This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B9A42F96FEA211EDB9013076C4F9AE02.roa File: B9A42F96FEA211EDB9013076C4F9AE02.roa (raw, json) Hash identifier: hyqKDl6jtyGKyJAIAa4mx+PngO9SccHqsfXS7jNKJMs= Subject key identifier: DD:F7:EB:4D:16:FA:50:93:2C:DC:45:D6:80:92:55:A9:4E:EE:D3:7B Certificate issuer: /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Certificate serial: 064F Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B9A42F96FEA211EDB9013076C4F9AE02.roa Signing time: Fri 14 Nov 2025 21:43:21 +0000 ROA not before: Fri 14 Nov 2025 21:43:21 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 9667 IP address blocks: 103.20.208.0/24 maxlen: 24 103.20.209.0/24 maxlen: 24 103.20.210.0/24 maxlen: 24 103.20.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1615 (0x64f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D3F3, serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Validity Not Before: Nov 14 21:43:21 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6917a279-035a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:49:83:c8:d9:29:c2:cc:e0:06:ca:27:f4:c4: 69:dd:5c:7c:00:1b:d0:6e:8b:4e:0a:f7:ea:81:c3: 59:88:99:c9:c8:df:64:68:8d:80:3e:d2:53:a2:84: 1b:5c:89:66:0b:53:42:d2:1e:aa:04:7b:02:98:cb: ed:57:2e:34:3f:b8:0a:e6:72:ae:2c:94:5c:99:03: 72:8c:43:03:01:39:15:28:37:89:6c:26:00:ff:7d: fb:6b:bd:cb:75:0b:3a:32:a6:da:c7:a4:7d:d5:12: 32:c2:08:fb:1d:9e:34:3f:66:34:26:ba:d5:e1:ed: 2d:a1:b2:8a:9e:cd:ff:ad:47:72:81:b5:bf:56:a6: fc:9c:23:1c:75:10:ee:a7:fb:b3:65:c2:1e:40:fc: 15:6d:57:2f:a2:80:23:15:aa:af:28:cd:ed:a6:d3: cb:c0:58:fc:a5:aa:29:64:50:33:98:cf:eb:ee:6a: 54:cd:7c:09:e0:80:52:2b:4d:ef:aa:d6:6c:0c:07: 52:74:4d:b0:f7:1b:04:42:f3:7d:28:d0:d1:81:f2: d1:e5:3a:3e:6e:81:20:ef:3e:94:2c:16:7d:2d:ac: 1a:ff:5e:10:34:ac:e3:40:36:04:5e:17:d1:04:77: 0a:5f:70:98:e6:7a:17:b3:4a:d1:27:9f:23:6a:c6: 63:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F7:EB:4D:16:FA:50:93:2C:DC:45:D6:80:92:55:A9:4E:EE:D3:7B X509v3 Authority Key Identifier: keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B9A42F96FEA211EDB9013076C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.208.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:42:69:0b:63:7b:5f:6c:d3:01:2b:50:b3:2e:47:1d:cd:68: 10:46:20:17:74:68:55:e6:f9:3f:be:c3:10:3a:a7:86:5a:8c: 43:5a:56:3e:e6:96:28:6f:7b:37:d1:13:73:e8:3d:fb:65:a9: 14:ca:16:80:21:ef:31:dd:cc:2b:a1:1c:2b:79:11:6d:23:b0: 4b:80:18:cf:31:e8:60:b6:a5:2a:66:d5:e0:ca:b0:84:79:49: 10:9f:50:96:a3:48:b5:02:58:29:33:64:43:63:64:33:48:f4: 20:22:0d:ac:0d:3a:1c:53:0b:08:81:97:ba:88:92:f0:5b:cd: ec:2f:49:41:fa:69:bc:80:95:1d:7d:2d:8a:02:69:92:bc:3c: b1:48:31:ce:68:d6:57:96:db:e7:6a:5b:6c:9d:84:a6:16:c9: 51:91:6a:a8:61:9a:81:58:d4:90:cc:74:54:90:c7:75:c5:da: 6f:22:f0:37:1b:cb:08:39:e7:91:55:67:e1:ef:de:9a:6f:86: 96:c4:44:82:52:84:5b:bd:b6:86:94:8f:d3:a7:a8:ea:a6:36: fb:06:f3:29:56:de:5e:aa:86:e4:9f:30:b5:18:65:4b:58:4f: d9:c1:1e:d5:ff:23:e0:47:46:53:4b:1c:14:60:6d:51:24:22: 2a:0d:db:0e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQzRjMxMTAvBgNVBAUTKDMxN0MzMDdGRkM2RUNCNkNGNjU2RjI2QjgyODJGRkI5 RTYyRjkzNjUwHhcNMjUxMTE0MjE0MzIxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE3YTI3OS0wMzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7kmDyNkpwszgBson9MRp3Vx8ABvQbotOCvfqgcNZiJnJyN9kaI2APtJTooQb XIlmC1NC0h6qBHsCmMvtVy40P7gK5nKuLJRcmQNyjEMDATkVKDeJbCYA/337a73L dQs6Mqbax6R91RIywgj7HZ40P2Y0JrrV4e0tobKKns3/rUdygbW/Vqb8nCMcdRDu p/uzZcIeQPwVbVcvooAjFaqvKM3tptPLwFj8paopZFAzmM/r7mpUzXwJ4IBSK03v qtZsDAdSdE2w9xsEQvN9KNDRgfLR5To+boEg7z6ULBZ9Lawa/14QNKzjQDYEXhfR BHcKX3CY5noXs0rRJ58jasZjGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFN33600W +lCTLNxF1oCSValO7tN7MB8GA1UdIwQYMBaAFDF8MH/8bsts9lbya4KC/7nmL5Nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDNGMy9CMjU0NDgxQUNB MzQxMUVCOEM5MEQ5NDFDNEY5QUUwMi9NWHd3Zl94dXkyejJWdkpyZ29MX3VlWXZr MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Yd3dmX3h1eTJ6MlZ2SnJnb0xfdWVZdmsyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUQzRjMvQjI1NDQ4MUFDQTM0MTFFQjhDOTBEOTQxQzRGOUFFMDIvQjlBNDJGOTZG RUEyMTFFREI5MDEzMDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnFNAwDQYJKoZIhvcNAQELBQADggEBAJ5CaQtje19s0wEr ULMuRx3NaBBGIBd0aFXm+T++wxA6p4ZajENaVj7mlihvezfRE3PoPftlqRTKFoAh 7zHdzCuhHCt5EW0jsEuAGM8x6GC2pSpm1eDKsIR5SRCfUJajSLUCWCkzZENjZDNI 9CAiDawNOhxTCwiBl7qIkvBbzewvSUH6abyAlR19LYoCaZK8PLFIMc5o1leW2+dq W2ydhKYWyVGRaqhhmoFY1JDMdFSQx3XF2m8i8Dcbywg555FVZ+Hv3ppvhpbERIJS hFu9toaUj9OnqOqmNvsG8ylW3l6qhuSfMLUYZUtYT9nBHtX/I+BHRlNLHBRgbVEk IioN2w4= -----END CERTIFICATE-----Generated at Sun Dec 7 00:34:38 2025 by rpki-client