FBCF366C2CD711F08AC4A312C4F9AE02.roa
File: FBCF366C2CD711F08AC4A312C4F9AE02.roa (raw, json)
Hash identifier: CBfjRya9PXjtQ7qYGhfC0wcBmyC0lwxAV7a0wObFWmk=
Subject key identifier: 7D:4F:E2:90:D5:60:83:6E:50:2A:3D:9B:B4:23:08:C0:CC:42:00:F9
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 37EE
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/FBCF366C2CD711F08AC4A312C4F9AE02.roa
Signing time: Fri 09 May 2025 15:18:09 +0000
ROA not before: Fri 09 May 2025 15:18:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38710
IP address blocks: 111.88.96.0/19 maxlen: 19
111.88.184.0/22 maxlen: 23
111.88.188.0/22 maxlen: 23
111.88.233.0/24 maxlen: 24
111.88.238.0/24 maxlen: 24
111.88.239.0/24 maxlen: 24
115.186.10.0/23 maxlen: 23
115.186.12.0/23 maxlen: 23
115.186.14.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.17.0/24 maxlen: 24
115.186.18.0/24 maxlen: 24
115.186.21.0/24 maxlen: 24
115.186.23.0/24 maxlen: 24
115.186.24.0/23 maxlen: 23
115.186.25.0/24 maxlen: 24
115.186.30.0/23 maxlen: 24
115.186.32.0/20 maxlen: 22
115.186.32.0/24 maxlen: 24
115.186.33.0/24 maxlen: 24
115.186.34.0/24 maxlen: 24
115.186.35.0/24 maxlen: 24
115.186.36.0/22 maxlen: 23
115.186.36.0/23 maxlen: 24
115.186.40.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/24 maxlen: 24
115.186.45.0/24 maxlen: 24
115.186.46.0/24 maxlen: 24
115.186.47.0/24 maxlen: 24
115.186.56.0/21 maxlen: 23
115.186.56.0/22 maxlen: 24
115.186.60.0/23 maxlen: 24
115.186.63.0/24 maxlen: 24
115.186.64.0/19 maxlen: 23
115.186.76.0/22 maxlen: 24
115.186.80.0/21 maxlen: 24
115.186.90.0/24 maxlen: 24
115.186.96.0/20 maxlen: 23
115.186.96.0/22 maxlen: 24
115.186.101.0/24 maxlen: 24
115.186.102.0/23 maxlen: 24
115.186.104.0/24 maxlen: 24
115.186.106.0/23 maxlen: 24
115.186.108.0/22 maxlen: 24
115.186.112.0/20 maxlen: 23
115.186.112.0/23 maxlen: 24
115.186.115.0/24 maxlen: 24
115.186.117.0/24 maxlen: 24
115.186.118.0/23 maxlen: 24
115.186.120.0/23 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.126.0/24 maxlen: 24
117.102.0.0/21 maxlen: 21
117.102.0.0/22 maxlen: 22
117.102.0.0/23 maxlen: 24
117.102.2.0/24 maxlen: 24
117.102.3.0/24 maxlen: 24
117.102.4.0/24 maxlen: 24
117.102.5.0/24 maxlen: 24
117.102.6.0/24 maxlen: 24
117.102.7.0/24 maxlen: 24
117.102.8.0/24 maxlen: 24
117.102.9.0/24 maxlen: 24
117.102.12.0/23 maxlen: 23
117.102.12.0/24 maxlen: 24
117.102.14.0/23 maxlen: 23
117.102.16.0/24 maxlen: 24
117.102.17.0/24 maxlen: 24
117.102.18.0/23 maxlen: 24
117.102.20.0/22 maxlen: 23
117.102.24.0/22 maxlen: 22
117.102.24.0/23 maxlen: 24
117.102.26.0/24 maxlen: 24
117.102.28.0/24 maxlen: 24
117.102.32.0/24 maxlen: 24
117.102.33.0/24 maxlen: 24
117.102.34.0/24 maxlen: 24
117.102.35.0/24 maxlen: 24
117.102.36.0/24 maxlen: 24
117.102.37.0/24 maxlen: 24
117.102.38.0/24 maxlen: 24
117.102.39.0/24 maxlen: 24
117.102.40.0/24 maxlen: 24
117.102.41.0/24 maxlen: 24
117.102.42.0/24 maxlen: 24
117.102.43.0/24 maxlen: 24
117.102.44.0/24 maxlen: 24
117.102.45.0/24 maxlen: 24
117.102.46.0/24 maxlen: 24
117.102.47.0/24 maxlen: 24
2406:7000::/32 maxlen: 32
2406:7000::/48 maxlen: 48
2406:7000:1::/48 maxlen: 48
2406:7000:2::/48 maxlen: 48
2406:7000:3::/48 maxlen: 48
2406:7000:4::/48 maxlen: 48
2406:7000:5::/48 maxlen: 48
2406:7000:6::/48 maxlen: 48
2406:7000:7::/48 maxlen: 48
2406:7000:8::/48 maxlen: 48
2406:7000:9::/48 maxlen: 48
2406:7000:a::/48 maxlen: 48
2406:7000:b::/48 maxlen: 48
2406:7000:c::/48 maxlen: 48
2406:7000:d::/48 maxlen: 48
2406:7000:e::/48 maxlen: 48
2406:7000:f::/48 maxlen: 48
2406:7000:10::/48 maxlen: 48
2406:7000:11::/48 maxlen: 48
2406:7000:12::/48 maxlen: 48
2406:7000:13::/48 maxlen: 48
2406:7000:14::/48 maxlen: 48
2406:7000:15::/48 maxlen: 48
2406:7000:16::/48 maxlen: 48
2406:7000:17::/48 maxlen: 48
2406:7000:18::/48 maxlen: 48
2406:7000:19::/48 maxlen: 48
2406:7000:1a::/48 maxlen: 48
2406:7000:1b::/48 maxlen: 48
2406:7000:1c::/48 maxlen: 48
2406:7000:1d::/48 maxlen: 48
2406:7000:1e::/48 maxlen: 48
2406:7000:1f::/48 maxlen: 48
2406:7000:20::/48 maxlen: 48
2406:7000:21::/48 maxlen: 48
2406:7000:22::/48 maxlen: 48
2406:7000:23::/48 maxlen: 48
2406:7000:24::/48 maxlen: 48
2406:7000:25::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 May 2025 08:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14318 (0x37ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: May 9 15:18:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681e1cb0-c210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:3c:ed:64:70:78:0e:5b:4c:f2:f5:2b:e2:
5b:b9:45:ee:01:f3:31:8b:a4:cc:86:40:cb:cc:46:
4d:a9:48:99:d7:96:3e:53:15:90:87:ab:6b:a0:c4:
7c:e0:0f:2d:36:5c:0e:63:85:d8:0f:e1:b2:9c:1b:
18:c2:39:fd:a1:e0:3f:4b:c9:65:f0:26:90:65:2e:
72:01:2b:62:02:18:99:a3:8c:cc:9c:e7:27:79:10:
50:99:43:9f:c9:5b:98:8e:01:d1:74:2c:91:00:46:
11:0c:28:1d:73:75:76:78:fd:4b:ec:d2:71:0f:f3:
20:2c:67:f6:84:fa:17:5c:bc:db:27:e2:78:f1:ea:
4b:62:93:97:18:cb:30:9f:27:a6:0f:0a:f2:85:54:
a0:23:45:f6:03:bd:08:f7:63:87:51:f0:4b:37:e7:
f7:60:7d:03:a8:95:15:73:bf:83:dc:e9:63:4f:a9:
84:fe:0d:d8:82:6f:b4:fb:cf:76:a3:87:e7:3d:b4:
7d:52:e4:4b:54:6b:74:6b:f1:93:a2:ba:3d:e6:06:
83:cc:ca:f8:b0:7f:ff:46:da:d9:e9:dd:71:c1:95:
b2:10:2c:8e:9c:b1:76:1c:7c:6b:81:48:1e:71:66:
8b:67:59:53:4c:6b:d1:29:72:6a:8d:ab:ef:2b:69:
7b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4F:E2:90:D5:60:83:6E:50:2A:3D:9B:B4:23:08:C0:CC:42:00:F9
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/FBCF366C2CD711F08AC4A312C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.96.0/19
111.88.184.0/21
111.88.233.0/24
111.88.238.0/23
115.186.10.0-115.186.14.255
115.186.16.0-115.186.18.255
115.186.21.0/24
115.186.23.0-115.186.25.255
115.186.30.0-115.186.47.255
115.186.56.0-115.186.127.255
117.102.0.0-117.102.9.255
117.102.12.0-117.102.28.255
117.102.32.0/20
IPv6:
2406:7000::/32
Signature Algorithm: sha256WithRSAEncryption
29:23:a9:23:9c:90:2c:4e:ec:c4:2c:9c:3d:ed:94:56:90:a5:
ff:7d:b5:39:41:02:3a:01:72:47:12:ec:cd:6a:38:3f:7a:0a:
2e:e9:bc:5d:1a:45:1d:b4:8c:2c:01:d2:2d:80:57:01:64:70:
14:11:dd:e5:77:1a:56:36:7b:c6:99:ef:1e:01:2f:2f:83:b0:
86:a3:00:aa:61:34:4e:02:02:fe:f8:58:b8:ac:8f:d3:04:99:
d0:b1:b1:37:08:fa:19:ef:d5:91:3f:73:4a:b9:c0:d6:b9:e9:
c4:82:0c:fc:27:99:31:bb:33:1b:36:4f:86:62:ec:ae:0d:ec:
40:60:e4:85:4f:93:66:2c:46:04:d7:e9:78:3c:1e:e1:fd:0c:
56:48:9f:61:98:c2:ba:9c:ba:d5:06:21:73:e9:39:f0:19:f2:
01:67:7d:e7:56:6f:07:2d:a7:64:54:7d:0a:37:58:4a:96:2e:
2b:53:24:f9:b4:d5:77:25:2a:22:21:01:c2:de:6f:20:69:dd:
3e:6f:af:ae:df:9c:36:8f:a7:4e:e3:83:bb:fd:fd:7a:43:06:
83:03:1b:02:6e:69:87:e7:14:f4:e0:ab:a5:1b:79:60:68:52:
1c:b9:5b:eb:a7:d6:07:12:91:3f:86:8a:2a:5d:d6:14:5b:d5:
e1:b9:1f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 05:42:50 2025 by rpki-client