This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB8B1D30FAA911EBB2D7220CC4F9AE02.roa File: DB8B1D30FAA911EBB2D7220CC4F9AE02.roa (raw, json) Hash identifier: au7QUAGw3YOm6RChvVHqip1NT/eABwFYyaRnu/Y87us= Subject key identifier: F6:3A:8F:35:6E:85:6C:CC:CF:19:2E:2C:F1:75:36:87:FB:1F:A6:D9 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: CB99 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB8B1D30FAA911EBB2D7220CC4F9AE02.roa Signing time: Fri 19 Dec 2025 06:17:22 +0000 ROA not before: Fri 19 Dec 2025 06:17:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141515 IP address blocks: 103.160.242.0/24 maxlen: 24 2001:df4:dac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52121 (0xcb99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 19 06:17:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6944edf2-0c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:42:58:1c:5b:99:fb:a1:1e:0f:f4:41:05:aa: 31:e2:6b:13:63:cc:5b:54:d1:4c:6e:85:70:f2:6e: 95:56:8e:ca:bf:11:b9:8d:0d:d5:00:74:c2:e0:01: 2b:ab:b5:aa:ff:9a:a1:e1:31:ac:93:68:06:4e:a0: 68:ec:2c:84:7d:35:d5:82:6a:a7:cc:9d:75:ed:7f: ba:a9:64:f1:a9:7a:d5:e4:59:ed:b2:09:c5:79:80: 6e:a3:c8:0e:cf:68:a7:1e:26:7c:40:83:e4:ae:06: b4:f5:f5:e6:45:2a:a4:92:08:50:39:f9:97:5d:39: c0:9d:67:b6:46:09:0b:14:12:be:7f:70:d9:20:40: 8b:5f:0c:4d:63:e0:c0:3e:1b:50:4d:41:01:81:f1: 43:0c:4a:73:99:00:a2:1c:1f:31:bb:1f:5d:5d:a4: 66:80:1a:2a:7b:29:34:90:ad:3c:66:20:b7:d7:ff: d1:e2:3b:1b:b8:cb:d1:27:8a:34:f0:7a:b2:49:cf: ac:9c:d0:90:df:2e:17:81:70:1a:0f:88:a9:a5:6a: f8:bb:fd:91:3d:4b:fa:2b:2a:7f:77:e0:6c:df:90: f8:77:22:2d:c0:ab:e9:aa:f0:58:24:26:8b:60:ca: 94:d1:34:db:03:14:fe:6a:42:ed:f5:f5:25:ae:a4: b4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3A:8F:35:6E:85:6C:CC:CF:19:2E:2C:F1:75:36:87:FB:1F:A6:D9 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB8B1D30FAA911EBB2D7220CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.160.242.0/24 IPv6: 2001:df4:dac0::/48 Signature Algorithm: sha256WithRSAEncryption aa:26:2e:ca:c3:53:64:a2:83:cd:e8:8f:e5:66:42:2d:2c:25: 3b:c0:1b:a2:23:45:af:12:3e:bb:c9:31:e4:33:5c:4b:07:0b: 24:0e:3f:7a:14:68:44:09:5b:e7:72:9b:0e:b5:0f:aa:97:b0: 7b:70:79:81:04:86:5c:07:fd:e1:c9:54:ed:c3:8f:4d:1b:17: 18:eb:f5:81:6a:fb:3c:29:45:11:7a:b7:7d:af:4d:9f:9e:78: 00:b4:cb:0c:8a:e0:cb:47:c8:99:5f:d3:8f:38:00:40:bb:9b: 36:00:17:cd:ff:31:1c:9e:4f:8b:49:3b:03:ef:a4:9e:37:9d: 36:ed:54:01:4d:75:fe:a5:65:0b:29:61:3b:29:97:de:a0:a7: 7f:3a:f8:fd:67:36:15:a5:7c:a4:b2:43:dc:12:82:66:0c:b0: 6b:fa:5c:df:cd:9e:a7:cf:2d:52:2b:df:22:6c:31:ad:48:23: 5a:f6:bc:04:43:6d:0b:8b:d1:a5:35:3e:71:d0:85:48:cb:a4: 28:c0:62:38:23:15:31:79:6d:ad:e6:13:b8:ea:11:de:7c:e5: 3c:96:02:0e:52:e8:d2:33:86:c9:47:0f:e8:91:91:e7:59:6e: fe:8b:1f:c8:ba:2e:cd:96:22:4f:5b:b7:39:66:33:ed:1e:a3: 66:b5:1f:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAMuZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTIxOTA2MTcyMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAwwNNjk0NGVkZjItMGM2ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM1CWBxbmfuhHg/0QQWqMeJrE2PMW1TRTG6FcPJulVaOyr8RuY0N1QB0wuAB K6u1qv+aoeExrJNoBk6gaOwshH011YJqp8ydde1/uqlk8al61eRZ7bIJxXmAbqPI Ds9opx4mfECD5K4GtPX15kUqpJIIUDn5l105wJ1ntkYJCxQSvn9w2SBAi18MTWPg wD4bUE1BAYHxQwxKc5kAohwfMbsfXV2kZoAaKnspNJCtPGYgt9f/0eI7G7jL0SeK NPB6sknPrJzQkN8uF4FwGg+IqaVq+Lv9kT1L+isqf3fgbN+Q+HciLcCr6arwWCQm i2DKlNE02wMU/mpC7fX1Ja6ktB0CAwEAAaOCAqYwggKiMB0GA1UdDgQWBBT2Oo81 boVszM8ZLizxdTaH+x+m2TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RCOEIxRDMw RkFBOTExRUJCMkQ3MjIwQ0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQAZ6DyMA8EAgACMAkDBwAgAQ302sAwDQYJKoZIhvcNAQEL BQADggEBAKomLsrDU2Sig83oj+VmQi0sJTvAG6IjRa8SPrvJMeQzXEsHCyQOP3oU aEQJW+dymw61D6qXsHtweYEEhlwH/eHJVO3Dj00bFxjr9YFq+zwpRRF6t32vTZ+e eAC0ywyK4MtHyJlf0484AEC7mzYAF83/MRyeT4tJOwPvpJ43nTbtVAFNdf6lZQsp YTspl96gp386+P1nNhWlfKSyQ9wSgmYMsGv6XN/NnqfPLVIr3yJsMa1II1r2vARD bQuL0aU1PnHQhUjLpCjAYjgjFTF5ba3mE7jqEd585TyWAg5S6NIzhslHD+iRkedZ bv6LH8i6Ls2WIk9btzlmM+0eo2a1H9w= -----END CERTIFICATE-----Generated at Sat Dec 20 21:57:50 2025 by rpki-client