This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/1AA7504A92DD11EB9B9E993FC4F9AE02.roa File: 1AA7504A92DD11EB9B9E993FC4F9AE02.roa (raw, json) Hash identifier: q9QvCRCxySgsmxHUlB3yfC5si2bvzkIxFoqx5RnCVEw= Subject key identifier: 4D:22:50:6A:29:05:36:3E:53:4A:AF:3D:46:08:E3:C0:13:D7:19:31 Certificate issuer: /CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Certificate serial: 06E1 Authority key identifier: DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/1AA7504A92DD11EB9B9E993FC4F9AE02.roa Signing time: Fri 12 Dec 2025 20:17:11 +0000 ROA not before: Fri 12 Dec 2025 20:17:11 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138368 IP address blocks: 103.131.212.0/22 maxlen: 22 103.131.212.0/24 maxlen: 24 103.131.213.0/24 maxlen: 24 103.131.214.0/24 maxlen: 24 103.131.215.0/24 maxlen: 24 2403:d240::/32 maxlen: 32 2403:d240::/36 maxlen: 36 2403:d240:1000::/36 maxlen: 36 2403:d240:2000::/36 maxlen: 36 2403:d240:3000::/36 maxlen: 36 2403:d240:4000::/36 maxlen: 36 2403:d240:5000::/36 maxlen: 36 2403:d240:6000::/36 maxlen: 36 2403:d240:7000::/36 maxlen: 36 2403:d240:8000::/36 maxlen: 36 2403:d240:9000::/36 maxlen: 36 2403:d240:a000::/36 maxlen: 36 2403:d240:b000::/36 maxlen: 36 2403:d240:c000::/36 maxlen: 36 2403:d240:d000::/36 maxlen: 36 2403:d240:e000::/36 maxlen: 36 2403:d240:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1761 (0x6e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F697, serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Validity Not Before: Dec 12 20:17:11 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=693c7847-d0b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:61:3b:fd:15:8c:85:7b:83:46:45:18:d2:ea: a3:95:b8:63:9c:58:f4:b6:ff:c7:3f:3e:a2:cc:ca: 68:ba:5f:a0:20:e8:46:8a:28:a1:52:10:6c:d1:b9: 41:e4:8a:cf:57:ac:59:0b:23:1a:98:dc:76:00:ab: 1b:8c:b9:ee:4d:c4:6d:4f:5c:d2:fa:b9:22:13:a3: 6b:7c:63:92:12:59:8e:14:1e:0e:f1:58:b4:5b:39: 85:a1:2c:20:ae:ce:1b:8e:f2:7b:86:c7:5a:03:a0: be:a1:29:64:7a:19:fa:5b:6c:5f:80:16:6b:3b:c1: e8:63:21:a5:50:9a:a4:aa:8a:83:52:b9:6f:a3:8f: 34:6c:58:4d:63:18:19:c6:ae:69:a6:11:ac:5d:04: 9a:07:8a:da:74:e8:dd:31:ca:1b:cd:ad:c8:eb:3d: 24:7a:71:fc:d2:23:68:3a:33:b9:0a:63:eb:d9:fe: a1:6f:79:b5:f4:c2:61:d4:c0:c6:ad:f3:be:65:4e: 57:f4:f3:03:38:e5:6e:30:bc:e8:f2:e8:b3:9a:ba: c4:5d:a3:6f:6a:6c:5b:65:f9:cd:f6:ca:5c:69:86: be:17:ff:4d:b0:24:d7:ff:ad:90:db:b3:fe:05:bc: 63:1a:51:c9:9b:3a:9d:c8:cd:0d:1a:eb:c1:a4:79: b8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:22:50:6A:29:05:36:3E:53:4A:AF:3D:46:08:E3:C0:13:D7:19:31 X509v3 Authority Key Identifier: keyid:DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/1AA7504A92DD11EB9B9E993FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.131.212.0/22 IPv6: 2403:d240::/32 Signature Algorithm: sha256WithRSAEncryption a2:1d:30:9c:4d:a7:2f:bd:1a:de:d9:5c:25:8d:db:aa:06:e3: ea:2c:23:b2:8b:d7:09:fc:30:19:92:21:54:e0:68:b2:0f:7e: a1:52:93:9e:0d:0e:aa:82:1c:c7:d5:c4:42:a4:af:f7:78:29: eb:7a:91:2a:c0:0e:bf:bb:d2:b0:5e:d2:c4:05:b4:bb:56:22: a3:b9:21:78:02:8e:b9:92:3b:8e:27:b0:f4:25:87:be:17:8b: 65:64:aa:cb:c7:0a:d2:44:d6:ae:0f:af:fc:15:a6:47:14:30: 96:d5:32:c9:e6:7d:81:e2:4c:b5:2a:3d:bb:81:68:c2:62:61: b9:c7:af:51:3f:7c:5d:44:5a:f9:75:41:5b:61:65:59:f6:c1: a2:2b:a2:81:0d:b4:e0:60:80:51:f7:82:8c:a7:d8:2d:62:b9: 20:d2:4e:51:60:8a:c2:05:f3:b7:44:6b:b5:c7:f1:b6:3e:44: 26:5c:4d:31:f8:cc:45:7a:8f:f7:b2:6a:0e:17:4d:f6:fc:a9: ce:7e:f6:16:e9:a8:e6:d8:3e:0f:1a:8c:d0:d4:6f:19:6b:c3: 25:48:f5:df:da:e1:b8:a8:f9:04:03:6e:ac:75:73:58:86:b5: 79:60:35:fa:4e:83:70:05:15:f1:1b:d5:06:97:c2:07:09:8e: e7:e3:53:0e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY2OTcxMTAvBgNVBAUTKERCRTZDN0Y5OTA5MDQ2QUUzNUEyMTVCMEUyMTU0NEFF NTIyMzdFOEEwHhcNMjUxMjEyMjAxNzExWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNjNzg0Ny1kMGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2E7/RWMhXuDRkUY0uqjlbhjnFj0tv/HPz6izMpoul+gIOhGiiihUhBs0blB 5IrPV6xZCyMamNx2AKsbjLnuTcRtT1zS+rkiE6NrfGOSElmOFB4O8Vi0WzmFoSwg rs4bjvJ7hsdaA6C+oSlkehn6W2xfgBZrO8HoYyGlUJqkqoqDUrlvo480bFhNYxgZ xq5pphGsXQSaB4radOjdMcobza3I6z0kenH80iNoOjO5CmPr2f6hb3m19MJh1MDG rfO+ZU5X9PMDOOVuMLzo8uizmrrEXaNvamxbZfnN9spcaYa+F/9NsCTX/62Q27P+ BbxjGlHJmzqdyM0NGuvBpHm4ZQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFE0iUGop BTY+U0qvPUYI48AT1xkxMB8GA1UdIwQYMBaAFNvmx/mQkEauNaIVsOIVRK5SI36K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjY5Ny83NTIxREZDMEU4 NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJxNDFvaFd3NGhWRXJsSWpm b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItYkgtWkNRUnE0MW9oV3c0aFZFcmxJamZvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEY2OTcvNzUyMURGQzBFODVEMTFFQUIyM0M4Rjg3QzRGOUFFMDIvMUFBNzUwNEE5 MkREMTFFQjlCOUU5OTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJng9QwDQQCAAIwBwMFACQD0kAwDQYJKoZIhvcNAQELBQAD ggEBAKIdMJxNpy+9Gt7ZXCWN26oG4+osI7KL1wn8MBmSIVTgaLIPfqFSk54NDqqC HMfVxEKkr/d4Ket6kSrADr+70rBe0sQFtLtWIqO5IXgCjrmSO44nsPQlh74Xi2Vk qsvHCtJE1q4Pr/wVpkcUMJbVMsnmfYHiTLUqPbuBaMJiYbnHr1E/fF1EWvl1QVth ZVn2waIrooENtOBggFH3goyn2C1iuSDSTlFgisIF87dEa7XH8bY+RCZcTTH4zEV6 j/eyag4XTfb8qc5+9hbpqObYPg8ajNDUbxlrwyVI9d/a4bio+QQDbqx1c1iGtXlg NfpOg3AFFfEb1QaXwgcJjufjUw4= -----END CERTIFICATE-----Generated at Sun Dec 21 06:23:27 2025 by rpki-client