This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B7BBC928FEA211EDB9013076C4F9AE02.roa File: B7BBC928FEA211EDB9013076C4F9AE02.roa (raw, json) Hash identifier: 691+02/w7Hvvvxts+u+wZs/SnQae95oqmqWQ70mluhE= Subject key identifier: 03:76:CB:7E:05:E9:00:96:86:49:A5:FC:4D:3B:97:D3:6E:90:DA:FD Certificate issuer: /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Certificate serial: 0657 Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B7BBC928FEA211EDB9013076C4F9AE02.roa Signing time: Thu 27 Nov 2025 03:40:55 +0000 ROA not before: Thu 27 Nov 2025 03:40:55 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 133480 IP address blocks: 43.245.160.0/24 maxlen: 24 43.245.161.0/24 maxlen: 24 43.245.162.0/24 maxlen: 24 43.245.163.0/24 maxlen: 24 45.125.125.0/24 maxlen: 24 103.76.164.0/24 maxlen: 24 103.76.165.0/24 maxlen: 24 103.77.232.0/24 maxlen: 24 103.77.233.0/24 maxlen: 24 103.77.234.0/24 maxlen: 24 103.77.235.0/24 maxlen: 24 103.108.92.0/22 maxlen: 24 103.192.173.0/24 maxlen: 24 103.194.4.0/24 maxlen: 24 103.231.88.0/24 maxlen: 24 103.231.89.0/24 maxlen: 24 103.231.90.0/24 maxlen: 24 103.231.91.0/24 maxlen: 24 116.206.228.0/24 maxlen: 24 116.206.229.0/24 maxlen: 24 116.206.230.0/24 maxlen: 24 116.206.231.0/24 maxlen: 24 203.209.209.0/24 maxlen: 24 203.209.212.0/24 maxlen: 24 203.209.217.0/24 maxlen: 24 203.209.219.0/24 maxlen: 24 2400:fa80:1::/48 maxlen: 48 2400:fa80:3::/48 maxlen: 48 2400:fa80:4::/48 maxlen: 48 2400:fa80:5::/48 maxlen: 48 2400:fa80:6::/48 maxlen: 48 2402:1b80:3002::/48 maxlen: 48 2407:a080::/32 maxlen: 32 2407:a080::/48 maxlen: 48 2407:a080:2000::/48 maxlen: 48 2407:a080:5000::/36 maxlen: 36 2407:a080:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1623 (0x657) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D3F3, serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Validity Not Before: Nov 27 03:40:55 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6927c847-05a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ca:48:40:9d:7e:d2:d5:cb:a6:f4:0e:a9:7f: b4:57:68:f0:2f:4a:66:ca:a5:08:b2:0c:3b:30:b8: ad:20:2d:b2:ef:10:26:9e:1e:c3:6d:ec:57:44:ff: b6:00:f6:46:52:f5:eb:e3:87:0f:2c:d7:75:37:7f: c1:fb:64:30:8c:71:11:40:db:c1:28:af:d4:63:70: 89:d6:02:04:f7:8f:e6:cf:d5:d8:5b:69:eb:b4:38: 04:56:03:66:54:fe:b2:8a:9c:a6:dc:48:33:b4:94: 74:60:b6:37:a9:9f:db:28:64:63:61:a6:27:79:70: 5e:8b:8e:d6:1c:67:7f:42:13:2f:b6:e8:70:89:2d: 9a:96:3a:c2:e4:46:87:5b:5b:e3:88:a7:d8:30:5f: 43:66:0c:db:01:ab:28:92:f1:6e:8e:4a:02:37:b1: 61:2a:65:57:44:b0:91:78:d8:ed:26:08:a7:8a:f6: 8d:49:42:a8:e2:ce:d1:eb:8d:aa:c4:70:44:c9:ec: e7:34:78:fe:7f:53:c2:3b:b7:4f:20:47:e2:71:dc: 1a:1c:6d:69:57:2a:e7:25:38:02:25:ce:50:1b:87: 2d:cd:0d:d8:71:12:37:b9:22:32:15:07:40:1e:5b: 58:f2:c5:a0:34:a6:15:70:1c:11:f8:d8:0b:9b:27: b6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:76:CB:7E:05:E9:00:96:86:49:A5:FC:4D:3B:97:D3:6E:90:DA:FD X509v3 Authority Key Identifier: keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B7BBC928FEA211EDB9013076C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.160.0/22 45.125.125.0/24 103.76.164.0/23 103.77.232.0/22 103.108.92.0/22 103.192.173.0/24 103.194.4.0/24 103.231.88.0/22 116.206.228.0/22 203.209.209.0/24 203.209.212.0/24 203.209.217.0/24 203.209.219.0/24 IPv6: 2400:fa80:1::/48 2400:fa80:3::-2400:fa80:6:ffff:ffff:ffff:ffff:ffff 2402:1b80:3002::/48 2407:a080::/32 Signature Algorithm: sha256WithRSAEncryption 62:62:a4:6b:10:c2:95:23:52:4b:82:e8:bd:10:be:0b:bd:94: ac:1d:a1:ad:9b:0e:a7:58:47:a6:e3:69:a5:70:67:d5:00:38: 93:ee:71:8a:9e:26:bb:9d:c8:b2:cb:9d:20:db:95:b8:51:47: 63:13:f5:40:05:b2:65:75:f5:dc:40:55:4d:7d:bf:c9:3b:1b: e0:74:30:c1:6a:bb:ed:8d:46:b2:a3:ec:4c:69:ac:64:55:6d: 33:57:0d:62:d1:33:1a:59:6d:b9:2c:dd:b1:cf:33:dd:ab:5c: f7:94:ab:c1:05:43:65:8e:e1:b1:95:99:e4:28:ed:1d:61:94: ce:63:ad:5d:db:18:c8:0a:cd:c7:18:2f:37:89:18:9e:7f:55: 45:b8:bf:ef:3d:5f:35:b8:dc:dc:2b:10:7f:62:a0:93:ff:39: 36:65:f4:88:2b:62:7a:07:41:c4:56:5c:7f:ba:f3:b4:03:ea: 38:6c:58:7c:7c:c1:74:70:59:03:c1:77:a7:dd:a2:1b:7b:ea: a3:d6:5d:18:ed:38:1c:29:3c:ff:39:6b:50:f7:93:c4:89:10: 84:a5:f4:3b:83:2d:08:dd:21:3e:8f:0c:ff:d3:20:18:74:8e: 31:77:00:b2:45:42:ad:90:c7:5b:79:1b:e5:9d:47:67:a5:27: a3:7c:06:7e -----BEGIN CERTIFICATE----- MIIF8TCCBNmgAwIBAgICBlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQzRjMxMTAvBgNVBAUTKDMxN0MzMDdGRkM2RUNCNkNGNjU2RjI2QjgyODJGRkI5 RTYyRjkzNjUwHhcNMjUxMTI3MDM0MDU1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI3Yzg0Ny0wNWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8pIQJ1+0tXLpvQOqX+0V2jwL0pmyqUIsgw7MLitIC2y7xAmnh7DbexXRP+2 APZGUvXr44cPLNd1N3/B+2QwjHERQNvBKK/UY3CJ1gIE94/mz9XYW2nrtDgEVgNm VP6yipym3EgztJR0YLY3qZ/bKGRjYaYneXBei47WHGd/QhMvtuhwiS2aljrC5EaH W1vjiKfYMF9DZgzbAasokvFujkoCN7FhKmVXRLCReNjtJginivaNSUKo4s7R642q xHBEyeznNHj+f1PCO7dPIEficdwaHG1pVyrnJTgCJc5QG4ctzQ3YcRI3uSIyFQdA HltY8sWgNKYVcBwR+NgLmye29wIDAQABo4IDFTCCAxEwHQYDVR0OBBYEFAN2y34F 6QCWhkml/E07l9NukNr9MB8GA1UdIwQYMBaAFDF8MH/8bsts9lbya4KC/7nmL5Nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDNGMy9CMjU0NDgxQUNB MzQxMUVCOEM5MEQ5NDFDNEY5QUUwMi9NWHd3Zl94dXkyejJWdkpyZ29MX3VlWXZr MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Yd3dmX3h1eTJ6MlZ2SnJnb0xfdWVZdmsyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUQzRjMvQjI1NDQ4MUFDQTM0MTFFQjhDOTBEOTQxQzRGOUFFMDIvQjdCQkM5MjhG RUEyMTFFREI5MDEzMDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZ4GCCsGAQUFBwEHAQH/ BIGOMIGLMFQEAgABME4DBAIr9aADBAAtfX0DBAFnTKQDBAJnTegDBAJnbFwDBABn wK0DBABnwgQDBAJn51gDBAJ0zuQDBADL0dEDBADL0dQDBADL0dkDBADL0dswMwQC AAIwLQMHACQA+oAAATASAwcAJAD6gAADAwcAJAD6gAAGAwcAJAIbgDACAwUAJAeg gDANBgkqhkiG9w0BAQsFAAOCAQEAYmKkaxDClSNSS4LovRC+C72UrB2hrZsOp1hH puNppXBn1QA4k+5xip4mu53IssudINuVuFFHYxP1QAWyZXX13EBVTX2/yTsb4HQw wWq77Y1GsqPsTGmsZFVtM1cNYtEzGlltuSzdsc8z3atc95SrwQVDZY7hsZWZ5Cjt HWGUzmOtXdsYyArNxxgvN4kYnn9VRbi/7z1fNbjc3CsQf2Kgk/85NmX0iCtiegdB xFZcf7rztAPqOGxYfHzBdHBZA8F3p92iG3vqo9ZdGO04HCk8/zlrUPeTxIkQhKX0 O4MtCN0hPo8M/9MgGHSOMXcAskVCrZDHW3kb5Z1HZ6Uno3wGfg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:28:23 2025 by rpki-client