This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/5BE1A39CDFF411EDAF183A6BC4F9AE02.roa File: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (raw, json) Hash identifier: kSko0IDUfwmI+eYoz/fG8AvnBwnpICm84IEH409J6Ko= Subject key identifier: 0D:6F:3D:FA:EA:17:89:FA:BE:2E:70:36:B1:D4:0E:08:B2:A2:9E:59 Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Certificate serial: 0172 Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/5BE1A39CDFF411EDAF183A6BC4F9AE02.roa Signing time: Thu 27 Mar 2025 03:39:42 +0000 ROA not before: Thu 27 Mar 2025 03:39:41 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9294 IP address blocks: 103.101.176.0/24 maxlen: 24 103.101.177.0/24 maxlen: 24 103.101.178.0/24 maxlen: 24 103.101.179.0/24 maxlen: 24 103.181.134.0/24 maxlen: 24 103.181.135.0/24 maxlen: 24 116.204.184.0/24 maxlen: 24 116.204.185.0/24 maxlen: 24 116.204.186.0/24 maxlen: 24 116.204.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111C49, serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Validity Not Before: Mar 27 03:39:41 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e4c87d-7da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d4:34:93:18:98:1b:4e:0e:d1:f0:53:9b:0a: 23:2b:0b:6d:3e:08:a8:b1:a9:5b:ec:63:12:a5:c3: 88:a2:2f:c7:22:86:7f:14:f7:cc:66:d6:50:ae:d4: 89:7e:22:f9:fb:5a:62:47:b2:de:d9:a8:d3:e9:23: 32:a2:6e:45:1a:ba:32:1d:21:74:86:1d:39:8e:26: 11:3b:43:04:b9:66:87:df:14:02:9a:0e:d3:71:18: df:eb:86:16:06:d3:22:0d:57:23:60:bd:23:6c:48: 5a:84:b7:1b:5d:30:96:46:5e:fc:a5:84:22:fc:d1: 82:01:85:97:68:69:c9:4b:da:84:a0:a2:6f:f9:0b: e1:fb:9b:3e:5a:60:0a:29:34:e1:83:14:69:c4:89: c9:d2:ab:cf:78:12:c1:27:2d:06:43:09:04:65:26: f6:de:2b:5f:82:84:41:51:8d:7f:9c:62:ad:c9:41: 81:1a:e6:cb:25:be:a8:2d:94:97:63:56:9c:c0:dd: 63:c7:12:04:b2:ba:b2:80:fe:03:27:7a:e2:09:9a: 6e:65:17:cd:76:91:2f:10:e1:c5:51:f7:95:65:b9: 1b:2b:b3:92:a0:be:8a:63:b0:fd:d5:fc:8d:d4:4f: eb:8b:e8:7a:06:57:b5:3e:9c:a9:1e:fe:80:e7:a2: 8a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6F:3D:FA:EA:17:89:FA:BE:2E:70:36:B1:D4:0E:08:B2:A2:9E:59 X509v3 Authority Key Identifier: keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/5BE1A39CDFF411EDAF183A6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.176.0/22 103.181.134.0/23 116.204.184.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:09:76:82:1d:38:94:74:f3:13:92:d3:40:ae:51:e1:52:75: 16:d9:9f:4a:d9:9e:06:77:ba:68:8e:23:03:ca:16:24:31:86: 75:d9:1e:f2:8a:b9:f4:be:5d:12:d7:74:35:f3:91:8b:4c:fb: 82:33:b3:b1:03:dd:d8:3a:c1:6e:a7:89:3a:b9:76:f0:bb:8f: 21:a7:92:ec:53:27:7f:a4:d1:6c:19:1c:9d:d0:18:8a:e5:4b: c7:8c:67:23:3b:6a:e0:94:11:c5:ab:c9:dd:87:14:1c:80:91: c2:57:cc:87:c1:84:25:10:d2:4e:02:b2:57:c6:4e:69:29:2f: bf:b8:1b:b0:05:8f:0a:3a:8e:2d:b6:0c:5e:b2:9c:c1:99:a4: 08:97:d3:2c:ea:02:1e:67:6a:c4:2d:d2:d8:c0:92:30:c1:3b: 9f:d2:84:1c:4e:80:c2:b2:ea:18:72:c8:9d:fc:6f:0b:6f:be: f8:40:98:e8:6f:2c:30:1f:30:26:be:95:2f:f1:45:83:13:21: bd:3a:91:dd:59:ac:4b:41:f3:4a:06:43:38:e1:ad:ad:02:b0: 64:c4:74:2d:b6:e1:90:de:72:4a:6f:3f:ac:42:f5:7b:a8:b1: 63:6e:8a:a7:2b:ab:d0:04:65:60:ba:81:7c:5d:1d:63:9a:54: 31:b0:b9:1a -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFDNDkxMTAvBgNVBAUTKDQxMEQ4RTY4NDMxODE4Nzc0QjMwQjE5QkU1Q0VGNTNE NDcxOTBCMkMwHhcNMjUwMzI3MDMzOTQxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U0Yzg3ZC03ZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtQ0kxiYG04O0fBTmwojKwttPgiosalb7GMSpcOIoi/HIoZ/FPfMZtZQrtSJ fiL5+1piR7Le2ajT6SMyom5FGroyHSF0hh05jiYRO0MEuWaH3xQCmg7TcRjf64YW BtMiDVcjYL0jbEhahLcbXTCWRl78pYQi/NGCAYWXaGnJS9qEoKJv+Qvh+5s+WmAK KTThgxRpxInJ0qvPeBLBJy0GQwkEZSb23itfgoRBUY1/nGKtyUGBGubLJb6oLZSX Y1acwN1jxxIEsrqygP4DJ3riCZpuZRfNdpEvEOHFUfeVZbkbK7OSoL6KY7D91fyN 1E/ri+h6Ble1PpypHv6A56KKOwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFA1vPfrq F4n6vi5wNrHUDgiyop5ZMB8GA1UdIwQYMBaAFEENjmhDGBh3SzCxm+XO9T1HGQss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUM0OS83QTdGMTk3MkRG RjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdIZExNTEdiNWM3MVBVY1pD eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRMk9hRU1ZR0hkTE1MR2I1YzcxUFVjWkN5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTFDNDkvN0E3RjE5NzJERkYxMTFFREIwQ0FFQjY5QzRGOUFFMDIvNUJFMUEzOUNE RkY0MTFFREFGMTgzQTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJnZbADBAFntYYDBAJ0zLgwDQYJKoZIhvcNAQELBQADggEB AC8JdoIdOJR08xOS00CuUeFSdRbZn0rZngZ3umiOIwPKFiQxhnXZHvKKufS+XRLX dDXzkYtM+4Izs7ED3dg6wW6niTq5dvC7jyGnkuxTJ3+k0WwZHJ3QGIrlS8eMZyM7 auCUEcWryd2HFByAkcJXzIfBhCUQ0k4CslfGTmkpL7+4G7AFjwo6ji22DF6ynMGZ pAiX0yzqAh5nasQt0tjAkjDBO5/ShBxOgMKy6hhyyJ38bwtvvvhAmOhvLDAfMCa+ lS/xRYMTIb06kd1ZrEtB80oGQzjhra0CsGTEdC224ZDeckpvP6xC9XuosWNuiqcr q9AEZWC6gXxdHWOaVDGwuRo= -----END CERTIFICATE-----Generated at Sat Dec 6 22:26:49 2025 by rpki-client