This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDCC0FBC830311F0869A7246C4F9AE02.roa File: FDCC0FBC830311F0869A7246C4F9AE02.roa (raw, json) Hash identifier: PNtsNxA0Yvbr3rWRlXWDkHWDxt3fGo6veQQIIbudLwU= Subject key identifier: 8D:4D:21:BD:C1:2A:92:16:62:61:6D:F4:71:30:3E:16:B8:1E:8D:81 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: CB94 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDCC0FBC830311F0869A7246C4F9AE02.roa Signing time: Thu 18 Dec 2025 13:10:47 +0000 ROA not before: Thu 18 Dec 2025 13:10:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151106 IP address blocks: 43.243.76.0/24 maxlen: 24 103.52.48.0/22 maxlen: 24 103.55.84.0/22 maxlen: 24 103.61.148.0/23 maxlen: 24 103.91.248.0/22 maxlen: 24 103.157.50.0/23 maxlen: 24 103.161.26.0/23 maxlen: 24 103.166.214.0/24 maxlen: 24 103.168.22.0/24 maxlen: 24 103.168.23.0/24 maxlen: 24 103.168.32.0/24 maxlen: 24 103.171.109.0/24 maxlen: 24 103.174.93.0/24 maxlen: 24 103.177.226.0/23 maxlen: 24 103.179.96.0/23 maxlen: 24 103.179.118.0/23 maxlen: 24 103.179.121.0/24 maxlen: 24 103.180.175.0/24 maxlen: 24 103.181.84.0/23 maxlen: 24 103.181.87.0/24 maxlen: 24 103.183.216.0/23 maxlen: 24 103.187.92.0/23 maxlen: 24 103.189.82.0/23 maxlen: 24 103.212.132.0/22 maxlen: 24 103.214.230.0/23 maxlen: 24 103.215.96.0/23 maxlen: 24 103.243.232.0/24 maxlen: 24 125.62.80.0/22 maxlen: 24 2001:df2:bec0::/47 maxlen: 47 2001:df2:bec0::/48 maxlen: 48 2001:df2:bec1::/48 maxlen: 48 2001:df5:4980::/48 maxlen: 48 2001:df5:a7c0::/48 maxlen: 48 2001:df5:af40::/48 maxlen: 48 2001:df5:b340::/48 maxlen: 48 2402:7a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52116 (0xcb94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 18 13:10:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6943fd57-5127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:86:23:1e:31:da:2a:36:a5:c4:e1:2a:51:f3: c7:5d:7b:16:01:3a:aa:c7:0d:05:84:5e:cd:8c:b9: f9:67:89:e8:6c:eb:85:2c:70:73:72:f2:d3:5a:de: 47:c3:fc:dd:80:ab:ad:06:eb:f7:8d:75:0b:3a:14: 6f:68:8a:ac:f9:f0:dd:1e:db:ad:cf:08:1b:95:af: de:e9:8c:ef:ef:b2:3a:7b:0f:ba:9a:c1:c0:7c:92: d8:00:d1:d1:2b:2d:9f:5f:34:db:05:6b:0e:ae:13: be:e7:43:2b:9d:05:54:b8:93:3f:aa:9c:c1:e5:2c: 96:94:5d:5d:55:66:15:b5:27:a2:7d:e4:59:fe:81: 29:8b:ee:80:9e:0d:0e:a1:40:1e:1d:fc:c8:61:23: 12:b7:63:56:84:54:6c:eb:b5:a9:f3:c5:2a:a3:e5: c0:34:f8:d6:b8:4c:f6:4e:16:0e:db:18:04:9a:d7: 90:62:e8:35:e4:03:6e:64:59:a8:c3:79:5d:5c:48: ff:73:8e:9c:33:13:67:64:36:1b:67:c7:a1:d2:4a: bf:63:91:f7:2c:5b:40:bb:66:30:e8:09:a5:29:57: 3e:85:d2:81:0b:eb:8c:67:35:f6:be:6a:63:b6:ee: 60:ca:ad:b1:b7:d9:81:07:8b:bb:b1:58:63:61:41: ee:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4D:21:BD:C1:2A:92:16:62:61:6D:F4:71:30:3E:16:B8:1E:8D:81 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDCC0FBC830311F0869A7246C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.76.0/24 103.52.48.0/22 103.55.84.0/22 103.61.148.0/23 103.91.248.0/22 103.157.50.0/23 103.161.26.0/23 103.166.214.0/24 103.168.22.0/23 103.168.32.0/24 103.171.109.0/24 103.174.93.0/24 103.177.226.0/23 103.179.96.0/23 103.179.118.0/23 103.179.121.0/24 103.180.175.0/24 103.181.84.0/23 103.181.87.0/24 103.183.216.0/23 103.187.92.0/23 103.189.82.0/23 103.212.132.0/22 103.214.230.0/23 103.215.96.0/23 103.243.232.0/24 125.62.80.0/22 IPv6: 2001:df2:bec0::/47 2001:df5:4980::/48 2001:df5:a7c0::/48 2001:df5:af40::/48 2001:df5:b340::/48 2402:7a0::/32 Signature Algorithm: sha256WithRSAEncryption 3b:18:77:aa:29:c4:d6:40:4c:54:98:6e:75:30:f0:2a:c7:c6: 0f:33:44:3f:66:a7:c6:c7:fb:f6:a2:ec:af:fd:fc:40:e2:9a: 3e:f4:a8:05:61:46:96:94:77:ad:51:aa:a0:15:5e:5b:ad:b7: 5f:bf:eb:44:5d:75:9d:06:27:51:21:23:13:8d:61:09:de:2c: 82:76:03:0a:de:d3:62:1e:13:67:e2:8a:74:d2:aa:98:0e:d8: 52:01:6e:78:42:bf:ae:60:bc:89:3a:49:b0:5f:f3:f4:45:e0: 16:1d:5e:cc:2a:ad:42:bf:44:b4:b0:fc:9b:30:25:c0:b6:a0: 03:1b:7d:8f:fb:71:c7:c5:f5:b1:18:f3:22:bb:05:7b:85:15: 4b:be:f0:2b:11:c4:e4:33:bb:cb:bb:58:0c:51:63:bb:c6:ed: 65:a4:a0:bc:6f:c1:88:c8:e0:2e:30:d0:25:91:61:08:13:13: f9:5b:77:55:ca:30:77:2c:22:23:6f:85:fd:5a:04:2a:23:ba: 09:ce:77:f0:e3:c8:46:15:38:43:79:a5:fe:12:ed:4f:28:1c: 0b:d6:5a:24:e6:bd:a9:12:fc:8d:34:7e:03:17:e1:66:e7:ec: 4c:26:c5:c3:9e:21:0e:eb:22:51:e4:41:34:2b:cc:c8:c0:5a: 42:45:5a:98 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIDAMuUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTIxODEzMTA0N1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAwwNNjk0M2ZkNTctNTEyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWGIx4x2io2pcThKlHzx117FgE6qscNBYRezYy5+WeJ6GzrhSxwc3Ly01re R8P83YCrrQbr9411CzoUb2iKrPnw3R7brc8IG5Wv3umM7++yOnsPuprBwHyS2ADR 0Sstn1802wVrDq4TvudDK50FVLiTP6qcweUslpRdXVVmFbUnon3kWf6BKYvugJ4N DqFAHh38yGEjErdjVoRUbOu1qfPFKqPlwDT41rhM9k4WDtsYBJrXkGLoNeQDbmRZ qMN5XVxI/3OOnDMTZ2Q2G2fHodJKv2OR9yxbQLtmMOgJpSlXPoXSgQvrjGc19r5q Y7buYMqtsbfZgQeLu7FYY2FB7u0CAwEAAaOCA3IwggNuMB0GA1UdDgQWBBSNTSG9 wSqSFmJhbfRxMD4WuB6NgTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ZEQ0MwRkJD ODMwMzExRjA4NjlBNzI0NkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIH7BggrBgEFBQcBBwEB /wSB6zCB6DCBqQQCAAEwgaIDBAAr80wDBAJnNDADBAJnN1QDBAFnPZQDBAJnW/gD BAFnnTIDBAFnoRoDBABnptYDBAFnqBYDBABnqCADBABnq20DBABnrl0DBAFnseID BAFns2ADBAFns3YDBABns3kDBABntK8DBAFntVQDBABntVcDBAFnt9gDBAFnu1wD BAFnvVIDBAJn1IQDBAFn1uYDBAFn12ADBABn8+gDBAJ9PlAwOgQCAAIwNAMHASAB DfK+wAMHACABDfVJgAMHACABDfWnwAMHACABDfWvQAMHACABDfWzQAMFACQCB6Aw DQYJKoZIhvcNAQELBQADggEBADsYd6opxNZATFSYbnUw8CrHxg8zRD9mp8bH+/ai 7K/9/EDimj70qAVhRpaUd61RqqAVXlutt1+/60RddZ0GJ1EhIxONYQneLIJ2Awre 02IeE2fiinTSqpgO2FIBbnhCv65gvIk6SbBf8/RF4BYdXswqrUK/RLSw/JswJcC2 oAMbfY/7ccfF9bEY8yK7BXuFFUu+8CsRxOQzu8u7WAxRY7vG7WWkoLxvwYjI4C4w 0CWRYQgTE/lbd1XKMHcsIiNvhf1aBCojugnOd/DjyEYVOEN5pf4S7U8oHAvWWiTm vakS/I00fgMX4Wbn7EwmxcOeIQ7rIlHkQTQrzMjAWkJFWpg= -----END CERTIFICATE-----Generated at Wed Dec 24 20:33:24 2025 by rpki-client