This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/35E2088CDEDC11F09573FB8A516F56BC.roa File: 35E2088CDEDC11F09573FB8A516F56BC.roa (raw, json) Hash identifier: zZU7F7ol6ld1ZhTHop8AaPrXn6MuIkjXXsPXgI1Vux0= Subject key identifier: 74:D2:A5:11:33:00:3A:AA:EA:77:A4:BE:CB:54:63:5E:7A:77:F3:54 Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 09E9 Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/35E2088CDEDC11F09573FB8A516F56BC.roa Signing time: Mon 22 Dec 2025 02:16:23 +0000 ROA not before: Mon 22 Dec 2025 02:16:23 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 142002 IP address blocks: 103.43.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 19:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2537 (0x9e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Validity Not Before: Dec 22 02:16:23 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6948a9f6-43cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:55:40:5a:31:b1:b0:74:98:a0:72:6c:59: 1c:e5:84:64:e7:81:76:cb:50:09:86:56:2b:3b:69: 96:b3:9b:ef:28:52:b8:5a:36:3b:77:6f:5b:8d:1c: ac:68:55:e9:a7:b8:15:b2:8c:51:84:39:7e:e1:83: 0b:c2:f4:79:3b:09:76:14:91:16:1d:02:99:f9:88: 5a:5d:bd:0b:89:d3:84:4a:3c:20:fa:e2:d8:8a:97: 22:ef:76:26:6f:8c:5d:08:14:fa:f0:63:ca:5e:73: e4:6e:1a:1b:f0:df:73:07:be:0e:42:f4:56:cd:d9: 3b:0e:1e:0c:bd:b8:2f:b8:8b:ff:28:e4:f6:d6:76: fb:4e:13:c5:d0:83:f7:74:4f:1b:c8:bd:a7:0c:53: b6:74:74:3e:df:5e:e8:bf:da:cc:a5:cd:a2:62:0a: 4b:98:8b:53:ef:2c:69:f1:6c:2b:de:2b:91:76:b7: 79:0d:5f:2d:a1:7c:7c:20:fe:6b:c3:a5:7b:86:55: 15:27:55:e8:a7:21:96:d3:1e:34:21:c2:27:cf:f4: 62:7b:92:93:b2:0b:e7:c3:e6:13:f4:00:b2:6a:52: 5b:c7:1a:8d:de:e4:55:ef:36:28:97:78:f6:2b:11: 62:2f:cd:42:02:50:13:72:bc:52:8c:7d:f1:8f:91: ae:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D2:A5:11:33:00:3A:AA:EA:77:A4:BE:CB:54:63:5E:7A:77:F3:54 X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/35E2088CDEDC11F09573FB8A516F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.43.87.0/24 Signature Algorithm: sha256WithRSAEncryption 51:7f:c4:3e:2c:f2:58:0a:1c:27:d5:22:31:fb:66:01:e0:d9: 71:2a:50:61:3f:80:00:9d:4a:2c:71:49:fa:fc:1f:39:ef:ca: 86:40:da:a2:07:c7:f1:80:67:9a:4f:50:c1:77:eb:30:da:38: 53:96:5c:33:2d:85:0b:e7:5f:fb:9c:b2:d9:43:4e:0a:cb:10: 4f:da:68:8a:fa:0b:84:34:be:3f:02:92:dc:b5:a8:e5:46:1a: 6c:45:48:77:72:e1:c2:f5:a1:08:f1:b6:8f:56:3d:16:b3:be: 65:fd:04:91:0e:06:1f:69:27:dc:5c:0f:04:1f:3d:1d:12:d2: 71:55:1d:83:a9:9a:79:99:bb:c9:87:40:0f:94:d3:5a:68:4a: 8a:3a:52:72:0d:5e:45:61:8a:fd:27:e8:51:19:a5:fa:62:82: e4:6a:7b:fe:21:a3:12:bc:a9:56:7c:b8:75:e6:ff:36:c2:b5: dc:1e:3b:a1:81:27:95:18:76:f8:5d:97:83:48:05:b8:8a:56: 3d:17:26:39:f7:e2:87:1c:78:96:cc:b2:5a:07:f3:67:25:f5: 28:17:ea:4d:91:4d:c0:63:82:c0:13:87:80:db:6b:57:b6:be: 03:1c:43:fb:25:b4:3d:e6:32:bb:ba:13:e9:88:a8:7a:66:57: 5a:49:25:77 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjUxMjIyMDIxNjIzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ4YTlmNi00M2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssxVQFoxsbB0mKBybFkc5YRk54F2y1AJhlYrO2mWs5vvKFK4WjY7d29bjRys aFXpp7gVsoxRhDl+4YMLwvR5Owl2FJEWHQKZ+YhaXb0LidOESjwg+uLYipci73Ym b4xdCBT68GPKXnPkbhob8N9zB74OQvRWzdk7Dh4MvbgvuIv/KOT21nb7ThPF0IP3 dE8byL2nDFO2dHQ+317ov9rMpc2iYgpLmItT7yxp8Wwr3iuRdrd5DV8toXx8IP5r w6V7hlUVJ1XopyGW0x40IcInz/Rie5KTsgvnw+YT9ACyalJbxxqN3uRV7zYol3j2 KxFiL81CAlATcrxSjH3xj5GuaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHTSpREz ADqq6nekvstUY156d/NUMB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU1MDkvNzlFQTU5MUVBN0JEMTFFQUFBQTYyOTQ4QzRGOUFFMDIvMzVFMjA4OENE RURDMTFGMDk1NzNGQjhBNTE2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnK1cwDQYJKoZIhvcNAQELBQADggEBAFF/xD4s8lgKHCfV IjH7ZgHg2XEqUGE/gACdSixxSfr8HznvyoZA2qIHx/GAZ5pPUMF36zDaOFOWXDMt hQvnX/ucstlDTgrLEE/aaIr6C4Q0vj8Ckty1qOVGGmxFSHdy4cL1oQjxto9WPRaz vmX9BJEOBh9pJ9xcDwQfPR0S0nFVHYOpmnmZu8mHQA+U01poSoo6UnINXkVhiv0n 6FEZpfpiguRqe/4hoxK8qVZ8uHXm/zbCtdweO6GBJ5UYdvhdl4NIBbiKVj0XJjn3 4occeJbMsloH82cl9SgX6k2RTcBjgsATh4Dba1e2vgMcQ/sltD3mMru6E+mIqHpm V1pJJXc= -----END CERTIFICATE-----Generated at Tue Dec 30 16:00:02 2025 by rpki-client