This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/DD302F76CE8211EF8899762EC4F9AE02.roa File: DD302F76CE8211EF8899762EC4F9AE02.roa (raw, json) Hash identifier: /KBd/NP5lQx0Y2vfKuE7WHLPv5BlixhsEqY+o2sENkE= Subject key identifier: 6C:38:13:55:D2:43:F9:B5:7A:6A:C7:61:39:3B:12:2F:F4:12:A4:87 Certificate issuer: /CN=A91B569E/serialNumber=DCB839319FD52EAD9FCB97782984FD1FD4492C17 Certificate serial: 01B0 Authority key identifier: DC:B8:39:31:9F:D5:2E:AD:9F:CB:97:78:29:84:FD:1F:D4:49:2C:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/DD302F76CE8211EF8899762EC4F9AE02.roa Signing time: Thu 09 Jan 2025 12:11:32 +0000 ROA not before: Thu 09 Jan 2025 12:11:32 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 138346 IP address blocks: 103.19.122.0/24 maxlen: 24 103.19.123.0/24 maxlen: 24 Validation: Failed, certificate revoked on Thu 09 Jan 2025 14:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B569E, serialNumber=DCB839319FD52EAD9FCB97782984FD1FD4492C17 Validity Not Before: Jan 9 12:11:32 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=677fbcf4-af7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:83:67:e8:af:a0:10:bc:bf:ee:21:29:1c:d5: d4:0b:2c:53:3f:21:10:fc:d5:82:48:a0:50:41:18: 5c:a1:eb:8d:97:e6:78:b4:c8:97:89:91:33:52:5d: b1:72:33:92:51:69:d2:72:ee:46:84:a6:9b:bb:ed: 21:c0:b0:be:19:49:18:7f:e7:45:f2:df:e8:7c:65: 89:15:4c:2f:0c:01:ae:c7:37:16:b4:f4:aa:d4:2f: ed:41:88:45:83:17:a6:e4:f4:c0:b1:a0:c1:37:86: 0c:d1:4e:df:a2:12:20:a3:b4:41:21:91:52:bc:d5: a6:9b:00:62:07:73:6e:8a:33:fc:2d:20:26:a0:39: 54:f3:42:93:c4:bc:8e:79:08:12:b5:f8:c3:35:37: 57:4e:d5:c4:6d:98:59:33:29:49:59:74:ec:b7:d8: f6:24:1e:52:0a:46:98:d6:b6:ee:fe:c0:83:cd:fa: bc:ef:9f:56:39:31:72:ad:61:ff:a5:47:6a:c4:ac: 28:6f:2d:98:5f:bc:e0:ff:80:e2:87:a6:b9:5a:03: 39:3d:72:fa:7b:57:f6:f3:ce:a1:c1:de:a5:eb:37: 87:a0:60:c8:2a:e5:d9:e6:7f:3a:52:67:f9:76:9b: 87:65:2d:0a:49:7d:7c:1f:66:55:06:d0:93:02:19: 01:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:38:13:55:D2:43:F9:B5:7A:6A:C7:61:39:3B:12:2F:F4:12:A4:87 X509v3 Authority Key Identifier: keyid:DC:B8:39:31:9F:D5:2E:AD:9F:CB:97:78:29:84:FD:1F:D4:49:2C:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/DD302F76CE8211EF8899762EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.19.122.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:bd:ba:5d:da:fd:91:c0:37:36:57:89:3b:de:ba:e4:bd:a8: 77:74:b8:71:2a:84:b6:8f:9f:8e:f2:3a:02:7a:5c:5c:fe:28: 5b:dc:0b:db:7f:4b:b3:ed:c9:d0:dd:33:cc:21:8e:39:6d:3c: 03:10:c0:71:dd:ab:64:56:86:c0:61:62:0f:30:cb:07:4d:69: 79:34:b7:f8:83:a0:6f:b2:f9:73:e7:47:b7:36:6d:23:1c:74: e0:bc:ef:97:5e:ed:e9:3b:e0:8a:70:b5:38:bb:6c:6e:25:c6: a8:e1:f4:7e:0c:55:07:58:25:a6:db:93:dd:89:b5:c6:36:3e: 85:27:bc:68:3a:d5:38:ea:0f:96:02:11:d6:6b:7c:62:61:d0: 47:a5:59:bb:07:9e:a8:bf:f7:c9:fd:ff:0c:ed:94:ce:75:22: 9b:2f:be:1b:4e:7c:71:a5:5c:be:3c:51:6c:1e:4a:d0:fa:be: 50:94:60:7d:43:48:3e:83:3c:be:9b:b6:11:b2:c8:79:4e:49: 97:a2:97:1c:44:2a:ef:96:a0:a7:94:f4:ae:96:de:d1:e2:2a: 02:8b:d0:71:98:d0:ad:0d:55:10:bb:be:07:1c:62:ee:76:4a: 29:a4:ec:d2:39:f7:65:d7:ab:e7:7f:63:5a:21:67:04:b2:70: 7f:59:da:cb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2OUUxMTAvBgNVBAUTKERDQjgzOTMxOUZENTJFQUQ5RkNCOTc3ODI5ODRGRDFG RDQ0OTJDMTcwHhcNMjUwMTA5MTIxMTMyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdmYmNmNC1hZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApINn6K+gELy/7iEpHNXUCyxTPyEQ/NWCSKBQQRhcoeuNl+Z4tMiXiZEzUl2x cjOSUWnScu5GhKabu+0hwLC+GUkYf+dF8t/ofGWJFUwvDAGuxzcWtPSq1C/tQYhF gxem5PTAsaDBN4YM0U7fohIgo7RBIZFSvNWmmwBiB3NuijP8LSAmoDlU80KTxLyO eQgStfjDNTdXTtXEbZhZMylJWXTst9j2JB5SCkaY1rbu/sCDzfq8759WOTFyrWH/ pUdqxKwoby2YX7zg/4Dih6a5WgM5PXL6e1f2886hwd6l6zeHoGDIKuXZ5n86Umf5 dpuHZS0KSX18H2ZVBtCTAhkBnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGw4E1XS Q/m1emrHYTk7Ei/0EqSHMB8GA1UdIwQYMBaAFNy4OTGf1S6tn8uXeCmE/R/USSwX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTY5RS8yNTI1QzdDODRE MjUxMUVEQTZEREQyMkVDNEY5QUUwMi8zTGc1TVpfVkxxMmZ5NWQ0S1lUOUg5UkpM QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNMZzVNWl9WTHEyZnk1ZDRLWVQ5SDlSSkxCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjU2OUUvMjUyNUM3Qzg0RDI1MTFFREE2REREMjJFQzRGOUFFMDIvREQzMDJGNzZD RTgyMTFFRjg4OTk3NjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnE3owDQYJKoZIhvcNAQELBQADggEBAG69ul3a/ZHANzZX iTveuuS9qHd0uHEqhLaPn47yOgJ6XFz+KFvcC9t/S7PtydDdM8whjjltPAMQwHHd q2RWhsBhYg8wywdNaXk0t/iDoG+y+XPnR7c2bSMcdOC875de7ek74IpwtTi7bG4l xqjh9H4MVQdYJabbk92JtcY2PoUnvGg61TjqD5YCEdZrfGJh0EelWbsHnqi/98n9 /wztlM51IpsvvhtOfHGlXL48UWweStD6vlCUYH1DSD6DPL6bthGyyHlOSZeilxxE Ku+WoKeU9K6W3tHiKgKL0HGY0K0NVRC7vgccYu52Simk7NI592XXq+d/Y1ohZwSy cH9Z2ss= -----END CERTIFICATE-----Generated at Thu Dec 18 12:45:45 2025 by rpki-client