This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/B2F017A26BE311ED8B83B484C4F9AE02.roa File: B2F017A26BE311ED8B83B484C4F9AE02.roa (raw, json) Hash identifier: eEPdVRPjMFChXAnZ+AFBDP2qN9nX/mupKkDoS8rA9tY= Subject key identifier: 75:BB:CE:A4:14:68:68:33:1A:E2:EB:A0:77:D0:C8:59:1D:99:AF:A8 Certificate issuer: /CN=A911251C/serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B Certificate serial: 0244 Authority key identifier: 97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/B2F017A26BE311ED8B83B484C4F9AE02.roa Signing time: Fri 19 Dec 2025 01:21:02 +0000 ROA not before: Fri 19 Dec 2025 01:21:02 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 150441 IP address blocks: 103.42.52.0/23 maxlen: 23 103.42.52.0/24 maxlen: 24 103.42.53.0/24 maxlen: 24 2001:df1:8fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911251C, serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B Validity Not Before: Dec 19 01:21:02 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6944a87e-2230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f5:ca:0f:b0:c6:a5:de:c6:8c:36:ea:92:4e: 38:0e:e6:c2:9d:0f:53:42:4b:34:a1:fd:0e:7b:37: 78:bd:ea:f0:53:f5:80:8d:f4:d9:00:4b:40:cc:9c: df:fe:d7:7b:3e:41:2c:62:b0:2c:d7:f0:3d:6d:7e: d9:d4:ce:b6:11:55:a7:76:6c:76:28:9a:9b:df:90: e8:a9:e9:82:40:97:28:83:60:25:f8:7d:c0:c1:11: 56:71:d4:e6:fc:a0:f3:7a:57:22:5e:59:de:2a:e4: 78:35:03:e4:63:4c:19:53:c4:d3:79:ef:99:be:a9: f6:0e:c5:8e:3e:cd:72:05:ee:37:cd:26:fd:d7:1a: 4c:88:30:ae:3f:e7:3b:11:a1:87:ce:36:c8:8d:4a: 26:11:20:ae:a3:7f:9c:c2:f2:47:d0:4f:b9:2d:60: d5:b8:e7:cc:30:34:d0:b5:cc:ce:28:7f:ff:00:d6: 42:4b:65:28:c2:b2:d9:20:a6:18:88:ce:a7:71:41: 57:d4:b9:49:e8:21:c1:73:40:ce:37:3f:5e:11:e8: 8f:d7:9a:30:37:96:33:45:2e:b7:81:5d:e6:32:76: 2d:cd:61:5e:fd:62:73:d5:11:4a:bd:05:47:fc:50: 40:09:19:fb:8e:cc:dc:33:19:40:74:79:56:2c:44: 12:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BB:CE:A4:14:68:68:33:1A:E2:EB:A0:77:D0:C8:59:1D:99:AF:A8 X509v3 Authority Key Identifier: keyid:97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/B2F017A26BE311ED8B83B484C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.52.0/23 IPv6: 2001:df1:8fc0::/48 Signature Algorithm: sha256WithRSAEncryption 24:fb:39:1a:fa:96:a6:17:6c:67:13:cc:d0:fc:8b:7b:6e:1a: 8f:74:7d:1f:1a:1c:18:d9:f0:7f:d7:cf:07:b1:7c:5a:a9:72: eb:4d:78:fe:a3:68:14:d5:20:18:0e:77:9b:15:f2:20:0f:6a: d2:ae:51:00:ad:b6:ef:e5:59:31:3c:7e:8c:48:97:a5:21:dc: 43:25:e9:ee:9d:b1:11:e3:51:29:5a:c8:d4:ff:d7:75:f2:c8: 6e:56:b1:00:77:d8:49:f8:69:9e:fc:53:a5:97:31:aa:56:b5: 3b:f3:b7:e1:7b:ed:c6:a4:b5:ff:ea:2d:1e:03:b6:42:da:d7: 0f:2b:58:2e:da:df:5f:79:ba:0c:cd:57:56:6c:82:c9:94:a9: 16:28:bd:19:fe:bb:ce:c0:a1:78:18:39:14:8d:89:45:e4:ec: 15:a8:e1:88:71:5e:ac:75:97:d8:c8:74:ed:6c:2d:9a:c1:19: 22:5a:4a:db:d9:d5:f6:9c:c3:6a:1e:a8:a9:26:ce:f6:ba:88: 73:a0:e1:16:90:dc:d5:03:f5:f2:84:18:d9:53:9e:91:c6:b2: a9:0d:aa:63:b5:5a:9e:1e:e6:63:ee:7f:7d:b3:cd:e1:28:c8: be:2c:40:93:e6:94:e6:02:ef:c6:a6:ab:d7:1d:73:20:25:39: 94:5f:c2:7a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MTI1MUMxMTAvBgNVBAUTKDk3REE0MTlGM0JBQjNGNjU3QUE1QTVDMDRFMDU3QzRB RDk2MUJDNUIwHhcNMjUxMjE5MDEyMTAyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ0YTg3ZS0yMjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fXKD7DGpd7GjDbqkk44DubCnQ9TQks0of0Oezd4verwU/WAjfTZAEtAzJzf /td7PkEsYrAs1/A9bX7Z1M62EVWndmx2KJqb35DoqemCQJcog2Al+H3AwRFWcdTm /KDzelciXlneKuR4NQPkY0wZU8TTee+Zvqn2DsWOPs1yBe43zSb91xpMiDCuP+c7 EaGHzjbIjUomESCuo3+cwvJH0E+5LWDVuOfMMDTQtczOKH//ANZCS2UowrLZIKYY iM6ncUFX1LlJ6CHBc0DONz9eEeiP15owN5YzRS63gV3mMnYtzWFe/WJz1RFKvQVH /FBACRn7jszcMxlAdHlWLEQSqwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHW7zqQU aGgzGuLroHfQyFkdma+oMB8GA1UdIwQYMBaAFJfaQZ87qz9leqWlwE4FfErZYbxb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjUxQy9GOEY3RTI1MDZC RTAxMUVEOTkxOTZGNjJDNEY5QUUwMi9sOXBCbnp1clAyVjZwYVhBVGdWOFN0bGh2 RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5cEJuenVyUDJWNnBhWEFUZ1Y4U3RsaHZGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI1MUMvRjhGN0UyNTA2QkUwMTFFRDk5MTk2RjYyQzRGOUFFMDIvQjJGMDE3QTI2 QkUzMTFFRDhCODNCNDg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnKjQwDwQCAAIwCQMHACABDfGPwDANBgkqhkiG9w0BAQsF AAOCAQEAJPs5GvqWphdsZxPM0PyLe24aj3R9HxocGNnwf9fPB7F8Wqly6014/qNo FNUgGA53mxXyIA9q0q5RAK227+VZMTx+jEiXpSHcQyXp7p2xEeNRKVrI1P/XdfLI blaxAHfYSfhpnvxTpZcxqla1O/O34XvtxqS1/+otHgO2QtrXDytYLtrfX3m6DM1X VmyCyZSpFii9Gf67zsCheBg5FI2JReTsFajhiHFerHWX2Mh07WwtmsEZIlpK29nV 9pzDah6oqSbO9rqIc6DhFpDc1QP18oQY2VOekcayqQ2qY7Vanh7mY+5/fbPN4SjI vixAk+aU5gLvxqar1x1zICU5lF/Ceg== -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:13 2025 by rpki-client