This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa File: 8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa (raw, json) Hash identifier: Os+URuFoZ2zAOXDoDv8uqqxEF42zo4igT1qvd2MJXSY= Subject key identifier: 44:87:A5:0C:B2:C3:10:E4:92:BF:9B:1C:1F:F2:90:45:82:FF:91:31 Certificate issuer: /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Certificate serial: 07D4 Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa Signing time: Fri 28 Nov 2025 20:24:16 +0000 ROA not before: Fri 28 Nov 2025 20:24:16 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133525 IP address blocks: 103.29.84.0/23 maxlen: 23 103.42.224.0/23 maxlen: 23 114.142.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2004 (0x7d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Validity Not Before: Nov 28 20:24:16 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692a04ef-5c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:7e:60:32:ed:d8:62:16:ec:e4:06:8a:c9: a0:f4:e4:8a:ef:c0:a9:b6:9b:4d:21:4a:43:b7:70: b2:de:c5:da:7b:c3:a1:bd:03:b3:eb:d1:ee:9e:b0: 07:0a:76:3e:0b:c7:31:b4:12:ef:e6:8c:2e:e5:a1: ce:95:2e:27:1d:1c:e8:c7:ed:2f:3b:0a:84:69:e7: cc:2c:d4:8d:8a:20:a7:36:62:80:39:6b:70:88:19: a8:75:eb:c3:b5:be:a8:3e:70:df:a0:5b:cc:f9:94: 57:44:1f:b1:7b:02:3e:54:04:ad:08:e3:2f:93:5b: 67:bc:b2:2f:e6:d1:69:75:09:5e:d6:9d:81:28:bd: db:0f:60:17:8c:63:5c:84:1d:99:7f:11:90:6b:3c: 8f:62:75:8c:b7:9d:ec:79:82:c8:fc:43:4a:e8:5c: 6d:e5:45:bc:9f:7f:c3:6d:83:99:e6:ef:59:c2:2f: b9:bf:db:75:70:7d:fe:c8:6f:b2:90:7d:99:9d:64: 55:dc:1d:40:ca:9e:e6:ff:ee:dd:ca:e6:a6:c2:dc: a2:dd:b3:92:3c:ad:b1:77:19:1a:c7:5f:94:09:f4: dd:b9:6e:72:69:cb:c1:fe:16:3e:78:8b:ba:ca:59: 7d:36:aa:40:24:b5:b9:9a:bc:25:5f:e1:68:d7:11: 0f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:87:A5:0C:B2:C3:10:E4:92:BF:9B:1C:1F:F2:90:45:82:FF:91:31 X509v3 Authority Key Identifier: keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.29.84.0/23 103.42.224.0/23 114.142.160.0/24 Signature Algorithm: sha256WithRSAEncryption 28:84:f2:ef:88:71:25:05:05:6a:1b:53:bb:88:37:6f:b7:6d: a9:5b:c0:a5:f4:23:2d:4d:ad:c1:4a:49:b8:69:f4:7b:29:c4: ac:ad:07:2b:52:b5:56:1b:0b:91:63:79:24:20:11:cc:17:97: 9f:f7:4d:43:c2:9e:4b:03:86:62:e4:90:17:2e:2c:b8:1b:31: 0f:b4:fb:e1:20:7c:f3:1d:7d:0e:ee:b6:d0:5a:e3:4a:15:00: 31:6e:2a:7c:78:d4:82:ba:9d:e9:6b:1f:83:2a:ff:7b:af:45: 38:0d:3e:7a:7a:37:b8:9b:38:d0:2a:57:1b:2f:fc:4d:33:21: 8a:2a:ce:7c:98:14:65:02:7d:da:3f:11:f5:af:49:b0:cc:84: 3b:09:d7:60:5a:9c:b4:f9:cc:ba:7e:27:80:cb:37:84:d0:09: 3f:b1:1e:b3:ea:dd:a9:56:b9:cc:f9:a4:4a:95:b4:89:68:e3: f6:d4:61:f8:33:d0:e9:50:80:c5:dc:4a:ef:d1:2b:91:55:44: 78:cc:ad:64:26:ab:9c:12:45:39:a6:a0:2d:aa:79:8a:51:1b: 8b:19:8d:a3:a2:94:df:7f:06:fb:c4:71:96:83:d4:44:2c:18: c8:50:fa:f5:3b:e1:21:1e:5f:63:6c:d4:16:07:51:23:30:16: 84:73:80:cd -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICB9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4NzExMTAvBgNVBAUTKDJCMTUxRUQ0OTY2Q0I2NTY5MENEOUFBODI2MkI4QTZB RUQwNkU0NDMwHhcNMjUxMTI4MjAyNDE2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJhMDRlZi01YzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJ5+YDLt2GIW7OQGismg9OSK78CptptNIUpDt3Cy3sXae8OhvQOz69HunrAH CnY+C8cxtBLv5owu5aHOlS4nHRzox+0vOwqEaefMLNSNiiCnNmKAOWtwiBmodevD tb6oPnDfoFvM+ZRXRB+xewI+VAStCOMvk1tnvLIv5tFpdQle1p2BKL3bD2AXjGNc hB2ZfxGQazyPYnWMt53seYLI/ENK6Fxt5UW8n3/DbYOZ5u9Zwi+5v9t1cH3+yG+y kH2ZnWRV3B1Ayp7m/+7dyuamwtyi3bOSPK2xdxkax1+UCfTduW5yacvB/hY+eIu6 yll9NqpAJLW5mrwlX+Fo1xEPxQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFESHpQyy wxDkkr+bHB/ykEWC/5ExMB8GA1UdIwQYMBaAFCsVHtSWbLZWkM2aqCYrimrtBuRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjg3MS84QTJEQUJFMDFE QTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3RsYVF6WnFvSml1S2F1MEc1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4VWUxSlpzdGxhUXpacW9KaXVLYXUwRzVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI4NzEvOEEyREFCRTAxREE3MTFFQjgwNzEyQTRGQzRGOUFFMDIvOEEwMUJDREMx REE4MTFFQkFGQTVCNDRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAFnHVQDBAFnKuADBAByjqAwDQYJKoZIhvcNAQELBQADggEB ACiE8u+IcSUFBWobU7uIN2+3balbwKX0Iy1NrcFKSbhp9HspxKytBytStVYbC5Fj eSQgEcwXl5/3TUPCnksDhmLkkBcuLLgbMQ+0++EgfPMdfQ7uttBa40oVADFuKnx4 1IK6nelrH4Mq/3uvRTgNPnp6N7ibONAqVxsv/E0zIYoqznyYFGUCfdo/EfWvSbDM hDsJ12BanLT5zLp+J4DLN4TQCT+xHrPq3alWucz5pEqVtIlo4/bUYfgz0OlQgMXc Su/RK5FVRHjMrWQmq5wSRTmmoC2qeYpRG4sZjaOilN9/BvvEcZaD1EQsGMhQ+vU7 4SEeX2Ns1BYHUSMwFoRzgM0= -----END CERTIFICATE-----Generated at Sat Dec 6 22:46:52 2025 by rpki-client