This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FCA0FB6DD3B11EFB01F476AC4F9AE02.roa File: 1FCA0FB6DD3B11EFB01F476AC4F9AE02.roa (raw, json) Hash identifier: psMmHT9A0WBC+S2L205EolabUqGHLWcxGOFLKjkd8Z8= Subject key identifier: CE:D5:3C:DD:EE:FC:6B:45:32:F6:05:B6:45:17:98:65:1B:51:67:D4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: CB69 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FCA0FB6DD3B11EFB01F476AC4F9AE02.roa Signing time: Wed 17 Dec 2025 07:37:42 +0000 ROA not before: Wed 17 Dec 2025 07:37:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135821 IP address blocks: 45.114.68.0/23 maxlen: 24 45.114.70.0/23 maxlen: 23 45.114.70.0/24 maxlen: 24 45.114.71.0/24 maxlen: 24 103.54.28.0/23 maxlen: 24 103.54.30.0/23 maxlen: 24 103.172.230.0/23 maxlen: 24 103.179.22.0/23 maxlen: 24 2001:df7:7a80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52073 (0xcb69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 17 07:37:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69425dc6-b6d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:46:f2:23:d5:6b:82:98:51:8e:e8:20:81:49: 54:72:dc:b5:48:59:35:07:7a:f7:5c:8f:61:c5:f5: 15:25:10:f5:52:e6:d0:17:65:bf:2f:2b:6e:7b:d0: fc:8a:c2:38:91:34:bf:ff:43:aa:3c:f5:e7:97:21: d7:bb:c6:71:da:a2:9a:54:51:51:12:65:43:b3:f1: 0b:92:5f:8f:65:38:37:ce:24:55:2c:b6:46:b7:e3: f7:9e:06:f5:cc:57:d9:67:3a:eb:9a:e7:ae:24:42: 37:7b:8c:f1:aa:4e:07:b9:7b:7d:cd:a1:00:0b:08: 16:3b:8f:4d:54:bc:70:5e:8d:ba:c3:9c:fd:30:a4: d4:a2:4a:e7:68:0d:81:e3:59:44:c1:3b:0a:cf:5e: cd:cb:be:76:bb:a4:55:f7:d6:ba:11:d7:fe:2a:67: f0:3f:10:49:d7:f6:37:5d:34:b9:6f:d6:9e:5a:c7: 66:16:36:47:5f:88:5a:7e:c4:a9:60:9b:8c:47:15: a9:dd:f5:c5:b5:45:80:af:95:70:4a:2a:7d:55:43: bd:0a:53:ed:76:03:2f:5d:32:63:31:35:e3:b8:85: 98:64:5a:e1:2c:79:23:b4:ae:36:be:f6:41:01:6f: 3a:b6:77:a1:39:53:36:4e:09:36:7d:77:2e:ab:21: d9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D5:3C:DD:EE:FC:6B:45:32:F6:05:B6:45:17:98:65:1B:51:67:D4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FCA0FB6DD3B11EFB01F476AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.114.68.0/22 103.54.28.0/22 103.172.230.0/23 103.179.22.0/23 IPv6: 2001:df7:7a80::/48 Signature Algorithm: sha256WithRSAEncryption 87:d4:21:2b:cc:9e:14:73:0d:e1:09:6f:7d:00:b6:67:d8:6f: 2a:ff:28:1f:9b:42:17:be:55:ac:87:88:a8:8c:7f:4a:2c:a8: 0a:67:85:34:e5:1a:a1:6e:7d:e1:72:56:90:c8:33:41:f6:e2: 87:f6:e5:18:9d:09:c8:c3:84:9c:f1:7d:78:62:e1:0c:da:47: 8f:3b:85:84:dd:5a:14:30:3f:0c:75:44:6c:87:ca:83:92:eb: c2:93:60:a9:d6:1f:e8:9f:49:77:88:b2:12:17:0a:ed:ce:2d: b4:a3:c2:d6:0b:f5:f1:6c:3d:e3:06:79:44:f4:13:b9:0a:bd: f3:0f:f4:1a:7c:80:1b:5f:ff:00:eb:1e:04:77:9b:04:a6:25: b3:fd:dd:0e:a6:7d:b0:2d:02:26:d5:bf:d0:a2:77:7e:64:5d: 0c:2c:f7:1d:8d:34:38:2b:3f:46:6e:4e:0f:a9:e5:8e:7a:8a: 3b:98:3d:da:fa:27:89:2e:77:31:26:38:b3:f9:33:50:4e:ec: 1f:8e:ed:87:83:56:f1:b2:ba:79:a3:68:67:10:18:fe:7a:2b: 39:11:c9:7b:ad:8a:fc:20:d6:85:2f:73:d5:cb:17:62:f9:f7: 32:a1:10:41:ac:4c:77:87:78:0a:c2:5a:5f:ee:3e:92:a1:14: 8f:b0:49:be -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIDAMtpMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTIxNzA3Mzc0MloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAwwNNjk0MjVkYzYtYjZkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdG8iPVa4KYUY7oIIFJVHLctUhZNQd691yPYcX1FSUQ9VLm0Bdlvy8rbnvQ /IrCOJE0v/9Dqjz155ch17vGcdqimlRRURJlQ7PxC5Jfj2U4N84kVSy2Rrfj954G 9cxX2Wc665rnriRCN3uM8apOB7l7fc2hAAsIFjuPTVS8cF6NusOc/TCk1KJK52gN geNZRME7Cs9ezcu+drukVffWuhHX/ipn8D8QSdf2N100uW/WnlrHZhY2R1+IWn7E qWCbjEcVqd31xbVFgK+VcEoqfVVDvQpT7XYDL10yYzE147iFmGRa4Sx5I7SuNr72 QQFvOrZ3oTlTNk4JNn13Lqsh2fECAwEAAaOCArgwggK0MB0GA1UdDgQWBBTO1Tzd 7vxrRTL2BbZFF5hlG1Fn1DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFGQ0EwRkI2 REQzQjExRUZCMDFGNDc2QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEIGCCsGAQUFBwEHAQH/ BDMwMTAeBAIAATAYAwQCLXJEAwQCZzYcAwQBZ6zmAwQBZ7MWMA8EAgACMAkDBwAg AQ33eoAwDQYJKoZIhvcNAQELBQADggEBAIfUISvMnhRzDeEJb30AtmfYbyr/KB+b Qhe+VayHiKiMf0osqApnhTTlGqFufeFyVpDIM0H24of25RidCcjDhJzxfXhi4Qza R487hYTdWhQwPwx1RGyHyoOS68KTYKnWH+ifSXeIshIXCu3OLbSjwtYL9fFsPeMG eUT0E7kKvfMP9Bp8gBtf/wDrHgR3mwSmJbP93Q6mfbAtAibVv9Cid35kXQws9x2N NDgrP0ZuTg+p5Y56ijuYPdr6J4kudzEmOLP5M1BO7B+O7YeDVvGyunmjaGcQGP56 KzkRyXutivwg1oUvc9XLF2L59zKhEEGsTHeHeArCWl/uPpKhFI+wSb4= -----END CERTIFICATE-----Generated at Sat Dec 20 21:51:41 2025 by rpki-client