This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/8E7B872C2FED11ECB35A414FC4F9AE02.roa File: 8E7B872C2FED11ECB35A414FC4F9AE02.roa (raw, json) Hash identifier: 3w7WLrN8ZjurSLywvp2YxFVq3P1KxRU8csCuLlSoC6I= Subject key identifier: 0D:31:FC:5D:53:E6:DD:3D:0B:75:A2:AB:B5:FE:28:0F:99:8C:43:A4 Certificate issuer: /CN=A91ED17F/serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D Certificate serial: 082C Authority key identifier: 17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/8E7B872C2FED11ECB35A414FC4F9AE02.roa Signing time: Thu 27 Nov 2025 12:09:27 +0000 ROA not before: Thu 27 Nov 2025 12:09:27 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 58800 IP address blocks: 103.245.108.0/22 maxlen: 22 103.245.108.0/24 maxlen: 24 103.245.109.0/24 maxlen: 24 103.245.110.0/24 maxlen: 24 103.245.111.0/24 maxlen: 24 150.107.52.0/22 maxlen: 24 2406:b00::/32 maxlen: 32 2406:b00::/40 maxlen: 48 Validation: Failed, certificate revoked on Sun 30 Nov 2025 06:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2092 (0x82c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED17F, serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D Validity Not Before: Nov 27 12:09:27 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=69283f77-9660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2e:8c:f5:86:2d:41:9f:89:8d:3e:a5:2c:0c: 80:92:72:8e:9f:47:bc:2a:ba:a8:59:1c:c5:eb:75: 45:e9:e6:bb:ac:50:9f:05:04:48:20:70:2b:ec:9f: 08:3d:be:55:7f:bc:0d:9f:f4:48:b0:e0:6d:38:b9: 99:54:e8:2c:35:8b:ab:ea:30:75:70:3a:06:9e:f3: 98:a0:79:88:dd:5e:8d:5a:6f:b6:a1:cd:5a:f0:37: d1:c5:75:37:51:ea:06:e0:b2:37:62:53:a5:5b:1f: 65:f9:f3:fd:60:5a:59:6b:25:78:0d:18:e7:91:ab: a0:de:1a:e3:6b:7e:9f:ef:64:cd:56:93:09:77:0c: fc:49:33:1f:37:72:6f:94:2e:b7:8f:b0:8c:6d:88: 5c:33:6d:1c:cb:48:e0:6b:e8:c3:26:8c:fb:76:b9: b5:9b:ae:fa:5e:46:1b:77:5c:f7:50:4c:27:b3:8a: f8:b1:2e:a0:48:ea:9e:3b:4d:47:41:b5:45:23:41: 72:86:a3:01:c6:0a:00:0c:b6:d9:ad:5b:71:e1:dc: 5f:19:35:34:b2:75:04:3e:bc:69:b6:2e:04:e3:c2: 78:cb:46:41:f0:7e:37:72:65:59:5b:8c:5a:39:8f: a9:f8:af:75:a9:f8:a0:12:61:2d:cf:43:22:31:96: 3e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:31:FC:5D:53:E6:DD:3D:0B:75:A2:AB:B5:FE:28:0F:99:8C:43:A4 X509v3 Authority Key Identifier: keyid:17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/8E7B872C2FED11ECB35A414FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.245.108.0/22 150.107.52.0/22 IPv6: 2406:b00::/32 Signature Algorithm: sha256WithRSAEncryption 89:8a:b7:3c:d6:a1:0b:80:1c:af:95:d5:63:75:65:e1:da:92: 24:05:31:4e:1a:63:6f:e2:53:1c:8a:22:3e:b8:b4:66:66:68: 54:41:68:da:e9:b9:3b:f5:a6:5b:19:6b:08:50:b4:2f:87:83: 2d:06:f1:de:e1:01:00:c2:d2:eb:4a:70:a5:d0:98:8f:d1:05: ba:e1:82:1b:ee:f9:0e:ed:0b:9f:7e:e2:df:94:19:25:b7:0f: c8:75:a2:9f:27:04:2c:72:19:6a:35:da:21:0c:3b:7e:11:d5: ec:f7:b7:cf:31:f5:a4:b6:ec:a2:2e:dc:60:47:5d:6b:4f:4e: 5a:bb:9d:ee:0e:5d:35:cd:fc:a6:92:3b:dc:d9:95:5d:91:31: 4a:2a:44:d7:46:f1:11:9a:f6:76:67:76:72:54:3c:8f:ea:b2: ed:a2:2f:f0:d2:8f:f2:d8:69:e5:0a:29:57:ac:e3:5e:fb:c6: f2:36:b3:79:ff:0a:d2:5b:02:9a:15:86:db:b7:02:bb:8b:17: f2:7a:4c:2d:f0:db:e1:e8:db:11:cc:51:70:7d:01:4a:73:a9: 5d:a7:b1:d2:56:47:89:03:67:78:3e:58:97:d3:57:7c:24:6c: db:82:0a:95:33:98:90:df:9a:88:a1:08:52:4f:15:b9:69:94: e0:dc:98:9b -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQxN0YxMTAvBgNVBAUTKDE3RjRGQjEyODc1NkVCQjBCQUM1OUQ0RTBGNEI3RTA4 NzI3OTc2MEQwHhcNMjUxMTI3MTIwOTI3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI4M2Y3Ny05NjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwC6M9YYtQZ+JjT6lLAyAknKOn0e8KrqoWRzF63VF6ea7rFCfBQRIIHAr7J8I Pb5Vf7wNn/RIsOBtOLmZVOgsNYur6jB1cDoGnvOYoHmI3V6NWm+2oc1a8DfRxXU3 UeoG4LI3YlOlWx9l+fP9YFpZayV4DRjnkaug3hrja36f72TNVpMJdwz8STMfN3Jv lC63j7CMbYhcM20cy0jga+jDJoz7drm1m676XkYbd1z3UEwns4r4sS6gSOqeO01H QbVFI0FyhqMBxgoADLbZrVtx4dxfGTU0snUEPrxpti4E48J4y0ZB8H43cmVZW4xa OY+p+K91qfigEmEtz0MiMZY+JQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFA0x/F1T 5t09C3Wiq7X+KA+ZjEOkMB8GA1UdIwQYMBaAFBf0+xKHVuuwusWdTg9LfghyeXYN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDE3Ri9BNTZENUY0MEZC NDcxMUVBQkVGNDdEM0VDNEY5QUUwMi9GX1Q3RW9kVzY3QzZ4WjFPRDB0LUNISjVk ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfVDdFb2RXNjdDNnhaMU9EMHQtQ0hKNWRnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUQxN0YvQTU2RDVGNDBGQjQ3MTFFQUJFRjQ3RDNFQzRGOUFFMDIvOEU3Qjg3MkMy RkVEMTFFQ0IzNUE0MTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJn9WwDBAKWazQwDQQCAAIwBwMFACQGCwAwDQYJKoZIhvcN AQELBQADggEBAImKtzzWoQuAHK+V1WN1ZeHakiQFMU4aY2/iUxyKIj64tGZmaFRB aNrpuTv1plsZawhQtC+Hgy0G8d7hAQDC0utKcKXQmI/RBbrhghvu+Q7tC59+4t+U GSW3D8h1op8nBCxyGWo12iEMO34R1ez3t88x9aS27KIu3GBHXWtPTlq7ne4OXTXN /KaSO9zZlV2RMUoqRNdG8RGa9nZndnJUPI/qsu2iL/DSj/LYaeUKKVes4177xvI2 s3n/CtJbApoVhtu3AruLF/J6TC3w2+Ho2xHMUXB9AUpzqV2nsdJWR4kDZ3g+WJfT V3wkbNuCCpUzmJDfmoihCFJPFblplODcmJs= -----END CERTIFICATE-----Generated at Sun Dec 21 11:09:07 2025 by rpki-client