This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/E007C458C1F111F0BF3C4B61C4F9AE02.roa File: E007C458C1F111F0BF3C4B61C4F9AE02.roa (raw, json) Hash identifier: syr5keE2kGwUDFJmQwSmPdSjoefEMhtzkVJ4glu0DSA= Subject key identifier: 04:33:1E:3B:3A:F5:14:25:6D:F4:8D:D6:4C:27:36:DC:22:F0:2B:5D Certificate issuer: /CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC Certificate serial: 1C5E Authority key identifier: 41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/E007C458C1F111F0BF3C4B61C4F9AE02.roa Signing time: Sat 06 Dec 2025 06:32:26 +0000 ROA not before: Sat 06 Dec 2025 06:32:26 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 38713 IP address blocks: 103.25.136.0/22 maxlen: 22 103.25.136.0/24 maxlen: 24 103.25.137.0/24 maxlen: 24 103.25.138.0/24 maxlen: 24 103.25.139.0/24 maxlen: 24 103.205.176.0/22 maxlen: 22 103.205.176.0/24 maxlen: 24 103.205.177.0/24 maxlen: 24 103.205.178.0/24 maxlen: 24 103.205.179.0/24 maxlen: 24 116.206.140.0/24 maxlen: 24 116.206.141.0/24 maxlen: 24 116.206.142.0/24 maxlen: 24 116.206.143.0/24 maxlen: 24 202.143.112.0/24 maxlen: 24 202.143.113.0/24 maxlen: 24 202.143.114.0/24 maxlen: 24 202.143.115.0/24 maxlen: 24 202.143.116.0/24 maxlen: 24 202.143.117.0/24 maxlen: 24 202.143.118.0/24 maxlen: 24 202.143.119.0/24 maxlen: 24 202.143.120.0/24 maxlen: 24 202.143.121.0/24 maxlen: 24 202.143.122.0/24 maxlen: 24 202.143.123.0/24 maxlen: 24 202.143.124.0/24 maxlen: 24 202.143.125.0/24 maxlen: 24 202.143.126.0/24 maxlen: 24 202.143.127.0/24 maxlen: 24 2406:1300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7262 (0x1c5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5D7, serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC Validity Not Before: Dec 6 06:32:26 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6933cdfa-fada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:34:82:a4:2e:78:4d:aa:65:07:f1:de:50:86: 43:92:d3:49:88:7c:f8:36:de:16:53:98:a5:97:c0: 4b:1f:2f:f6:96:05:cf:a4:87:d5:aa:9b:21:65:fd: c1:e0:54:78:cf:3c:75:a2:be:ee:17:d8:f2:0f:46: e1:97:bb:a6:e1:55:7a:6a:7c:ec:66:17:d2:1d:5e: 6a:23:21:bf:81:c6:01:8d:f8:0a:70:17:3b:99:27: 03:b7:ca:aa:f8:ff:20:9d:49:e9:a6:d0:08:93:a7: d2:bb:53:a8:01:a0:e5:85:55:69:e1:ba:c5:ba:28: b6:1b:1a:4a:a9:3b:2f:5b:d5:1e:59:34:93:57:3b: 72:c4:79:cc:25:b7:e5:69:ea:58:c3:e3:90:5f:f2: a9:7a:66:43:d4:51:09:e2:ca:ad:2f:70:54:73:3a: 22:c9:49:15:e8:fd:8a:7a:05:e5:15:53:f7:30:8f: ea:59:3e:41:30:ba:e9:98:d2:7a:34:d5:c8:e0:ff: 16:a5:93:fc:d0:54:ea:43:6f:80:81:f0:cf:e1:22: 8f:3a:fe:5a:a6:08:00:e2:d9:0b:c3:04:40:bc:16: 9a:89:f5:2f:9d:6f:36:15:18:5b:e5:3b:18:5b:05: 2b:c2:a4:df:2b:2b:cb:46:0a:66:4a:27:79:b2:ac: 23:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:33:1E:3B:3A:F5:14:25:6D:F4:8D:D6:4C:27:36:DC:22:F0:2B:5D X509v3 Authority Key Identifier: keyid:41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/E007C458C1F111F0BF3C4B61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.25.136.0/22 103.205.176.0/22 116.206.140.0/22 202.143.112.0/20 IPv6: 2406:1300::/32 Signature Algorithm: sha256WithRSAEncryption 18:6c:7c:14:c1:e2:4a:d1:50:d1:62:92:b3:b6:9d:de:a7:3b: c2:96:c1:e2:90:67:4b:24:43:e0:42:d4:d8:8a:2c:37:50:75: b9:e8:02:0e:71:45:75:39:0f:b7:f6:1a:ed:3e:07:c0:6c:a5: a4:51:f8:1b:89:b3:e2:23:e9:eb:e9:2f:5f:7b:58:83:0d:2a: 10:7b:1f:ef:40:53:1e:a1:86:82:ba:da:04:75:80:78:4b:5e: 65:ea:cf:37:c5:a1:50:09:91:22:54:ce:74:69:12:47:15:c9: c9:6f:41:24:14:46:4d:3a:5a:38:75:e2:25:5f:d4:6e:4a:9e: 9e:32:7c:94:8d:78:33:fa:75:3f:24:54:a1:1c:68:a7:d9:f7: 28:31:7e:f0:1d:d2:72:ff:84:6c:13:30:11:a3:78:10:c8:16: 37:f5:bd:91:73:41:fd:29:7e:45:30:eb:a9:b0:9a:37:f4:b5: 90:ec:28:e5:ac:fe:ed:ee:51:9f:bc:b7:fa:b4:55:8d:a6:f2: 0f:4b:5a:b1:70:29:c3:6a:f2:20:a4:fe:ab:59:6b:12:2b:11: aa:40:ef:d3:04:32:27:75:4b:a8:a6:e6:23:fa:7f:a6:bb:a4: e0:59:c9:3a:e5:8b:91:a9:ee:8e:42:c3:d4:fc:4a:e5:f3:ed: 90:5d:d6:11 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICHF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1RDcxMTAvBgNVBAUTKDQxRkUxRDQxMzVBQjJENjc2MjNFNzYwODMzOTg0NjhB RDRGQUExREMwHhcNMjUxMjA2MDYzMjI2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMzY2RmYS1mYWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmTSCpC54TaplB/HeUIZDktNJiHz4Nt4WU5ill8BLHy/2lgXPpIfVqpshZf3B 4FR4zzx1or7uF9jyD0bhl7um4VV6anzsZhfSHV5qIyG/gcYBjfgKcBc7mScDt8qq +P8gnUnpptAIk6fSu1OoAaDlhVVp4brFuii2GxpKqTsvW9UeWTSTVztyxHnMJbfl aepYw+OQX/KpemZD1FEJ4sqtL3BUczoiyUkV6P2KegXlFVP3MI/qWT5BMLrpmNJ6 NNXI4P8WpZP80FTqQ2+AgfDP4SKPOv5apggA4tkLwwRAvBaaifUvnW82FRhb5TsY WwUrwqTfKyvLRgpmSid5sqwjdQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFAQzHjs6 9RQlbfSN1kwnNtwi8CtdMB8GA1UdIwQYMBaAFEH+HUE1qy1nYj52CDOYRorU+qHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVENy8yNTg3MkJCRTAz QjQxMUU3QjgxMUFBMTRDNEY5QUUwMi9RZjRkUVRXckxXZGlQbllJTTVoR2l0VDZv ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FmNGRRVFdyTFdkaVBuWUlNNWhHaXRUNm9kdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI1RDcvMjU4NzJCQkUwM0I0MTFFN0I4MTFBQTE0QzRGOUFFMDIvRTAwN0M0NThD MUYxMTFGMEJGM0M0QjYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAJnGYgDBAJnzbADBAJ0zowDBATKj3AwDQQCAAIwBwMFACQG EwAwDQYJKoZIhvcNAQELBQADggEBABhsfBTB4krRUNFikrO2nd6nO8KWweKQZ0sk Q+BC1NiKLDdQdbnoAg5xRXU5D7f2Gu0+B8BspaRR+BuJs+Ij6evpL197WIMNKhB7 H+9AUx6hhoK62gR1gHhLXmXqzzfFoVAJkSJUznRpEkcVyclvQSQURk06Wjh14iVf 1G5Knp4yfJSNeDP6dT8kVKEcaKfZ9ygxfvAd0nL/hGwTMBGjeBDIFjf1vZFzQf0p fkUw66mwmjf0tZDsKOWs/u3uUZ+8t/q0VY2m8g9LWrFwKcNq8iCk/qtZaxIrEapA 79MEMid1S6im5iP6f6a7pOBZyTrli5Gp7o5Cw9T8SuXz7ZBd1hE= -----END CERTIFICATE-----Generated at Sun Dec 7 06:45:36 2025 by rpki-client