This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/218211CA68F911EF986C8281C4F9AE02.roa File: 218211CA68F911EF986C8281C4F9AE02.roa (raw, json) Hash identifier: mHnULwgJoiFgX9ai3WggRtZIFI0XOoqJW+z2W78zhrY= Subject key identifier: F6:1B:8E:CF:B1:96:2F:1C:28:00:1A:34:93:16:22:42:3A:92:0E:03 Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 03D1 Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/218211CA68F911EF986C8281C4F9AE02.roa Signing time: Tue 02 Dec 2025 23:58:59 +0000 ROA not before: Tue 02 Dec 2025 23:58:59 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137885 IP address blocks: 43.249.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 977 (0x3d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Dec 2 23:58:59 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692f7d42-7038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9c:56:7b:0c:44:e2:a8:0a:e1:b9:4b:f5:1c: b4:f2:4a:f1:51:21:e5:50:6e:68:a4:24:98:f2:ff: 4b:83:79:9f:c0:8e:58:10:7c:57:76:33:34:15:96: 88:44:99:43:9f:bd:4e:28:4c:3c:a4:7d:6d:56:be: 16:d1:55:e7:8e:78:da:ba:76:da:8a:44:ac:e1:3d: 9d:f2:4a:fd:20:4c:3c:c3:e1:2f:fd:86:37:20:2e: 82:eb:d3:c4:80:b3:41:6d:db:22:97:a8:6a:fb:92: 75:06:fd:18:4b:f2:d4:f4:75:18:fe:ad:1b:16:09: 08:0c:f5:bb:b3:4f:3f:0a:cd:7a:71:7a:10:ed:77: 02:ea:5c:d4:35:07:d1:c4:4d:77:ad:03:f0:9b:7f: c4:c1:50:b5:30:ad:69:07:28:a3:c8:5b:9a:b7:38: 07:b8:c4:04:5b:2d:75:e6:66:60:b9:d5:1f:22:32: d2:d5:67:3f:ff:0e:85:06:60:69:04:9a:6b:74:8c: 92:db:25:b2:1f:8a:5a:4e:9a:e0:c6:fa:80:5b:54: b4:28:42:52:a5:3a:2f:de:a6:11:3c:b2:de:84:a0: 77:cd:4d:59:84:13:79:a4:2c:9a:ae:d8:af:38:06: 03:e7:9f:db:9a:6b:30:a3:ee:17:2a:53:40:23:59: 3d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1B:8E:CF:B1:96:2F:1C:28:00:1A:34:93:16:22:42:3A:92:0E:03 X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/218211CA68F911EF986C8281C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.67.0/24 Signature Algorithm: sha256WithRSAEncryption a5:75:15:23:ae:15:3e:72:af:54:c7:54:46:14:f2:11:26:2e: 2a:e9:4e:fd:13:2b:39:f8:c6:cd:bc:87:0a:77:f0:c2:dd:f1: 63:40:82:b4:93:00:e8:b8:8a:6e:58:36:15:44:58:00:db:1e: 38:e5:b6:ef:55:b4:f6:82:9c:83:a0:e1:51:c5:98:c7:0b:ea: f9:ad:d1:23:1b:b8:7e:c8:5f:0b:55:06:76:50:3d:98:6c:88: d9:9e:55:14:d7:6b:4e:9a:f5:a7:2d:c0:ed:f6:ba:66:20:77: 23:de:ac:83:c7:9b:53:84:f4:fb:6e:7d:cc:6f:9a:75:db:72: 18:35:b6:f5:e2:f0:88:36:93:11:a3:82:bd:c0:4d:9a:11:bb: 03:80:7f:4b:f3:49:5c:96:32:2e:ab:38:b2:72:39:c1:1d:b3: ce:78:37:3d:1f:df:56:0a:f0:10:50:89:47:a2:0e:2c:56:15: d8:14:0f:40:91:1f:38:67:45:79:77:7a:00:87:cb:8e:a5:5c: dc:cb:31:13:ca:41:ab:04:ba:c0:d6:66:75:e6:2d:93:7f:1f: 66:88:e6:f6:ef:ed:92:8a:6b:f3:51:8a:5e:f6:77:21:2c:c8: 02:25:1b:50:ff:07:67:58:18:54:49:89:db:37:ce:f3:8a:8c: 53:c5:42:f8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjUxMjAyMjM1ODU5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmN2Q0Mi03MDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZxWewxE4qgK4blL9Ry08krxUSHlUG5opCSY8v9Lg3mfwI5YEHxXdjM0FZaI RJlDn71OKEw8pH1tVr4W0VXnjnjaunbaikSs4T2d8kr9IEw8w+Ev/YY3IC6C69PE gLNBbdsil6hq+5J1Bv0YS/LU9HUY/q0bFgkIDPW7s08/Cs16cXoQ7XcC6lzUNQfR xE13rQPwm3/EwVC1MK1pByijyFuatzgHuMQEWy115mZgudUfIjLS1Wc//w6FBmBp BJprdIyS2yWyH4paTprgxvqAW1S0KEJSpTov3qYRPLLehKB3zU1ZhBN5pCyartiv OAYD55/bmmswo+4XKlNAI1k9aQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPYbjs+x li8cKAAaNJMWIkI6kg4DMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvMjE4MjExQ0E2 OEY5MTFFRjk4NkM4MjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr+UMwDQYJKoZIhvcNAQELBQADggEBAKV1FSOuFT5yr1TH VEYU8hEmLirpTv0TKzn4xs28hwp38MLd8WNAgrSTAOi4im5YNhVEWADbHjjltu9V tPaCnIOg4VHFmMcL6vmt0SMbuH7IXwtVBnZQPZhsiNmeVRTXa06a9actwO32umYg dyPerIPHm1OE9PtufcxvmnXbchg1tvXi8Ig2kxGjgr3ATZoRuwOAf0vzSVyWMi6r OLJyOcEds854Nz0f31YK8BBQiUeiDixWFdgUD0CRHzhnRXl3egCHy46lXNzLMRPK QasEusDWZnXmLZN/H2aI5vbv7ZKKa/NRil72dyEsyAIlG1D/B2dYGFRJids3zvOK jFPFQvg= -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:46 2025 by rpki-client