This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/43A759B0C82811F0B893BE0BC4F9AE02.roa File: 43A759B0C82811F0B893BE0BC4F9AE02.roa (raw, json) Hash identifier: rbeldU58m4YF2/4dOPbk3su/ZdQtCAeI5lgK94z/0hc= Subject key identifier: 52:ED:D9:C5:61:17:68:38:2E:31:30:41:49:AB:DE:26:94:F1:32:F1 Certificate issuer: /CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Certificate serial: 1409 Authority key identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/43A759B0C82811F0B893BE0BC4F9AE02.roa Signing time: Sun 23 Nov 2025 04:52:51 +0000 ROA not before: Sun 23 Nov 2025 04:52:51 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 63932 IP address blocks: 43.229.12.0/22 maxlen: 22 103.48.16.0/22 maxlen: 22 114.130.240.0/21 maxlen: 21 114.130.240.0/23 maxlen: 23 114.130.242.0/24 maxlen: 24 114.130.252.0/22 maxlen: 22 2401:ed80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5129 (0x1409) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FAC3, serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Validity Not Before: Nov 23 04:52:51 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69229323-2e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2e:9e:83:fd:14:e4:fb:fd:f2:5d:b6:5f:c9: f4:19:fe:30:a9:ae:5d:db:8e:15:b2:f1:b7:64:a9: aa:51:46:c7:ee:9a:f8:75:59:8a:d6:bf:9f:41:18: 5d:41:8a:38:4a:75:d2:d0:17:6a:6b:07:1c:6b:a6: a7:49:c1:60:6b:90:b5:18:cf:d5:50:2a:86:40:f2: eb:45:65:4e:6e:f3:90:f9:20:e3:80:53:cc:fb:80: 15:38:3d:0c:56:17:f5:f1:f5:da:c5:39:d7:06:ab: 06:b5:1e:cb:86:17:3a:0c:33:58:54:e5:53:9d:bf: ce:97:35:b7:3e:f7:e1:e6:e9:b7:30:07:ff:0b:4d: 50:23:8b:76:53:f3:f5:f7:85:07:2f:87:35:7e:4f: aa:bd:4f:6e:ca:9b:24:c5:b2:c7:a8:9b:f2:19:15: 0e:44:4c:03:08:01:72:e7:b9:7d:d4:3e:66:16:85: 2e:7d:20:e0:4a:34:55:00:47:23:7a:a2:0b:cf:1f: 8f:76:1d:8d:c9:3b:67:18:77:8c:7b:e0:c5:b1:0c: e1:4f:54:6b:7f:cb:ea:b7:e5:c9:ad:cd:66:cf:01: 03:4c:0c:83:f4:57:e4:34:c9:8a:b5:5a:4b:e7:b8: ab:66:a3:f1:1f:3e:f4:da:43:93:1a:39:04:4e:89: 95:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:ED:D9:C5:61:17:68:38:2E:31:30:41:49:AB:DE:26:94:F1:32:F1 X509v3 Authority Key Identifier: keyid:77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/43A759B0C82811F0B893BE0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.229.12.0/22 103.48.16.0/22 114.130.240.0/21 114.130.252.0/22 IPv6: 2401:ed80::/32 Signature Algorithm: sha256WithRSAEncryption 5c:da:1c:e7:75:bd:41:e0:8d:f2:ec:cc:cc:44:86:7c:5f:6f: fc:d3:76:05:2b:f3:5e:66:16:e6:0c:9a:74:7e:14:ac:e8:fd: be:79:b4:c8:a6:76:bd:a2:a9:8b:ac:7e:53:64:ca:ad:02:20: d3:f4:0c:64:9d:49:b9:8d:b1:57:1e:e2:02:17:9b:58:21:18: db:0e:65:f2:d2:14:71:bb:04:ef:00:ab:39:54:06:ff:2d:39: 32:66:c5:bd:b8:b6:84:c2:6a:a6:b0:0b:49:fe:39:93:06:83: 26:32:ca:06:75:83:08:00:10:94:dd:84:78:55:40:15:63:76: 89:47:13:00:a6:18:dd:90:8e:49:2e:6d:a7:5a:ab:64:9e:07: e3:a4:42:77:23:21:16:da:23:4e:68:19:97:04:9e:56:01:c5: c2:cb:a2:6d:55:b5:b1:6c:99:b9:d9:78:63:d7:95:4f:66:cb: 51:59:ad:dc:b7:cb:56:20:69:8d:91:3e:d5:d4:6e:7c:ee:0b: 29:5e:64:5b:02:32:6a:7c:38:6b:43:c7:c5:4a:3a:b0:c1:30: 95:b4:0a:1d:0f:7d:44:47:36:e6:77:0e:8f:9b:1a:ca:2b:88: 8e:5c:e4:62:43:24:ec:6f:4e:4b:50:d2:d8:ae:61:c4:56:2f: 81:ff:c4:cd -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICFAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQzMxMTAvBgNVBAUTKDc3NjJBQTgyNzcwMjBEMEJCNUM3NTk5N0RFNUY3RDhB NTE0MkRGMTQwHhcNMjUxMTIzMDQ1MjUxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTIyOTMyMy0yZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2y6eg/0U5Pv98l22X8n0Gf4wqa5d244VsvG3ZKmqUUbH7pr4dVmK1r+fQRhd QYo4SnXS0Bdqawcca6anScFga5C1GM/VUCqGQPLrRWVObvOQ+SDjgFPM+4AVOD0M Vhf18fXaxTnXBqsGtR7Lhhc6DDNYVOVTnb/OlzW3Pvfh5um3MAf/C01QI4t2U/P1 94UHL4c1fk+qvU9uypskxbLHqJvyGRUOREwDCAFy57l91D5mFoUufSDgSjRVAEcj eqILzx+Pdh2NyTtnGHeMe+DFsQzhT1Rrf8vqt+XJrc1mzwEDTAyD9FfkNMmKtVpL 57irZqPxHz702kOTGjkETomV0QIDAQABo4ICtjCCArIwHQYDVR0OBBYEFFLt2cVh F2g4LjEwQUmr3iaU8TLxMB8GA1UdIwQYMBaAFHdiqoJ3Ag0LtcdZl95ffYpRQt8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFDMy83Qjg2OEMwODlE RjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RRdTF4MW1YM2w5OWlsRkMz eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QyS3FnbmNDRFF1MXgxbVgzbDk5aWxGQzN4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUZBQzMvN0I4NjhDMDg5REY1MTFFODk1N0FCNDE2QzRGOUFFMDIvNDNBNzU5QjBD ODI4MTFGMEI4OTNCRTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAIr5QwDBAJnMBADBANygvADBAJygvwwDQQCAAIwBwMFACQB 7YAwDQYJKoZIhvcNAQELBQADggEBAFzaHOd1vUHgjfLszMxEhnxfb/zTdgUr815m FuYMmnR+FKzo/b55tMimdr2iqYusflNkyq0CINP0DGSdSbmNsVce4gIXm1ghGNsO ZfLSFHG7BO8AqzlUBv8tOTJmxb24toTCaqawC0n+OZMGgyYyygZ1gwgAEJTdhHhV QBVjdolHEwCmGN2Qjkkubadaq2SeB+OkQncjIRbaI05oGZcEnlYBxcLLom1VtbFs mbnZeGPXlU9my1FZrdy3y1YgaY2RPtXUbnzuCyleZFsCMmp8OGtDx8VKOrDBMJW0 Ch0PfURHNuZ3Do+bGsoriI5c5GJDJOxvTktQ0tiuYcRWL4H/xM0= -----END CERTIFICATE-----Generated at Sat Dec 6 23:30:08 2025 by rpki-client