This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/828F2562CA7711F0ACE50D54C4F9AE02.roa File: 828F2562CA7711F0ACE50D54C4F9AE02.roa (raw, json) Hash identifier: as/IVlnCSA3otirC5nGRgQuyVyN998c83S0eNardGTQ= Subject key identifier: 6D:81:E3:BE:60:FE:F3:1A:2B:FD:38:B2:7B:AF:B2:9F:E8:97:EC:C5 Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 09DA Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/828F2562CA7711F0ACE50D54C4F9AE02.roa Signing time: Wed 26 Nov 2025 03:25:09 +0000 ROA not before: Wed 26 Nov 2025 03:25:09 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135391 IP address blocks: 43.224.64.0/22 maxlen: 24 43.230.88.0/22 maxlen: 24 45.253.246.0/23 maxlen: 24 45.255.132.0/22 maxlen: 24 61.29.240.0/22 maxlen: 24 61.29.248.0/24 maxlen: 24 61.29.249.0/24 maxlen: 24 61.29.250.0/23 maxlen: 24 103.43.84.0/22 maxlen: 24 103.49.132.0/22 maxlen: 24 103.65.40.0/22 maxlen: 24 103.98.8.0/22 maxlen: 24 103.211.230.0/23 maxlen: 24 103.216.100.0/22 maxlen: 23 103.216.100.0/24 maxlen: 24 103.216.102.0/23 maxlen: 24 146.196.76.0/23 maxlen: 24 157.119.232.0/22 maxlen: 24 2405:fd80:1000::/40 maxlen: 40 2405:fd80:1000::/48 maxlen: 48 2405:fd80:1003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2522 (0x9da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Validity Not Before: Nov 26 03:25:09 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69267315-7137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:eb:3e:08:af:1a:94:f3:9c:b6:8f:9b:d0:9c: 5c:c8:95:d0:d6:d5:0f:0e:f0:8a:d9:81:18:32:4b: ec:61:88:16:aa:c6:02:c6:dc:c9:51:7d:ce:0b:af: 80:9a:6d:5c:8b:c4:5e:38:5a:cc:c6:7b:d4:f3:b9: 71:0b:ea:7a:db:4d:1a:f9:ee:2b:13:fa:29:06:00: de:4a:18:b0:6f:be:59:be:29:30:a3:7e:eb:14:97: 44:ee:98:73:c6:2d:3b:66:da:5b:be:59:a7:7e:1b: 5b:79:97:70:ef:81:a9:47:54:cb:8d:cb:b3:92:98: ae:55:96:8f:1c:77:1e:58:76:a8:d6:80:56:45:4e: e4:b6:4f:6f:b9:a5:7d:40:00:43:0e:94:0e:c4:68: 5c:ea:1d:f4:56:d7:90:2c:1a:6a:5b:4f:99:41:57: 7a:0b:b7:83:d8:00:d5:04:c9:01:24:40:d0:a0:d8: fb:09:01:c2:f3:ef:19:ca:ff:32:70:de:ea:67:7d: 10:d5:d3:a1:71:ec:a6:70:39:f1:9e:c0:e6:b3:44: a6:f5:89:c4:a5:8e:b5:c5:c2:a3:93:26:54:1d:53: 48:fc:e2:9d:cb:cb:56:ae:79:a0:91:32:0d:32:a4: 1e:d7:e8:5a:dd:ac:06:43:45:f2:bc:eb:5e:3c:27: 23:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:81:E3:BE:60:FE:F3:1A:2B:FD:38:B2:7B:AF:B2:9F:E8:97:EC:C5 X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/828F2562CA7711F0ACE50D54C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.64.0/22 43.230.88.0/22 45.253.246.0/23 45.255.132.0/22 61.29.240.0/22 61.29.248.0/22 103.43.84.0/22 103.49.132.0/22 103.65.40.0/22 103.98.8.0/22 103.211.230.0/23 103.216.100.0/22 146.196.76.0/23 157.119.232.0/22 IPv6: 2405:fd80:1000::/40 Signature Algorithm: sha256WithRSAEncryption 24:54:5f:6c:a8:5f:aa:09:13:8d:f6:63:2e:5b:0c:c3:59:16: fb:5f:3c:a1:28:28:64:83:4f:a1:1f:24:62:ba:53:f0:e7:9f: aa:ca:75:2f:75:a1:8d:5b:24:7b:81:82:52:93:de:a9:40:41: 80:c1:c1:10:29:92:48:18:5e:86:60:89:90:b6:74:2b:24:71: a3:e0:6a:ab:8c:86:6a:91:57:82:f7:f9:58:f3:93:94:ee:60: 0b:77:33:72:fb:d5:db:fe:20:10:51:72:9f:bb:b5:c9:62:4d: 0a:f9:b9:87:ff:a1:e0:40:e1:ab:84:72:93:f7:70:69:b2:5b: a5:b5:b0:15:7a:2d:b8:bd:51:c6:4d:86:bb:e4:f6:99:51:32: ca:8f:c5:9f:8b:ab:7c:db:63:d8:1e:7a:e1:07:6a:f8:a1:79: 69:64:e1:77:b5:87:bc:6a:3a:59:a5:d5:5c:73:c4:b3:a7:9e: 07:5b:6f:e7:28:bb:83:ae:b6:0b:fe:85:e6:99:f1:20:de:7d: bb:df:57:13:6e:15:b7:45:31:20:f5:c5:2e:d7:e1:87:10:16: 31:a4:05:39:03:7b:dd:b3:a0:56:38:5e:d4:15:2b:10:1d:3a: 96:10:40:5f:1c:54:ba:97:31:b9:7c:e9:d0:03:0e:c9:0d:24: 4e:a0:29:4f -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgICCdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjUxMTI2MDMyNTA5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI2NzMxNS03MTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzes+CK8alPOcto+b0JxcyJXQ1tUPDvCK2YEYMkvsYYgWqsYCxtzJUX3OC6+A mm1ci8ReOFrMxnvU87lxC+p6200a+e4rE/opBgDeShiwb75Zvikwo37rFJdE7phz xi07ZtpbvlmnfhtbeZdw74GpR1TLjcuzkpiuVZaPHHceWHao1oBWRU7ktk9vuaV9 QABDDpQOxGhc6h30VteQLBpqW0+ZQVd6C7eD2ADVBMkBJEDQoNj7CQHC8+8Zyv8y cN7qZ30Q1dOhceymcDnxnsDms0Sm9YnEpY61xcKjkyZUHVNI/OKdy8tWrnmgkTIN MqQe1+ha3awGQ0XyvOtePCcjVQIDAQABo4IC8zCCAu8wHQYDVR0OBBYEFG2B475g /vMaK/04snuvsp/ol+zFMB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU1MDkvNzlFQTU5MUVBN0JEMTFFQUFBQTYyOTQ4QzRGOUFFMDIvODI4RjI1NjJD QTc3MTFGMEFDRTUwRDU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwfQYIKwYBBQUHAQcBAf8E bjBsMFoEAgABMFQDBAIr4EADBAIr5lgDBAEt/fYDBAIt/4QDBAI9HfADBAI9HfgD BAJnK1QDBAJnMYQDBAJnQSgDBAJnYggDBAFn0+YDBAJn2GQDBAGSxEwDBAKdd+gw DgQCAAIwCAMGACQF/YAQMA0GCSqGSIb3DQEBCwUAA4IBAQAkVF9sqF+qCRON9mMu WwzDWRb7XzyhKChkg0+hHyRiulPw55+qynUvdaGNWyR7gYJSk96pQEGAwcEQKZJI GF6GYImQtnQrJHGj4GqrjIZqkVeC9/lY85OU7mALdzNy+9Xb/iAQUXKfu7XJYk0K +bmH/6HgQOGrhHKT93BpslultbAVei24vVHGTYa75PaZUTLKj8Wfi6t822PYHnrh B2r4oXlpZOF3tYe8ajpZpdVcc8Szp54HW2/nKLuDrrYL/oXmmfEg3n2731cTbhW3 RTEg9cUu1+GHEBYxpAU5A3vds6BWOF7UFSsQHTqWEEBfHFS6lzG5fOnQAw7JDSRO oClP -----END CERTIFICATE-----Generated at Sat Dec 6 13:08:48 2025 by rpki-client