This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/2EEE5DDCB88011EB9C88057CC4F9AE02.roa File: 2EEE5DDCB88011EB9C88057CC4F9AE02.roa (raw, json) Hash identifier: SWfmHsYgLeX6Ajo70XLTCcdA8vnlSbHKd4shqjdVG6s= Subject key identifier: E4:A0:8E:E3:0A:47:9B:5C:32:89:3D:15:A5:65:6B:87:65:57:DC:D8 Certificate issuer: /CN=A912BCCF/serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B Certificate serial: 07C8 Authority key identifier: 8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/2EEE5DDCB88011EB9C88057CC4F9AE02.roa Signing time: Sat 08 Nov 2025 20:41:16 +0000 ROA not before: Sat 08 Nov 2025 20:41:16 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 133096 IP address blocks: 43.249.200.0/22 maxlen: 22 43.249.203.0/24 maxlen: 24 103.242.244.0/22 maxlen: 22 103.242.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1992 (0x7c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BCCF, serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B Validity Not Before: Nov 8 20:41:16 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690faaec-b8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d9:f4:b2:14:a7:0d:bb:82:5d:b7:03:f5:83: a0:af:e0:18:d2:22:4b:2c:42:01:b7:18:04:24:2a: 53:e1:a9:ea:14:77:53:ab:b0:35:7f:86:55:ea:d5: 07:b6:f8:9b:24:2a:ad:c7:ee:62:65:9a:5c:ae:2b: a6:27:00:17:a5:16:92:e5:d0:fb:35:64:5e:d6:56: cd:eb:d7:68:f6:ee:dc:85:65:08:50:ad:21:70:69: d9:6b:f3:cd:c4:74:97:55:60:19:0c:f2:5e:a7:ea: e1:e2:42:66:98:d5:a5:18:1b:b7:d3:60:ee:ed:ee: 42:5b:8d:0c:da:85:63:84:43:99:31:10:dc:73:4f: 20:f3:63:5d:ad:f6:61:42:c8:c2:90:3f:9d:13:8e: 4d:ba:46:eb:5e:99:0c:0f:33:4d:4d:3e:08:31:8a: 66:33:54:40:03:4a:19:4f:cd:cf:99:0e:64:fb:60: b0:a9:58:a5:83:14:c5:49:79:aa:18:ab:67:e6:46: 73:30:3c:83:6e:84:c6:b8:9d:3a:88:a3:1b:94:68: d9:7c:e9:89:8b:ef:ea:89:40:28:be:4d:be:46:0c: 46:f1:d5:05:73:a8:dd:6c:9a:47:72:32:00:3e:ac: 60:dc:6e:64:21:a8:ac:72:46:3e:7f:40:ca:71:87: d4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A0:8E:E3:0A:47:9B:5C:32:89:3D:15:A5:65:6B:87:65:57:DC:D8 X509v3 Authority Key Identifier: keyid:8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/2EEE5DDCB88011EB9C88057CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.200.0/22 103.242.244.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:56:ec:ac:ac:66:1d:64:94:16:9b:df:2c:bd:94:1d:ae:58: 6d:a2:15:91:6a:a4:ff:80:e1:9a:dd:da:a1:93:f0:97:3f:2e: ed:fb:86:ef:3e:16:7e:11:a8:97:50:85:bf:72:cf:34:4e:d4: 0e:63:95:7f:ea:08:11:78:2c:5d:d1:b0:b1:1a:77:49:8c:82: 28:ba:83:a4:54:1c:71:03:4a:ce:55:e4:0f:0b:ad:5a:12:22: 70:7c:46:99:5f:53:74:aa:ed:d7:bf:ad:4c:c6:e2:d0:11:d2: 6e:f7:fd:09:d5:ac:89:06:03:38:40:d8:fe:cf:65:13:a7:d0: a5:5f:08:ba:11:66:23:f0:1d:6c:21:3b:f7:1f:51:4d:4a:d0: a4:5e:44:bd:0d:a2:b5:6b:c9:40:c2:ea:5a:4d:ac:d1:9c:c0: cb:4e:31:7b:c1:f7:1b:ac:9f:9b:df:d7:cd:e8:e0:2d:4a:39: 32:8c:17:32:6a:fc:3d:95:6e:86:78:76:97:47:a8:71:5a:44: a9:d9:7f:9d:43:f1:f5:90:33:86:1d:4f:29:bb:dd:81:4a:ab: c4:fb:98:23:93:de:69:6c:be:0b:c6:6f:38:45:54:13:6d:d3: 1b:22:87:68:54:0d:56:fb:99:86:31:93:e2:b9:40:1e:c2:8e: cc:9d:b5:b6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICB8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDQ0YxMTAvBgNVBAUTKDhCRDg3OTlEQ0JBNzU3QzVCNDU4RDY2RTM5QzYwQzlD QTNGNzlBNkIwHhcNMjUxMTA4MjA0MTE2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBmYWFlYy1iOGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtn0shSnDbuCXbcD9YOgr+AY0iJLLEIBtxgEJCpT4anqFHdTq7A1f4ZV6tUH tvibJCqtx+5iZZpcriumJwAXpRaS5dD7NWRe1lbN69do9u7chWUIUK0hcGnZa/PN xHSXVWAZDPJep+rh4kJmmNWlGBu302Du7e5CW40M2oVjhEOZMRDcc08g82NdrfZh QsjCkD+dE45NukbrXpkMDzNNTT4IMYpmM1RAA0oZT83PmQ5k+2CwqVilgxTFSXmq GKtn5kZzMDyDboTGuJ06iKMblGjZfOmJi+/qiUAovk2+RgxG8dUFc6jdbJpHcjIA Pqxg3G5kIaisckY+f0DKcYfUdQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOSgjuMK R5tcMok9FaVla4dlV9zYMB8GA1UdIwQYMBaAFIvYeZ3Lp1fFtFjWbjnGDJyj95pr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNDRi82NDI0RTE2MDE5 MDcxMUVCQUY0NjhEMkJDNEY5QUUwMi9pOWg1bmN1blY4VzBXTlp1T2NZTW5LUDNt bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k5aDVuY3VuVjhXMFdOWnVPY1lNbktQM21tcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkJDQ0YvNjQyNEUxNjAxOTA3MTFFQkFGNDY4RDJCQzRGOUFFMDIvMkVFRTVERENC ODgwMTFFQjlDODgwNTdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr+cgDBAJn8vQwDQYJKoZIhvcNAQELBQADggEBAEpW7Kys Zh1klBab3yy9lB2uWG2iFZFqpP+A4Zrd2qGT8Jc/Lu37hu8+Fn4RqJdQhb9yzzRO 1A5jlX/qCBF4LF3RsLEad0mMgii6g6RUHHEDSs5V5A8LrVoSInB8RplfU3Sq7de/ rUzG4tAR0m73/QnVrIkGAzhA2P7PZROn0KVfCLoRZiPwHWwhO/cfUU1K0KReRL0N orVryUDC6lpNrNGcwMtOMXvB9xusn5vf183o4C1KOTKMFzJq/D2VboZ4dpdHqHFa RKnZf51D8fWQM4YdTym73YFKq8T7mCOT3mlsvgvGbzhFVBNt0xsih2hUDVb7mYYx k+K5QB7CjsydtbY= -----END CERTIFICATE-----Generated at Sun Dec 7 04:16:59 2025 by rpki-client