This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/3A470C9EB6DF11F0B03DBB46C4F9AE02.roa File: 3A470C9EB6DF11F0B03DBB46C4F9AE02.roa (raw, json) Hash identifier: D9nEoFMgeCoFGJ0hFpOyvEmHfHRsgO/V2paLG73n/Js= Subject key identifier: 23:61:F5:AE:A2:93:85:5D:A3:3F:B7:91:3F:3E:3D:8E:27:DE:3E:C3 Certificate issuer: /CN=A911ABF4/serialNumber=693C8B4CBA26B06D2CFABA0F9BE4D37DF0DDFF3D Certificate serial: 016F Authority key identifier: 69:3C:8B:4C:BA:26:B0:6D:2C:FA:BA:0F:9B:E4:D3:7D:F0:DD:FF:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTyLTLomsG0s-roPm-TTffDd_z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/3A470C9EB6DF11F0B03DBB46C4F9AE02.roa Signing time: Sat 01 Nov 2025 05:27:45 +0000 ROA not before: Sat 01 Nov 2025 05:27:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137542 IP address blocks: 103.112.128.0/22 maxlen: 22 103.112.128.0/24 maxlen: 24 103.112.129.0/24 maxlen: 24 103.112.130.0/24 maxlen: 24 103.112.131.0/24 maxlen: 24 2402:a940::/32 maxlen: 32 2402:a940::/40 maxlen: 48 2402:a940:100::/40 maxlen: 48 2402:a940:200::/40 maxlen: 48 2402:a940:300::/40 maxlen: 48 2402:a940:400::/40 maxlen: 48 2402:a940:500::/40 maxlen: 48 2402:a940:600::/40 maxlen: 48 2402:a940:700::/40 maxlen: 48 2402:a940:800::/40 maxlen: 48 2402:a940:900::/40 maxlen: 48 2402:a940:a00::/40 maxlen: 48 2402:a940:b00::/40 maxlen: 48 2402:a940:c00::/40 maxlen: 48 2402:a940:d00::/40 maxlen: 48 2402:a940:e00::/40 maxlen: 48 2402:a940:f00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.crl rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTyLTLomsG0s-roPm-TTffDd_z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABF4, serialNumber=693C8B4CBA26B06D2CFABA0F9BE4D37DF0DDFF3D Validity Not Before: Nov 1 05:27:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69059a51-2553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ef:93:f6:f4:57:ba:f4:9d:7d:11:c3:a0:9b: eb:a2:65:ef:59:91:9c:e5:7c:c2:4f:2e:83:e3:83: 2d:dd:ad:2a:ce:f8:da:6c:b3:8e:09:1c:25:71:50: 29:b9:1b:ef:93:3f:49:0b:44:37:ce:1a:da:19:04: 4f:69:fc:25:2f:70:24:62:53:4e:d8:63:0d:a4:3e: e9:3a:e7:6a:d8:05:1a:d1:25:55:10:e3:d5:19:4f: f1:ba:bb:f4:28:03:0f:05:ef:21:58:50:c0:86:c1: cc:bc:6a:0b:67:41:da:d9:0c:5b:51:89:eb:89:1b: 21:6f:9b:4e:a3:0b:77:3f:6a:c5:41:47:84:d6:c2: 19:e4:50:95:80:0d:19:db:0c:46:ef:ed:d8:49:84: 23:ed:3d:b0:ae:dc:df:f5:ec:a6:5e:ee:bd:94:07: 3c:bc:02:ec:f6:d0:25:5c:b5:e9:7b:9b:7e:d0:ff: 10:8a:2b:39:54:12:ae:f3:75:f8:21:2e:e0:26:41: e8:32:ea:08:c0:c8:22:7a:42:df:5a:40:50:4a:31: 3d:d7:69:dd:9f:ad:49:60:4f:c6:37:19:7e:40:50: de:9c:aa:c6:81:70:69:06:fc:9c:17:a4:e1:85:ed: f0:97:3e:26:b1:ab:2c:64:2e:2f:05:10:3b:42:9a: d4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:61:F5:AE:A2:93:85:5D:A3:3F:B7:91:3F:3E:3D:8E:27:DE:3E:C3 X509v3 Authority Key Identifier: keyid:69:3C:8B:4C:BA:26:B0:6D:2C:FA:BA:0F:9B:E4:D3:7D:F0:DD:FF:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTyLTLomsG0s-roPm-TTffDd_z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/3A470C9EB6DF11F0B03DBB46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.112.128.0/22 IPv6: 2402:a940::/32 Signature Algorithm: sha256WithRSAEncryption d9:99:b2:ab:45:01:60:50:f4:f2:fb:02:99:7c:2f:04:08:ba: 4a:4f:57:d0:89:d9:75:b9:32:76:1f:f6:b5:4a:ea:4b:39:85: 23:c5:23:5a:e8:8e:2e:37:c8:49:bf:69:05:68:91:29:a6:42: a9:49:63:8b:12:66:2e:2e:9d:0c:3d:44:a0:6e:12:36:b9:c5: 6d:43:8a:4b:8d:82:c0:5b:7f:83:e7:a9:17:be:94:fb:39:83: 36:ef:c5:69:03:73:6c:0a:90:83:bf:03:b2:59:4b:a6:a5:6b: a5:88:4e:92:d0:59:cb:40:68:0e:7f:3e:c3:08:bf:a3:ac:d6: 07:c6:48:5e:27:0f:b1:e4:be:24:a3:42:47:c8:c2:e4:c9:df: af:49:cc:4d:df:4c:d0:41:9a:7e:07:7b:8a:75:f5:ad:5f:26: 4a:e3:70:8e:98:49:b9:38:dc:77:01:03:ee:68:ff:ea:56:ac: 41:b9:74:24:f5:49:44:bb:d4:a2:99:6e:09:3d:dd:bd:6f:f5: e9:ea:23:5b:3f:88:91:e2:03:f4:00:af:80:3e:c8:df:94:c3: 06:b6:3d:6f:50:71:28:bb:8d:5b:69:bc:9c:a3:fd:46:bf:a4: e5:ac:06:e9:88:11:72:04:1b:a2:cf:d2:7d:e2:30:8e:53:c4: 89:ca:5d:5f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCRjQxMTAvBgNVBAUTKDY5M0M4QjRDQkEyNkIwNkQyQ0ZBQkEwRjlCRTREMzdE RjBEREZGM0QwHhcNMjUxMTAxMDUyNzQ1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA1OWE1MS0yNTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+e+T9vRXuvSdfRHDoJvromXvWZGc5XzCTy6D44Mt3a0qzvjabLOOCRwlcVAp uRvvkz9JC0Q3zhraGQRPafwlL3AkYlNO2GMNpD7pOudq2AUa0SVVEOPVGU/xurv0 KAMPBe8hWFDAhsHMvGoLZ0Ha2QxbUYnriRshb5tOowt3P2rFQUeE1sIZ5FCVgA0Z 2wxG7+3YSYQj7T2wrtzf9eymXu69lAc8vALs9tAlXLXpe5t+0P8Qiis5VBKu83X4 IS7gJkHoMuoIwMgiekLfWkBQSjE912ndn61JYE/GNxl+QFDenKrGgXBpBvycF6Th he3wlz4msassZC4vBRA7QprU8QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCNh9a6i k4Vdoz+3kT8+PY4n3j7DMB8GA1UdIwQYMBaAFGk8i0y6JrBtLPq6D5vk033w3f89 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi9hVHlMVExvbXNHMHMtcm9QbS1UVGZmRGRf ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUeUxUTG9tc0cwcy1yb1BtLVRUZmZEZF96MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUFCRjQvRUE4NzE4NUM3MjFCMTFFOUJCNzQ4MTUwQzRGOUFFMDIvM0E0NzBDOUVC NkRGMTFGMEIwM0RCQjQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJncIAwDQQCAAIwBwMFACQCqUAwDQYJKoZIhvcNAQELBQAD ggEBANmZsqtFAWBQ9PL7Apl8LwQIukpPV9CJ2XW5MnYf9rVK6ks5hSPFI1roji43 yEm/aQVokSmmQqlJY4sSZi4unQw9RKBuEja5xW1DikuNgsBbf4PnqRe+lPs5gzbv xWkDc2wKkIO/A7JZS6ala6WITpLQWctAaA5/PsMIv6Os1gfGSF4nD7HkviSjQkfI wuTJ369JzE3fTNBBmn4He4p19a1fJkrjcI6YSbk43HcBA+5o/+pWrEG5dCT1SUS7 1KKZbgk93b1v9enqI1s/iJHiA/QAr4A+yN+Uwwa2PW9QcSi7jVtpvJyj/Ua/pOWs BumIEXIEG6LP0n3iMI5TxInKXV8= -----END CERTIFICATE-----Generated at Sat Dec 6 23:29:37 2025 by rpki-client