This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/FBB9FE90E7E411EC84283679C4F9AE02.roa File: FBB9FE90E7E411EC84283679C4F9AE02.roa (raw, json) Hash identifier: 5bJUFy/NaNMyZ9zgSNCfZmx6vdOpGOHo3QK1QhFuhLA= Subject key identifier: 65:E7:74:A3:C1:F8:3E:74:B1:3C:91:F3:A2:A0:DA:8D:4D:62:F0:3C Certificate issuer: /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Certificate serial: 034A Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/FBB9FE90E7E411EC84283679C4F9AE02.roa Signing time: Sat 06 Dec 2025 23:38:26 +0000 ROA not before: Sat 06 Dec 2025 23:38:26 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 9902 IP address blocks: 43.230.60.0/22 maxlen: 22 43.230.60.0/24 maxlen: 24 43.230.61.0/24 maxlen: 24 43.230.62.0/24 maxlen: 24 43.230.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 842 (0x34a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Validity Not Before: Dec 6 23:38:26 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6934be71-1063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:a4:b7:71:cc:a7:24:a5:34:fb:fb:cd:ad: 30:44:74:da:0f:b1:18:a5:37:12:c2:04:7c:83:81: 47:ed:4a:d2:f0:27:5e:5a:95:9c:9a:07:23:b0:f4: 43:f2:da:41:b8:52:58:fd:fe:f9:58:ed:4d:a7:37: 23:ab:d6:93:95:ea:5d:f1:cb:cb:94:43:06:97:12: 9a:41:f6:fe:74:d0:a8:52:f0:8a:e1:07:e0:98:73: 5d:5b:d8:e5:df:f1:d3:dc:e2:51:4c:4c:e0:b6:4b: 5e:9b:70:3a:0a:e7:2a:77:90:38:5c:6d:66:b5:34: 85:80:78:8c:b8:d0:e2:c9:49:80:48:c0:78:a0:d3: ea:a9:bb:dd:05:61:cf:a3:03:1f:6c:7a:33:27:ab: 30:9c:ee:39:fc:4d:65:c0:4b:be:a9:c0:c8:26:df: 80:36:f2:e6:52:6f:64:ea:b1:46:2c:91:4c:f7:af: 35:ae:f5:3b:12:b6:36:ba:97:5c:08:23:73:2a:d1: d1:5b:42:07:b5:bb:0b:35:43:1e:ab:2e:21:0d:1a: 42:6f:05:ce:04:fe:aa:06:ee:e5:e9:d3:b0:50:60: 0d:ef:1f:02:85:97:d3:79:93:8e:6a:92:4e:1d:bb: c6:ca:72:a3:cf:67:68:5a:08:db:a4:12:db:20:3f: 71:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E7:74:A3:C1:F8:3E:74:B1:3C:91:F3:A2:A0:DA:8D:4D:62:F0:3C X509v3 Authority Key Identifier: keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/FBB9FE90E7E411EC84283679C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.60.0/22 Signature Algorithm: sha256WithRSAEncryption 65:2c:ef:c2:8e:09:63:ef:73:c7:1b:52:64:31:7b:1d:96:f6: a8:d3:c4:92:a6:7e:be:57:f5:85:b1:7e:eb:97:b7:c3:cd:95: 3b:35:d7:a0:4d:7c:29:e9:da:cb:20:67:96:e4:b3:82:29:15: 35:ca:e9:3c:b2:26:e9:b1:47:82:16:7d:48:e8:6e:8b:c4:db: 9a:f0:f0:f1:71:df:64:3d:90:2c:56:26:c2:a1:27:40:9f:9c: d8:f3:5f:11:05:3a:3b:77:b2:12:22:6f:88:9b:1d:e6:67:32: ab:c5:d8:60:40:1b:bb:a4:3c:38:65:d4:2d:9d:2b:c8:26:5e: e1:69:c9:8d:f3:aa:d8:1b:8a:50:e7:79:f8:06:83:95:ec:63: e0:eb:3c:23:b9:10:25:51:8d:f5:1b:ec:78:6f:57:7e:b4:08: 7b:43:2b:81:55:b2:fb:b0:9d:d7:b0:8a:94:3e:07:87:11:2a: 7c:dd:e6:12:bb:85:4e:ae:a6:60:0d:77:35:d5:83:9e:a5:ff: 28:fa:f6:c2:76:4a:3e:fd:19:f9:44:b7:b2:e2:e6:78:b6:d9: de:f5:95:45:2d:88:9e:51:32:64:67:ff:5a:96:b9:2a:44:15: a4:61:51:88:ff:e9:39:37:da:90:cb:94:44:84:55:81:25:17: d1:ec:ea:3b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2RTExMTAvBgNVBAUTKEUzNEIyODU0MjA1NkNFOUUwNjUwRkVGQzBBQjEyNDIx NkNCNUY5QzEwHhcNMjUxMjA2MjMzODI2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM0YmU3MS0xMDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoCkt3HMpySlNPv7za0wRHTaD7EYpTcSwgR8g4FH7UrS8CdeWpWcmgcjsPRD 8tpBuFJY/f75WO1Npzcjq9aTlepd8cvLlEMGlxKaQfb+dNCoUvCK4QfgmHNdW9jl 3/HT3OJRTEzgtktem3A6Cucqd5A4XG1mtTSFgHiMuNDiyUmASMB4oNPqqbvdBWHP owMfbHozJ6swnO45/E1lwEu+qcDIJt+ANvLmUm9k6rFGLJFM9681rvU7ErY2updc CCNzKtHRW0IHtbsLNUMeqy4hDRpCbwXOBP6qBu7l6dOwUGAN7x8ChZfTeZOOapJO HbvGynKjz2doWgjbpBLbID9xKwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGXndKPB +D50sTyR86Kg2o1NYvA8MB8GA1UdIwQYMBaAFONLKFQgVs6eBlD+/AqxJCFstfnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzZFMS9BNTdEODZEOEU3 REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pwNEdVUDc4Q3JFa0lXeTEt Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwc29WQ0JXenA0R1VQNzhDckVrSVd5MS1jRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM2RTEvQTU3RDg2RDhFN0RFMTFFQzhEOEM1QzVEQzRGOUFFMDIvRkJCOUZFOTBF N0U0MTFFQzg0MjgzNjc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr5jwwDQYJKoZIhvcNAQELBQADggEBAGUs78KOCWPvc8cb UmQxex2W9qjTxJKmfr5X9YWxfuuXt8PNlTs116BNfCnp2ssgZ5bks4IpFTXK6Tyy JumxR4IWfUjobovE25rw8PFx32Q9kCxWJsKhJ0CfnNjzXxEFOjt3shIib4ibHeZn MqvF2GBAG7ukPDhl1C2dK8gmXuFpyY3zqtgbilDnefgGg5XsY+DrPCO5ECVRjfUb 7HhvV360CHtDK4FVsvuwndewipQ+B4cRKnzd5hK7hU6upmANdzXVg56l/yj69sJ2 Sj79GflEt7Li5ni22d71lUUtiJ5RMmRn/1qWuSpEFaRhUYj/6Tk32pDLlESEVYEl F9Hs6js= -----END CERTIFICATE-----Generated at Sun Jan 25 12:47:46 2026 by rpki-client