This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/FD4E307AFEA711EDBC673B4BC4F9AE02.roa File: FD4E307AFEA711EDBC673B4BC4F9AE02.roa (raw, json) Hash identifier: ITYEhnuTHbSOT5pXrKzWCMAzAI5Kyc/8PF7B1lAL6A8= Subject key identifier: 41:13:C2:3F:46:AB:4F:CD:7C:59:90:B4:0F:98:F7:8A:C4:D8:64:01 Certificate issuer: /CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Certificate serial: 01E7 Authority key identifier: 9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/FD4E307AFEA711EDBC673B4BC4F9AE02.roa Signing time: Fri 05 Dec 2025 01:11:21 +0000 ROA not before: Fri 05 Dec 2025 01:11:21 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 140869 IP address blocks: 103.42.6.0/24 maxlen: 24 103.42.7.0/24 maxlen: 24 103.141.0.0/24 maxlen: 24 103.141.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 01:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B983, serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Validity Not Before: Dec 5 01:11:21 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69323138-ed58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9b:55:a6:96:dd:9d:9f:eb:59:b2:be:56:60: 14:e9:d4:0c:9a:69:67:b9:f6:69:fb:07:81:9a:d2: b9:35:e2:3a:25:8e:09:78:58:95:bc:23:6e:80:21: 97:65:b6:ec:04:a4:77:b5:16:bd:84:d9:9a:a5:34: 32:c2:f7:2b:08:64:b2:29:f9:25:80:db:97:4c:2c: d5:48:65:c2:2e:a5:2b:21:eb:87:82:a2:b9:32:56: 47:91:ef:36:75:b0:fb:bc:0e:ab:31:b0:cd:d6:f2: 0a:2f:0e:db:84:6b:f5:e5:2e:da:d3:2d:38:ac:a9: b9:9e:41:ad:e7:db:31:07:eb:22:a9:1d:ce:df:56: cf:d5:57:fe:92:68:93:37:18:3c:55:51:f8:86:22: 73:79:4c:1b:c5:cb:1f:68:63:8f:ef:80:43:fc:d7: fe:40:ac:c1:1e:4d:4b:61:93:da:02:d7:eb:14:e7: db:e6:2a:83:c4:3f:bb:b3:bc:83:1e:33:cf:96:4c: 91:8c:38:04:68:27:65:77:e4:d8:5e:c9:49:cf:d8: 88:bc:11:3c:36:ec:ed:e2:e8:17:63:b1:0d:00:58: 69:b3:4e:6b:05:10:42:97:8a:65:48:2f:6e:14:62: e4:4f:49:14:5b:57:1b:c1:3e:2b:f3:e6:36:a3:e8: 74:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:13:C2:3F:46:AB:4F:CD:7C:59:90:B4:0F:98:F7:8A:C4:D8:64:01 X509v3 Authority Key Identifier: keyid:9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/FD4E307AFEA711EDBC673B4BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.6.0/23 103.141.0.0/23 Signature Algorithm: sha256WithRSAEncryption 11:35:f8:81:8d:f4:26:e8:3f:ee:bd:17:7a:e2:4c:c9:a6:58: a7:91:57:08:69:21:b8:16:ab:9b:cc:9b:6a:1d:d5:e9:3f:81: 6f:3c:ea:c4:5c:47:39:46:aa:d2:f2:e3:b6:a6:d7:b5:fb:d3: dc:d6:7f:ac:fc:fc:bc:c5:05:92:1d:c2:aa:18:c4:b1:ed:71: 0d:a0:db:60:d4:9e:e5:8e:d5:5a:cf:d3:bf:24:1b:f6:d9:ab: c0:05:b4:c4:d6:92:06:00:28:99:bb:54:07:52:4b:2d:f8:2d: ba:7a:e9:2d:d3:63:78:4a:29:c7:e1:9d:f0:64:29:6f:da:e4: 19:64:07:4b:53:bd:dc:85:9e:a5:7b:6e:0a:17:7d:ea:ce:43: e3:14:5a:ab:d2:51:fe:f0:f4:ee:ec:f9:d3:43:99:b9:75:f7: 1f:3c:26:f4:bf:6e:70:ec:4e:48:04:5a:7d:ec:cb:70:07:21: e6:09:6a:3b:ad:17:83:6f:c1:86:02:bb:4b:0f:0c:d1:47:7a: e3:5e:aa:49:bd:6b:0e:6d:e3:a2:91:e1:be:32:13:69:02:ee: fb:d7:d9:f0:34:b4:23:96:3e:9b:41:45:ad:4f:0f:96:a6:3c: b3:79:f9:72:83:0e:6c:5b:d3:8b:5f:46:2f:da:9d:e0:70:38: 19:76:2e:24 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI5ODMxMTAvBgNVBAUTKDlGOEVEMUM1M0VFOTBEM0NBQzg0QTY0NzBDNEI3NTk0 QzU1NzVEODUwHhcNMjUxMjA1MDExMTIxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMyMzEzOC1lZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5tVppbdnZ/rWbK+VmAU6dQMmmlnufZp+weBmtK5NeI6JY4JeFiVvCNugCGX ZbbsBKR3tRa9hNmapTQywvcrCGSyKfklgNuXTCzVSGXCLqUrIeuHgqK5MlZHke82 dbD7vA6rMbDN1vIKLw7bhGv15S7a0y04rKm5nkGt59sxB+siqR3O31bP1Vf+kmiT Nxg8VVH4hiJzeUwbxcsfaGOP74BD/Nf+QKzBHk1LYZPaAtfrFOfb5iqDxD+7s7yD HjPPlkyRjDgEaCdld+TYXslJz9iIvBE8Nuzt4ugXY7ENAFhps05rBRBCl4plSC9u FGLkT0kUW1cbwT4r8+Y2o+h0hQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEETwj9G q0/NfFmQtA+Y94rE2GQBMB8GA1UdIwQYMBaAFJ+O0cU+6Q08rISmRwxLdZTFV12F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjk4My9FNkE4QUNFQ0ZF QTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERUeXNoS1pIREV0MWxNVlhY WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240N1J4VDdwRFR5c2hLWkhERXQxbE1WWFhZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkI5ODMvRTZBOEFDRUNGRUEyMTFFREFFRjI5MDQ3QzRGOUFFMDIvRkQ0RTMwN0FG RUE3MTFFREJDNjczQjRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnKgYDBAFnjQAwDQYJKoZIhvcNAQELBQADggEBABE1+IGN 9CboP+69F3riTMmmWKeRVwhpIbgWq5vMm2od1ek/gW886sRcRzlGqtLy47am17X7 09zWf6z8/LzFBZIdwqoYxLHtcQ2g22DUnuWO1VrP078kG/bZq8AFtMTWkgYAKJm7 VAdSSy34Lbp66S3TY3hKKcfhnfBkKW/a5BlkB0tTvdyFnqV7bgoXferOQ+MUWqvS Uf7w9O7s+dNDmbl19x88JvS/bnDsTkgEWn3sy3AHIeYJajutF4NvwYYCu0sPDNFH euNeqkm9aw5t46KR4b4yE2kC7vvX2fA0tCOWPptBRa1PD5amPLN5+XKDDmxb04tf Ri/aneBwOBl2LiQ= -----END CERTIFICATE-----Generated at Sun Dec 7 15:00:09 2025 by rpki-client