This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/FAD3BBFCDA3311F08928C2DC8AD3641D.roa File: FAD3BBFCDA3311F08928C2DC8AD3641D.roa (raw, json) Hash identifier: LSwcydcz/VwSaqcJ957C8hegY3YYcQrjojQszQrjFEA= Subject key identifier: E7:43:4F:71:95:2D:C9:BA:6E:19:32:F1:02:9C:9F:7C:55:17:A3:0E Certificate issuer: /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F Certificate serial: 056F Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/FAD3BBFCDA3311F08928C2DC8AD3641D.roa Signing time: Tue 16 Dec 2025 04:02:03 +0000 ROA not before: Tue 16 Dec 2025 04:02:03 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 64098 IP address blocks: 43.227.108.0/23 maxlen: 23 43.227.108.0/24 maxlen: 24 43.227.109.0/24 maxlen: 24 43.227.110.0/24 maxlen: 24 43.227.111.0/24 maxlen: 24 103.46.220.0/24 maxlen: 24 103.46.221.0/24 maxlen: 24 103.46.222.0/24 maxlen: 24 103.46.223.0/24 maxlen: 24 203.23.68.0/24 maxlen: 24 203.23.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1391 (0x56f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE13, serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F Validity Not Before: Dec 16 04:02:03 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6940d9bb-e353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:73:26:d1:2e:55:4f:df:a6:e0:6e:6e:fe: fa:10:45:be:cc:eb:1d:1d:7a:fc:6d:ff:e0:77:a0: b8:ea:77:75:44:74:dd:b2:1c:ad:03:b3:dd:cd:eb: b7:fa:4c:c4:d1:df:01:7f:81:6b:45:2f:4a:7f:e8: 04:53:d1:93:17:6e:d6:02:b3:fb:c5:10:ed:c9:9b: d7:12:87:62:66:91:f9:0d:ea:54:20:54:46:57:e8: 6e:5a:f9:f5:0d:77:a7:1c:1f:c1:9d:4c:df:b3:fa: 40:8e:1d:d7:74:2d:a1:8d:db:82:26:99:2e:08:61: 78:6c:f7:83:07:04:29:ac:47:5c:3d:b1:98:76:24: e1:79:dd:fc:86:09:00:3b:fb:ff:4f:b6:ca:08:98: 6f:4e:30:90:c2:9e:0a:77:67:b9:61:9e:37:c4:04: 5c:df:0f:5c:74:6e:70:15:74:d2:9c:78:3d:84:40: a3:59:bc:a5:d2:e5:b2:e6:c9:bb:bd:c6:42:d8:f0: 53:8e:fa:1b:61:10:72:4d:26:d0:ff:06:5f:97:1e: be:9b:de:73:90:2a:9f:3e:37:a3:4e:40:57:da:ff: 3a:a3:db:33:bd:d4:92:53:df:a5:28:d0:6f:91:f8: 18:cc:f9:3d:c7:39:cb:47:7b:30:a1:e1:84:92:f3: a7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:43:4F:71:95:2D:C9:BA:6E:19:32:F1:02:9C:9F:7C:55:17:A3:0E X509v3 Authority Key Identifier: keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/FAD3BBFCDA3311F08928C2DC8AD3641D.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.227.108.0/22 103.46.220.0/22 203.23.68.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:a0:6c:ee:78:8b:37:d8:7d:9f:fe:5b:4f:f8:f0:6d:fc:57: 7a:39:e8:cb:4d:5f:39:4d:75:4f:ea:eb:ea:5c:87:1c:94:49: 75:0b:b9:d2:40:ac:9e:e1:6b:b8:a2:16:4d:13:93:1d:59:7a: 0c:9b:1b:f9:1e:e5:2e:1d:59:ed:ad:7e:b6:54:0a:71:19:9b: 57:04:35:41:8f:25:db:03:8d:e3:f5:26:23:a6:41:a7:fb:e4: 53:7a:1d:fd:92:98:bc:a4:85:ef:40:d6:60:83:0b:c7:90:45: 0e:ab:54:1b:f8:fc:9b:fe:62:8e:b2:6d:fa:ed:28:9b:11:16: 42:eb:6a:2d:b6:0f:d5:94:09:4f:18:96:7a:95:53:a5:67:fb: 59:ab:1e:d6:73:6c:34:29:7a:4a:ce:21:5c:1b:c7:03:92:6f: d8:10:08:69:1c:3f:6f:2e:4b:e4:cb:3a:d7:81:39:7a:b9:2b: 0b:c7:e2:55:ce:c0:7a:4e:28:1c:eb:0f:76:40:af:9f:c3:c4: 23:6b:6f:f7:e8:1c:a0:e6:71:80:e7:c7:25:ab:3d:cd:51:f0: d8:e8:50:cf:8c:e8:10:5a:b9:0d:a9:2b:9f:3b:57:c8:3d:7b: 82:c0:ad:cc:f1:4f:47:e3:ba:92:6b:96:cb:ea:73:9f:f6:dc: 88:f0:64:6e -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFMTMxMTAvBgNVBAUTKDg3RDNCRDdEMEFERTA2NTA5RUI4NUFDNkJBNTk0ODlE OTU0MDFGN0YwHhcNMjUxMjE2MDQwMjAzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQwZDliYi1lMzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/BzJtEuVU/fpuBubv76EEW+zOsdHXr8bf/gd6C46nd1RHTdshytA7Pdzeu3 +kzE0d8Bf4FrRS9Kf+gEU9GTF27WArP7xRDtyZvXEodiZpH5DepUIFRGV+huWvn1 DXenHB/BnUzfs/pAjh3XdC2hjduCJpkuCGF4bPeDBwQprEdcPbGYdiThed38hgkA O/v/T7bKCJhvTjCQwp4Kd2e5YZ43xARc3w9cdG5wFXTSnHg9hECjWbyl0uWy5sm7 vcZC2PBTjvobYRByTSbQ/wZflx6+m95zkCqfPjejTkBX2v86o9szvdSSU9+lKNBv kfgYzPk9xznLR3swoeGEkvOnjwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFOdDT3GV Lcm6bhky8QKcn3xVF6MOMB8GA1UdIwQYMBaAFIfTvX0K3gZQnrhaxrpZSJ2VQB9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUxMy84OTM2MzU3ODI2 RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFyZUJsQ2V1RnJHdWxsSW5aVkFI MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g5TzlmUXJlQmxDZXVGckd1bGxJblpWQUgzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0FFMTMvODkzNjM1NzgyNkZCMTFFQ0E3MTM1RDczQzRGOUFFMDIvRkFEM0JCRkNE QTMzMTFGMDg5MjhDMkRDOEFEMzY0MUQucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAIr42wDBAJnLtwDBAHLF0QwDQYJKoZIhvcNAQELBQADggEB AAugbO54izfYfZ/+W0/48G38V3o56MtNXzlNdU/q6+pchxyUSXULudJArJ7ha7ii Fk0Tkx1ZegybG/ke5S4dWe2tfrZUCnEZm1cENUGPJdsDjeP1JiOmQaf75FN6Hf2S mLykhe9A1mCDC8eQRQ6rVBv4/Jv+Yo6ybfrtKJsRFkLrai22D9WUCU8YlnqVU6Vn +1mrHtZzbDQpekrOIVwbxwOSb9gQCGkcP28uS+TLOteBOXq5KwvH4lXOwHpOKBzr D3ZAr5/DxCNrb/foHKDmcYDnxyWrPc1R8NjoUM+M6BBauQ2pK587V8g9e4LArczx T0fjupJrlsvqc5/23IjwZG4= -----END CERTIFICATE-----Generated at Sat Dec 20 01:38:27 2025 by rpki-client