This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/1F89C5C22CB511F08A1A9242C4F9AE02.roa File: 1F89C5C22CB511F08A1A9242C4F9AE02.roa (raw, json) Hash identifier: /x1NixuQhNxLXo/3apZddriClLaw/KTmbAeb4wF5saI= Subject key identifier: 28:B7:66:9D:76:D0:CA:FD:73:1F:4A:13:2E:0B:5D:1C:48:86:28:E9 Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Certificate serial: 0476 Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/1F89C5C22CB511F08A1A9242C4F9AE02.roa Signing time: Sun 21 Dec 2025 00:21:09 +0000 ROA not before: Sun 21 Dec 2025 00:21:09 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 151373 IP address blocks: 103.103.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1142 (0x476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Validity Not Before: Dec 21 00:21:09 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69473d75-930a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d4:ea:55:64:70:61:b7:d1:dd:d9:21:40:36: 0c:7a:51:48:aa:6d:5b:06:dc:3b:41:91:89:5c:cd: 94:2e:61:12:01:ec:72:25:1b:7a:37:d0:b3:a2:69: a9:6e:03:d3:42:17:2c:cc:69:b7:29:e2:0b:99:38: f1:3d:67:7a:dc:18:83:e8:6f:34:4c:a2:8b:58:98: 59:22:19:0e:11:db:79:9c:9b:36:f4:5d:43:60:f1: e3:d3:6b:8e:46:b2:7e:ef:ef:db:6c:56:dd:bc:2d: b8:32:a5:86:25:13:4b:80:e0:7b:87:6e:25:a9:6f: 6f:a0:ac:7c:20:24:1e:e2:72:b1:03:bd:65:23:53: bc:44:00:04:19:c9:58:f7:f3:74:26:79:36:17:02: ad:bf:66:47:51:d8:0c:4e:45:02:da:2f:c9:64:af: 03:85:87:72:ae:b2:1f:35:42:16:61:75:3c:b8:f4: a3:c9:77:38:f6:35:dd:1a:47:5d:a2:6f:30:fb:86: 67:bd:1a:90:71:22:e0:cc:da:97:f8:8e:25:ef:30: f2:4f:fe:9d:7e:c7:ec:a6:91:d1:3a:cb:e8:41:33: 21:1e:05:29:a0:83:69:c0:3c:f3:ca:7d:ff:a4:51: f5:5a:96:26:15:8c:b0:06:9c:ef:f6:45:ca:33:37: 53:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B7:66:9D:76:D0:CA:FD:73:1F:4A:13:2E:0B:5D:1C:48:86:28:E9 X509v3 Authority Key Identifier: keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/1F89C5C22CB511F08A1A9242C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.103.244.0/24 Signature Algorithm: sha256WithRSAEncryption 54:9c:c1:52:59:9a:ba:e2:ec:3c:7c:c2:af:01:92:4f:e0:c0: 26:a7:bb:2a:6d:73:cd:e7:e6:1c:f8:eb:c7:17:f4:1d:ff:36: 39:d8:7c:c9:b1:dc:8d:d9:f3:95:d2:46:b3:30:57:8b:01:41: cd:7b:cd:76:3f:60:ae:5b:4a:94:9c:74:bb:e1:06:bf:e5:ea: 37:e0:d2:ea:02:d6:19:30:34:75:f1:73:9d:4a:2b:e5:2d:5b: c4:1c:1d:90:fe:d7:84:fc:de:64:3b:96:09:08:b2:9a:90:e5: 77:a0:ad:ae:24:32:db:d8:56:23:c1:dc:4e:6e:2c:ca:35:f7: ee:c2:17:fb:82:bf:ad:ed:13:6d:f3:ea:26:01:b0:45:19:30: 1c:0b:81:73:09:a4:d6:d1:76:bf:e4:55:f3:64:d3:bc:61:0f: 4c:70:24:dc:80:5c:71:90:7b:49:e9:af:fd:65:ff:38:fa:78: 72:ca:70:b2:0b:52:f4:e1:eb:1d:b1:74:6a:38:8d:de:59:d8: ec:76:54:49:c7:a5:e1:32:88:03:e2:ee:b3:83:2c:d3:f8:c8: e9:44:bd:f7:3d:27:76:5d:85:4b:78:fc:c4:c8:da:a9:44:1e: 3f:ea:94:aa:a2:8d:6b:7a:9f:53:09:1d:e2:e1:04:55:56:5d: ff:32:59:14 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE MjYwQUE5NzgwHhcNMjUxMjIxMDAyMTA5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ3M2Q3NS05MzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdTqVWRwYbfR3dkhQDYMelFIqm1bBtw7QZGJXM2ULmESAexyJRt6N9Czommp bgPTQhcszGm3KeILmTjxPWd63BiD6G80TKKLWJhZIhkOEdt5nJs29F1DYPHj02uO RrJ+7+/bbFbdvC24MqWGJRNLgOB7h24lqW9voKx8ICQe4nKxA71lI1O8RAAEGclY 9/N0Jnk2FwKtv2ZHUdgMTkUC2i/JZK8DhYdyrrIfNUIWYXU8uPSjyXc49jXdGkdd om8w+4ZnvRqQcSLgzNqX+I4l7zDyT/6dfsfsppHROsvoQTMhHgUpoINpwDzzyn3/ pFH1WpYmFYywBpzv9kXKMzdT0QIDAQABo4IClTCCApEwHQYDVR0OBBYEFCi3Zp12 0Mr9cx9KEy4LXRxIhijpMB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1N0IvOERBNzI2NDBDMUZBMTFFQ0IzMEVFMjFBQzRGOUFFMDIvMUY4OUM1QzIy Q0I1MTFGMDhBMUE5MjQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnZ/QwDQYJKoZIhvcNAQELBQADggEBAFScwVJZmrri7Dx8 wq8Bkk/gwCanuyptc83n5hz468cX9B3/NjnYfMmx3I3Z85XSRrMwV4sBQc17zXY/ YK5bSpScdLvhBr/l6jfg0uoC1hkwNHXxc51KK+UtW8QcHZD+14T83mQ7lgkIspqQ 5Xegra4kMtvYViPB3E5uLMo19+7CF/uCv63tE23z6iYBsEUZMBwLgXMJpNbRdr/k VfNk07xhD0xwJNyAXHGQe0npr/1l/zj6eHLKcLILUvTh6x2xdGo4jd5Z2Ox2VEnH peEyiAPi7rODLNP4yOlEvfc9J3ZdhUt4/MTI2qlEHj/qlKqijWt6n1MJHeLhBFVW Xf8yWRQ= -----END CERTIFICATE-----Generated at Sun Dec 21 07:59:02 2025 by rpki-client