This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa File: C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa (raw, json) Hash identifier: 5JkdXg8obUFlMSitt9szb1JTAobrjQW+JairCkgY4a4= Subject key identifier: EE:31:A7:2B:AC:40:0F:D2:44:9D:72:6C:5E:B6:F5:7D:00:A8:03:9B Certificate issuer: /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Certificate serial: 07D6 Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa Signing time: Fri 28 Nov 2025 20:24:17 +0000 ROA not before: Fri 28 Nov 2025 20:24:17 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 38719 IP address blocks: 103.29.84.0/23 maxlen: 24 103.42.224.0/23 maxlen: 24 114.142.160.0/22 maxlen: 24 2406:adc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:22:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2006 (0x7d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Validity Not Before: Nov 28 20:24:17 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692a04f1-33d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:04:c5:fc:cc:8e:71:f5:99:71:4f:97:e9: c7:90:74:74:31:44:3e:b4:15:5d:b7:d5:c6:b0:29: 99:64:b2:c5:c3:4c:09:af:e6:35:36:1d:e0:bb:12: d6:2e:fa:8c:16:43:c8:88:3d:3d:22:70:51:19:e7: eb:6c:b8:b0:ae:da:4e:0e:b3:9b:55:d9:e1:09:ca: 71:6d:cd:af:0a:50:a8:5d:77:11:8e:03:ba:04:93: d3:b7:a5:02:67:25:6f:3a:92:a2:94:ce:95:e7:9f: ef:ed:7b:c3:8d:f0:a0:db:6f:a2:71:53:45:04:00: 85:c5:7f:54:d9:86:17:8c:6b:7f:1f:84:63:91:66: ed:29:21:23:9d:8c:8b:8b:e8:4d:68:0c:54:5f:13: eb:4c:2a:8f:99:80:bc:3f:7a:fa:e4:ed:ad:9c:4d: 9f:2e:89:80:b6:aa:e4:23:61:41:47:01:d6:d7:54: 7a:83:a2:49:83:3f:69:87:96:aa:2c:36:7f:f5:9c: 77:8d:59:97:75:92:32:e7:39:49:12:52:56:94:48: 73:37:36:97:43:25:a7:f0:0e:97:13:32:05:97:f7: 8b:a8:9b:3b:fd:63:aa:86:e4:88:fc:b5:72:95:4d: 16:28:8f:58:a4:a9:97:ff:e5:82:79:95:ba:c0:81: 9c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:31:A7:2B:AC:40:0F:D2:44:9D:72:6C:5E:B6:F5:7D:00:A8:03:9B X509v3 Authority Key Identifier: keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.29.84.0/23 103.42.224.0/23 114.142.160.0/22 IPv6: 2406:adc0::/32 Signature Algorithm: sha256WithRSAEncryption 12:92:75:77:13:3f:fa:8f:66:c5:cc:de:20:61:eb:36:62:2f: 06:8f:76:96:2a:6b:9a:af:1c:a3:16:45:6f:8f:e5:ee:cc:7e: 3b:a3:86:5c:8d:48:35:c2:a2:2f:e6:33:14:0c:23:5f:90:ee: f1:d9:4e:56:13:30:55:98:3f:8e:14:51:79:96:bb:05:57:66: 9a:f1:b0:78:4d:7c:2c:5c:81:67:84:4d:16:31:f8:dd:c5:e0: e0:ad:25:e2:7a:57:89:98:9d:0b:64:1d:d0:24:7e:40:85:4a: e8:b9:03:dd:fd:30:8f:9a:a7:eb:f4:b6:ff:09:f8:1a:ee:db: f7:fc:f0:5d:1e:0e:6b:82:ed:e5:0f:a1:f0:dc:6c:68:f9:52: a0:9e:40:f6:29:5c:27:3b:4a:e5:f6:21:16:30:9b:4a:e4:0c: a2:74:ed:e7:32:74:08:67:51:31:91:d4:f8:71:4f:52:88:81: be:f1:81:54:f5:06:29:75:d8:51:eb:20:5f:1a:8b:ed:88:38: d9:e8:dc:d7:e0:4f:11:c3:a7:8e:0f:73:4b:00:6e:ab:e0:5f: 3c:bc:29:ac:d0:f1:6b:a4:b9:98:d1:db:a5:5b:bd:26:94:7e: fb:1d:48:0b:f4:2f:06:83:ff:74:4f:be:d2:fd:7d:d6:40:6a: 28:17:69:87 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICB9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4NzExMTAvBgNVBAUTKDJCMTUxRUQ0OTY2Q0I2NTY5MENEOUFBODI2MkI4QTZB RUQwNkU0NDMwHhcNMjUxMTI4MjAyNDE3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJhMDRmMS0zM2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteQExfzMjnH1mXFPl+nHkHR0MUQ+tBVdt9XGsCmZZLLFw0wJr+Y1Nh3guxLW LvqMFkPIiD09InBRGefrbLiwrtpODrObVdnhCcpxbc2vClCoXXcRjgO6BJPTt6UC ZyVvOpKilM6V55/v7XvDjfCg22+icVNFBACFxX9U2YYXjGt/H4RjkWbtKSEjnYyL i+hNaAxUXxPrTCqPmYC8P3r65O2tnE2fLomAtqrkI2FBRwHW11R6g6JJgz9ph5aq LDZ/9Zx3jVmXdZIy5zlJElJWlEhzNzaXQyWn8A6XEzIFl/eLqJs7/WOqhuSI/LVy lU0WKI9YpKmX/+WCeZW6wIGc3wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFO4xpyus QA/SRJ1ybF629X0AqAObMB8GA1UdIwQYMBaAFCsVHtSWbLZWkM2aqCYrimrtBuRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjg3MS84QTJEQUJFMDFE QTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3RsYVF6WnFvSml1S2F1MEc1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4VWUxSlpzdGxhUXpacW9KaXVLYXUwRzVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI4NzEvOEEyREFCRTAxREE3MTFFQjgwNzEyQTRGQzRGOUFFMDIvQzRFRUU4RUUy NEUwMTFFQkE0Qzg3RjdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAFnHVQDBAFnKuADBAJyjqAwDQQCAAIwBwMFACQGrcAwDQYJ KoZIhvcNAQELBQADggEBABKSdXcTP/qPZsXM3iBh6zZiLwaPdpYqa5qvHKMWRW+P 5e7MfjujhlyNSDXCoi/mMxQMI1+Q7vHZTlYTMFWYP44UUXmWuwVXZprxsHhNfCxc gWeETRYx+N3F4OCtJeJ6V4mYnQtkHdAkfkCFSui5A939MI+ap+v0tv8J+Bru2/f8 8F0eDmuC7eUPofDcbGj5UqCeQPYpXCc7SuX2IRYwm0rkDKJ07ecydAhnUTGR1Phx T1KIgb7xgVT1Bil12FHrIF8ai+2IONno3NfgTxHDp44Pc0sAbqvgXzy8KazQ8Wuk uZjR26VbvSaUfvsdSAv0LwaD/3RPvtL9fdZAaigXaYc= -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:54 2025 by rpki-client