This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E137AAE4914011EDABD5F778C4F9AE02.roa File: E137AAE4914011EDABD5F778C4F9AE02.roa (raw, json) Hash identifier: o1y6sf6jxnpkhpP9iNHCGVK5mxUEq9Y1c62QeILr98U= Subject key identifier: CC:44:83:EB:63:AB:68:41:F4:7C:66:06:B1:41:49:E5:D2:6F:19:9C Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 0259 Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E137AAE4914011EDABD5F778C4F9AE02.roa Signing time: Sun 07 Dec 2025 00:40:08 +0000 ROA not before: Sun 07 Dec 2025 00:40:08 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139736 IP address blocks: 203.89.200.0/24 maxlen: 24 203.89.214.0/24 maxlen: 24 203.89.228.0/24 maxlen: 24 203.89.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: Dec 7 00:40:08 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6934cce7-b0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:75:91:19:02:5b:0c:6a:cc:89:5c:24:ff:40: 84:77:27:7c:f2:86:3e:c0:33:28:46:ba:a9:89:07: 1d:00:eb:83:ce:89:d0:8c:1c:b9:cb:53:8e:be:ec: 3a:6b:3b:1f:82:6d:d9:de:e2:79:31:28:16:d3:06: 3a:92:41:f6:24:49:cc:dd:40:cc:ce:c9:a6:9b:e2: 7d:f7:01:94:89:2c:2e:74:ed:a4:23:fc:ee:66:3b: 85:aa:7f:c7:cd:44:a5:70:7e:92:c0:cf:0e:26:c3: d2:a8:1b:a0:59:f2:d2:3e:89:90:06:3e:bc:31:db: 1e:d9:d5:b8:cc:2b:80:a0:e7:04:ad:64:17:ce:ea: 9e:e6:61:7b:02:ec:fb:0f:b1:c1:a2:f7:f9:69:27: 81:f4:a4:f7:5c:32:45:de:cd:0f:4f:13:a4:32:e2: f8:8e:36:58:c9:66:d3:6d:5a:2e:ca:85:e7:e7:7d: 11:95:2e:35:47:19:04:97:b2:4b:94:63:59:e4:16: 6f:a3:db:ff:5b:2e:e2:37:e4:a6:fb:25:82:ea:cc: 85:bc:f6:d2:86:37:07:9a:f9:83:d5:9f:40:d7:68: f9:92:49:ed:b7:6d:8b:00:b9:2b:20:1b:5d:b9:03: 66:d5:3b:c5:f1:5a:d1:03:76:da:e1:f1:4c:6a:b2: 09:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:44:83:EB:63:AB:68:41:F4:7C:66:06:B1:41:49:E5:D2:6F:19:9C X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E137AAE4914011EDABD5F778C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.89.200.0/24 203.89.214.0/24 203.89.228.0/24 203.89.231.0/24 Signature Algorithm: sha256WithRSAEncryption 37:cd:7c:b8:f7:cb:33:d7:ca:39:21:13:f8:ed:24:c2:76:b1: 2b:43:63:94:0d:a1:73:8b:37:6a:99:b7:ea:25:a4:23:d8:f8: 4b:db:06:d1:4e:56:8a:dc:ff:02:cf:d4:7f:01:a0:83:7e:86: 4b:f8:33:88:da:08:bc:af:49:cf:50:6b:5c:2b:bd:6f:bf:fc: 4c:f9:ee:4a:51:d1:47:e1:5b:92:d3:ee:18:ee:01:43:a1:d3: c2:f7:be:dc:41:71:9e:f0:58:ed:46:5d:ec:65:63:6e:b5:49: 20:a4:20:ca:f1:4e:63:01:56:5a:20:63:fb:c3:99:f6:d4:c7: 18:19:67:8a:6d:5d:7f:08:37:40:29:50:20:c7:e6:c8:df:84: 1d:4d:9b:4a:9d:90:52:5a:5b:f6:ce:ea:50:70:60:8b:00:b5: 86:db:cd:1b:28:3c:a2:36:e9:d9:90:5a:46:8a:5c:ee:ed:8f: 3a:e3:0c:6a:a2:88:31:30:b1:08:30:30:3c:07:26:b3:2b:59: a5:db:42:4a:31:d4:9f:2f:ff:5e:c3:ba:a8:99:69:69:3a:37: 83:66:6f:06:a8:18:e8:4e:2f:ba:34:ce:e3:47:88:fd:8f:25: 35:f6:18:ab:1f:41:2c:4e:11:ac:7d:1c:c1:a7:9f:22:ba:34: a6:fe:d5:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjUxMjA3MDA0MDA4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM0Y2NlNy1iMGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXWRGQJbDGrMiVwk/0CEdyd88oY+wDMoRrqpiQcdAOuDzonQjBy5y1OOvuw6 azsfgm3Z3uJ5MSgW0wY6kkH2JEnM3UDMzsmmm+J99wGUiSwudO2kI/zuZjuFqn/H zUSlcH6SwM8OJsPSqBugWfLSPomQBj68Mdse2dW4zCuAoOcErWQXzuqe5mF7Auz7 D7HBovf5aSeB9KT3XDJF3s0PTxOkMuL4jjZYyWbTbVouyoXn530RlS41RxkEl7JL lGNZ5BZvo9v/Wy7iN+Sm+yWC6syFvPbShjcHmvmD1Z9A12j5kkntt22LALkrIBtd uQNm1TvF8VrRA3ba4fFMarIJHwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFMxEg+tj q2hB9HxmBrFBSeXSbxmcMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU5QjYvNzkxOENCMEM3RkY1MTFFRDlFRDQ2NDFEQzRGOUFFMDIvRTEzN0FBRTQ5 MTQwMTFFREFCRDVGNzc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBADLWcgDBADLWdYDBADLWeQDBADLWecwDQYJKoZIhvcNAQEL BQADggEBADfNfLj3yzPXyjkhE/jtJMJ2sStDY5QNoXOLN2qZt+olpCPY+EvbBtFO Vorc/wLP1H8BoIN+hkv4M4jaCLyvSc9Qa1wrvW+//Ez57kpR0UfhW5LT7hjuAUOh 08L3vtxBcZ7wWO1GXexlY261SSCkIMrxTmMBVlogY/vDmfbUxxgZZ4ptXX8IN0Ap UCDH5sjfhB1Nm0qdkFJaW/bO6lBwYIsAtYbbzRsoPKI26dmQWkaKXO7tjzrjDGqi iDEwsQgwMDwHJrMrWaXbQkox1J8v/17DuqiZaWk6N4NmbwaoGOhOL7o0zuNHiP2P JTX2GKsfQSxOEax9HMGnnyK6NKb+1Sw= -----END CERTIFICATE-----Generated at Sat Dec 20 12:24:40 2025 by rpki-client