This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/211E0AC268F911EF986C8281C4F9AE02.roa File: 211E0AC268F911EF986C8281C4F9AE02.roa (raw, json) Hash identifier: 0Wbd0TloILo4D7y7bRvBLRW10Y2AoSQoJYvEUNn6cbg= Subject key identifier: 97:E2:AA:EC:68:3B:6D:9F:BF:33:23:A1:62:D6:F8:9C:5B:3A:C2:B6 Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 03CA Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/211E0AC268F911EF986C8281C4F9AE02.roa Signing time: Tue 02 Dec 2025 23:58:53 +0000 ROA not before: Tue 02 Dec 2025 23:58:53 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 132838 IP address blocks: 43.249.113.0/24 maxlen: 24 43.249.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Dec 2 23:58:53 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692f7d3d-bd51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f0:73:3c:fd:78:18:f9:e2:c1:76:24:84:03: f1:79:26:0c:2a:98:66:d4:fc:29:9d:0c:84:bc:52: 44:18:a3:34:2f:82:fd:6c:96:55:7e:4c:f3:77:31: 0f:14:fe:42:79:24:16:e2:84:17:10:b9:a9:ff:f1: 85:bf:a1:aa:bf:22:ec:26:13:2b:ea:d2:c1:3e:aa: 89:1a:b0:4a:9f:d5:2b:1d:07:1e:eb:db:d5:ef:9a: 48:a5:1c:2a:0a:1d:9b:43:2f:7a:2b:3c:89:c2:5c: f5:46:72:5d:10:8a:a8:69:f2:1f:96:2f:b5:b7:c0: b2:9d:ec:18:3b:05:db:a4:a5:a6:93:ea:2c:e7:b1: 79:a0:3f:07:1b:fb:09:05:7b:52:da:8d:93:c2:15: 2f:af:f8:ce:f8:54:0d:8b:fe:6b:2a:c8:04:f5:03: df:3c:06:06:b0:a6:2c:db:8a:52:98:d6:2f:bc:62: 20:e6:24:0a:86:32:7f:67:9d:07:05:9c:15:65:26: 47:b8:fb:70:e1:2e:ed:8f:12:42:ab:27:0f:6e:4c: 56:ab:f1:cd:9d:f0:e2:cd:c3:fc:10:ea:fc:32:50: 50:d4:5c:6a:c8:68:9a:3f:05:75:1d:bd:5a:dd:1f: 2f:d2:ec:81:5f:37:79:51:65:c8:30:a2:cb:0c:f1: 04:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E2:AA:EC:68:3B:6D:9F:BF:33:23:A1:62:D6:F8:9C:5B:3A:C2:B6 X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/211E0AC268F911EF986C8281C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.113.0-43.249.114.255 Signature Algorithm: sha256WithRSAEncryption 74:fc:a3:23:1d:2c:28:4d:6c:b6:0a:d5:78:b4:fa:c3:1a:fe: 56:9b:b2:d8:ed:2d:57:e5:ba:f4:de:1c:80:2a:8e:eb:7e:88: 0a:db:9d:20:1b:57:b1:39:96:76:29:e2:29:b4:28:d9:89:6d: ec:1b:e0:53:3c:4a:ea:fd:b8:39:68:b0:eb:d3:b1:2b:39:28: b5:bb:3c:aa:9a:5e:6d:b5:98:fc:8b:c0:28:7b:25:4f:78:fb: f4:42:75:e1:c5:03:41:88:fa:de:cb:1c:28:b4:70:f8:3b:51: ee:60:d9:4d:e8:d3:1b:cb:80:52:cd:a6:7a:26:5f:9e:56:33: ef:26:e8:83:9f:9b:07:1b:7d:c5:29:e7:20:56:15:ab:bb:f3: 68:34:ea:e3:c8:1c:73:57:1b:1b:e8:29:7a:6e:2e:ed:6c:7a: fa:67:e7:93:6d:3d:d8:1d:44:53:a4:2c:4b:c2:78:3f:9c:1b: 8c:ec:89:4d:fc:1a:2e:4f:a5:9f:60:cb:40:7e:a0:81:9a:2f: e4:8a:b8:ec:c8:f0:eb:39:9a:74:36:33:85:e7:65:50:b5:70: e1:08:92:02:1f:6a:74:a5:78:13:4a:ea:7a:24:e1:c2:21:ad: c1:a3:26:7c:3d:19:4b:73:6f:95:08:b0:f8:13:15:b9:eb:f0: 2c:79:b1:fa -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICA8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjUxMjAyMjM1ODUzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmN2QzZC1iZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPBzPP14GPniwXYkhAPxeSYMKphm1PwpnQyEvFJEGKM0L4L9bJZVfkzzdzEP FP5CeSQW4oQXELmp//GFv6GqvyLsJhMr6tLBPqqJGrBKn9UrHQce69vV75pIpRwq Ch2bQy96KzyJwlz1RnJdEIqoafIfli+1t8CynewYOwXbpKWmk+os57F5oD8HG/sJ BXtS2o2TwhUvr/jO+FQNi/5rKsgE9QPfPAYGsKYs24pSmNYvvGIg5iQKhjJ/Z50H BZwVZSZHuPtw4S7tjxJCqycPbkxWq/HNnfDizcP8EOr8MlBQ1FxqyGiaPwV1Hb1a 3R8v0uyBXzd5UWXIMKLLDPEEQQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFJfiquxo O22fvzMjoWLW+JxbOsK2MB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvMjExRTBBQzI2 OEY5MTFFRjk4NkM4MjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEACv5cQMEACv5cjANBgkqhkiG9w0BAQsFAAOCAQEAdPyj Ix0sKE1stgrVeLT6wxr+Vpuy2O0tV+W69N4cgCqO636ICtudIBtXsTmWdiniKbQo 2Ylt7BvgUzxK6v24OWiw69OxKzkotbs8qppebbWY/IvAKHslT3j79EJ14cUDQYj6 3sscKLRw+DtR7mDZTejTG8uAUs2meiZfnlYz7ybog5+bBxt9xSnnIFYVq7vzaDTq 48gcc1cbG+gpem4u7Wx6+mfnk2092B1EU6QsS8J4P5wbjOyJTfwaLk+ln2DLQH6g gZov5Iq47Mjw6zmadDYzhedlULVw4QiSAh9qdKV4E0rqeiThwiGtwaMmfD0ZS3Nv lQiw+BMVuevwLHmx+g== -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:16 2025 by rpki-client