This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/5672783CBA2111F08A546E86C4F9AE02.roa File: 5672783CBA2111F08A546E86C4F9AE02.roa (raw, json) Hash identifier: hKmNb8cXZBZYEP/LnSxHf1U104+IEZAgDxNJ3uKpFbU= Subject key identifier: 88:3E:9F:D5:56:0E:02:39:AB:C2:DE:C3:80:61:47:6A:E8:4E:53:A1 Certificate issuer: /CN=A9134C75/serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F Certificate serial: 07 Authority key identifier: 3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/5672783CBA2111F08A546E86C4F9AE02.roa Signing time: Fri 07 Nov 2025 03:42:22 +0000 ROA not before: Fri 07 Nov 2025 03:42:22 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 55902 IP address blocks: 43.249.244.0/22 maxlen: 22 43.249.244.0/24 maxlen: 24 43.249.245.0/24 maxlen: 24 43.249.246.0/24 maxlen: 24 43.249.247.0/24 maxlen: 24 103.31.12.0/22 maxlen: 22 103.31.12.0/24 maxlen: 24 103.31.13.0/24 maxlen: 24 103.31.14.0/24 maxlen: 24 103.31.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134C75, serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F Validity Not Before: Nov 7 03:42:22 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690d6a9e-912f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6e:dc:73:ce:a5:f0:22:b7:03:71:ab:89:36: 09:e0:6e:ae:54:15:81:47:6b:21:19:12:50:43:01: d5:5d:9f:b9:96:d3:9e:af:66:ce:9d:d9:cf:c6:b8: da:54:8c:15:04:f5:47:46:93:d5:68:d4:36:51:d0: 0d:ac:1c:b9:00:51:c7:d5:d9:b8:ac:0c:28:d2:23: 97:b1:18:57:c4:84:07:e6:cc:8c:e9:68:bc:ca:1a: 2a:67:c1:85:e7:74:ef:aa:3d:6e:64:4e:d9:a0:c2: d4:3f:f0:31:54:97:da:98:05:4a:60:a9:e0:f9:13: 46:aa:a0:f0:1d:f7:ed:75:8c:8a:3a:2f:49:5c:a0: 83:ee:a5:8c:77:fd:a6:f3:13:d9:cb:6e:97:e0:18: d3:34:04:20:ad:40:0b:4c:f1:50:df:4b:dd:c3:7a: 4c:04:4e:05:8d:91:e6:78:09:a2:98:99:05:41:1d: e6:bb:bc:da:9e:71:45:47:39:c6:29:ef:22:85:0c: b7:f3:52:0e:40:49:15:69:b4:f0:d6:9b:e0:11:b5: 60:30:f8:a2:80:68:12:5e:20:97:c7:62:00:63:39: 5b:dd:86:b4:ca:04:00:68:fb:f0:c6:9e:c2:93:42: 49:bb:d2:49:f8:1e:32:6e:c8:16:28:e6:31:53:ca: d7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3E:9F:D5:56:0E:02:39:AB:C2:DE:C3:80:61:47:6A:E8:4E:53:A1 X509v3 Authority Key Identifier: keyid:3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/5672783CBA2111F08A546E86C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.244.0/22 103.31.12.0/22 Signature Algorithm: sha256WithRSAEncryption c2:7e:b7:b0:f4:2a:c3:17:b6:49:94:2c:d8:3b:f2:bd:98:93: 3e:17:6a:7d:52:77:07:db:5b:ab:d9:e9:33:93:2b:f5:15:0f: b5:39:76:0f:0e:14:60:9b:d6:f4:59:1a:dc:af:77:c7:64:c2: f4:d2:8f:4c:0b:c0:e6:0b:bd:3f:82:91:2f:be:bc:84:81:25: 2f:5a:c1:c8:1a:a6:54:37:d5:d8:3a:8b:9d:8e:93:ae:99:bb: 7e:c3:c7:da:cd:ce:63:6c:63:53:03:28:7c:35:a4:cb:46:cb: 4e:df:15:0f:6f:bf:28:63:82:e3:1e:55:3b:1a:f9:34:c0:84: 56:eb:0b:12:aa:18:14:5e:b2:5e:16:e2:bf:ea:62:09:c3:ba: b2:a5:a9:8a:70:e5:25:5d:4d:09:43:47:f7:42:fb:eb:4a:65: ae:16:b0:bf:2a:fe:75:89:9e:aa:57:b9:32:9d:de:81:80:cd: db:e7:2d:8c:b7:8a:c1:57:07:fa:2f:79:3e:36:5d:0b:2f:ae: 69:cc:55:45:00:d8:ca:d2:ae:0e:9c:42:a7:c7:cb:54:38:34: c5:11:95:8f:fe:a6:25:8b:27:16:89:74:c2:af:f1:b5:25:c7: 66:16:3a:ef:37:fa:fb:98:b3:7d:9d:79:bb:ff:4c:bd:d1:59: e4:f0:7d:be -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NEM3NTExMC8GA1UEBRMoM0M4RkI1RTBDQ0Y3RTEwNURGQ0NCQjRDOEY4MzU5RUY1 QTYxNUYxRjAeFw0yNTExMDcwMzQyMjJaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MGQ2YTllLTkxMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwbtxzzqXwIrcDcauJNgngbq5UFYFHayEZElBDAdVdn7mW056vZs6d2c/GuNpU jBUE9UdGk9Vo1DZR0A2sHLkAUcfV2bisDCjSI5exGFfEhAfmzIzpaLzKGipnwYXn dO+qPW5kTtmgwtQ/8DFUl9qYBUpgqeD5E0aqoPAd9+11jIo6L0lcoIPupYx3/abz E9nLbpfgGNM0BCCtQAtM8VDfS93DekwETgWNkeZ4CaKYmQVBHea7vNqecUVHOcYp 7yKFDLfzUg5ASRVptPDWm+ARtWAw+KKAaBJeIJfHYgBjOVvdhrTKBABo+/DGnsKT Qkm70kn4HjJuyBYo5jFTytd3AgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUiD6f1VYO Ajmrwt7DgGFHauhOU6EwHwYDVR0jBBgwFoAUPI+14Mz34QXfzLtMj4NZ71phXx8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0Qzc1LzBGODJGNTg0QkEx RjExRjA5RDlFMjUzQ0M0RjlBRTAyL1BJLTE0TXozNFFYZnpMdE1qNE5aNzFwaFh4 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEktMTRNejM0UVhmekx0TWo0Tlo3MXBoWHg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEM3NS8wRjgyRjU4NEJBMUYxMUYwOUQ5RTI1M0NDNEY5QUUwMi81NjcyNzgzQ0JB MjExMUYwOEE1NDZFODZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAiv59AMEAmcfDDANBgkqhkiG9w0BAQsFAAOCAQEAwn63sPQq wxe2SZQs2DvyvZiTPhdqfVJ3B9tbq9npM5Mr9RUPtTl2Dw4UYJvW9Fka3K93x2TC 9NKPTAvA5gu9P4KRL768hIElL1rByBqmVDfV2DqLnY6Trpm7fsPH2s3OY2xjUwMo fDWky0bLTt8VD2+/KGOC4x5VOxr5NMCEVusLEqoYFF6yXhbiv+piCcO6sqWpinDl JV1NCUNH90L760plrhawvyr+dYmeqle5Mp3egYDN2+ctjLeKwVcH+i95PjZdCy+u acxVRQDYytKuDpxCp8fLVDg0xRGVj/6mJYsnFol0wq/xtSXHZhY67zf6+5izfZ15 u/9MvdFZ5PB9vg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:14:29 2025 by rpki-client