This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/C2A410D4ADA011F08E990C1DC4F9AE02.roa File: C2A410D4ADA011F08E990C1DC4F9AE02.roa (raw, json) Hash identifier: 2Xgzexa7KQwDiL/PLcy8XKf+wHv4JM7y6behjMBPwWQ= Subject key identifier: 63:7A:F5:40:F5:DD:06:84:C2:77:40:DF:EA:D0:B3:38:03:8B:89:1F Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 09D8 Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/C2A410D4ADA011F08E990C1DC4F9AE02.roa Signing time: Wed 26 Nov 2025 03:24:39 +0000 ROA not before: Wed 26 Nov 2025 03:24:39 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135377 IP address blocks: 45.253.246.0/24 maxlen: 24 45.255.133.0/24 maxlen: 24 45.255.134.0/24 maxlen: 24 45.255.135.0/24 maxlen: 24 61.29.241.0/24 maxlen: 24 61.29.249.0/24 maxlen: 24 61.29.251.0/24 maxlen: 24 103.216.100.0/24 maxlen: 24 103.216.101.0/24 maxlen: 24 157.119.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2520 (0x9d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Validity Not Before: Nov 26 03:24:39 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=692672f7-8eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6e:df:c9:48:a4:41:b0:f6:80:e4:31:0b:18: a9:b4:e2:72:04:c0:16:1f:35:bc:a7:75:7d:96:36: fb:b8:51:37:8d:24:e3:0a:ef:6f:76:db:97:a4:92: be:fb:0a:ab:4c:a2:f7:17:bd:30:65:18:5b:98:44: 9b:97:47:cd:aa:cc:b8:df:19:75:a2:01:a7:62:85: 89:58:5c:77:0d:17:00:b3:9c:59:65:3f:eb:5b:64: f3:1c:20:69:ec:1a:cc:1e:49:4e:b6:87:ea:89:7f: a6:c4:74:0b:76:cc:c7:b5:f6:11:0d:13:f9:87:eb: ea:a3:43:ad:1d:7b:77:9a:1b:a2:d8:f9:81:1c:5f: 18:86:fd:67:da:b5:a0:90:42:96:80:1b:7d:24:a5: 5d:8b:34:d3:96:34:3b:7b:bd:e4:80:63:97:0c:ff: 89:cb:dc:5a:93:be:5b:a4:75:3c:e1:24:cf:ed:3e: 60:36:69:d9:de:fa:aa:f0:b6:94:b9:6f:2b:f3:d4: f6:62:c7:89:d7:b9:bb:ff:9a:d8:8a:14:f1:ad:e4: 9e:40:fb:ad:d3:5d:fa:fe:06:d1:0b:1a:85:71:b6: 77:28:b6:1b:ba:50:e2:2c:4c:ae:3c:90:df:df:ff: bf:1f:b1:68:9f:b9:db:e8:ea:90:c8:d7:59:0f:e4: ec:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7A:F5:40:F5:DD:06:84:C2:77:40:DF:EA:D0:B3:38:03:8B:89:1F X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/C2A410D4ADA011F08E990C1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.253.246.0/24 45.255.133.0-45.255.135.255 61.29.241.0/24 61.29.249.0/24 61.29.251.0/24 103.216.100.0/23 157.119.233.0/24 Signature Algorithm: sha256WithRSAEncryption 73:a3:11:ea:40:dd:d7:19:0b:ee:22:80:d8:dc:35:e9:53:98: 8e:6d:e2:f3:0a:dd:31:36:cf:03:90:99:00:ca:0f:b7:10:28: 6a:3c:a8:99:03:7f:a1:41:e8:a6:f1:92:b6:44:f5:c0:c5:20: 5a:70:74:c0:31:ca:b5:28:a0:17:2f:19:ac:aa:94:1c:0e:93: 5f:fe:40:d6:67:89:28:e3:d2:3c:e0:69:f9:bd:94:d1:1f:6b: 3a:2a:96:1e:d2:50:08:7f:41:66:8a:c6:1e:a6:ad:0d:3d:84: 0b:cb:72:db:d9:12:8d:75:37:28:79:31:76:5f:87:01:cf:c8: be:65:9b:04:f5:b1:8d:51:06:1b:2e:5c:ac:3f:58:5b:2a:6b: 6b:0d:e5:8a:51:19:4b:cd:02:8d:69:41:0d:de:a7:97:39:d0: 97:c0:b1:77:79:de:6a:a4:19:d0:2d:71:8f:8d:0c:e1:f2:a9: 2c:a7:2e:2f:4d:92:fe:db:23:65:32:19:d9:1b:71:8c:f1:56: d0:63:c1:71:79:d5:04:f0:b5:0d:2e:d8:42:f1:47:93:80:e0: a1:2e:ab:ec:7d:32:a3:fa:4f:64:3b:9d:b1:b8:96:b9:fc:04: f6:54:49:f4:ac:89:a9:44:21:61:b7:74:a5:8f:13:ef:3d:74: 8a:c2:7b:17 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgICCdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjUxMTI2MDMyNDM5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI2NzJmNy04ZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwW7fyUikQbD2gOQxCxiptOJyBMAWHzW8p3V9ljb7uFE3jSTjCu9vdtuXpJK+ +wqrTKL3F70wZRhbmESbl0fNqsy43xl1ogGnYoWJWFx3DRcAs5xZZT/rW2TzHCBp 7BrMHklOtofqiX+mxHQLdszHtfYRDRP5h+vqo0OtHXt3mhui2PmBHF8Yhv1n2rWg kEKWgBt9JKVdizTTljQ7e73kgGOXDP+Jy9xak75bpHU84STP7T5gNmnZ3vqq8LaU uW8r89T2YseJ17m7/5rYihTxreSeQPut0136/gbRCxqFcbZ3KLYbulDiLEyuPJDf 3/+/H7Fon7nb6OqQyNdZD+TsbwIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFGN69UD1 3QaEwndA3+rQszgDi4kfMB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU1MDkvNzlFQTU5MUVBN0JEMTFFQUFBQTYyOTQ4QzRGOUFFMDIvQzJBNDEwRDRB REEwMTFGMDhFOTkwQzFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSwYIKwYBBQUHAQcBAf8E PDA6MDgEAgABMDIDBAAt/fYwDAMEAC3/hQMEAy3/gAMEAD0d8QMEAD0d+QMEAD0d +wMEAWfYZAMEAJ136TANBgkqhkiG9w0BAQsFAAOCAQEAc6MR6kDd1xkL7iKA2Nw1 6VOYjm3i8wrdMTbPA5CZAMoPtxAoajyomQN/oUHopvGStkT1wMUgWnB0wDHKtSig Fy8ZrKqUHA6TX/5A1meJKOPSPOBp+b2U0R9rOiqWHtJQCH9BZorGHqatDT2EC8ty 29kSjXU3KHkxdl+HAc/IvmWbBPWxjVEGGy5crD9YWypraw3lilEZS80CjWlBDd6n lznQl8Cxd3neaqQZ0C1xj40M4fKpLKcuL02S/tsjZTIZ2RtxjPFW0GPBcXnVBPC1 DS7YQvFHk4DgoS6r7H0yo/pPZDudsbiWufwE9lRJ9KyJqUQhYbd0pY8T7z10isJ7 Fw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:31:21 2025 by rpki-client