This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/20AB43C81F9411F083A54B70C4F9AE02.roa File: 20AB43C81F9411F083A54B70C4F9AE02.roa (raw, json) Hash identifier: r1gO8CHVV6YzvfcJ2YEAEHZoT0CoCIzLPvtncbyeWbg= Subject key identifier: 3C:AD:63:43:66:7C:10:7B:EC:62:DC:3D:80:D2:2E:F4:C3:DF:C4:8C Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Certificate serial: 0F98 Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/20AB43C81F9411F083A54B70C4F9AE02.roa Signing time: Tue 11 Nov 2025 09:24:02 +0000 ROA not before: Tue 11 Nov 2025 09:24:02 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 132110 IP address blocks: 43.250.104.0/23 maxlen: 24 43.250.106.0/24 maxlen: 24 43.250.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3992 (0xf98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Validity Not Before: Nov 11 09:24:02 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=691300b2-9c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:62:ba:c0:4e:7a:45:3f:6a:3e:e8:ba:c4:50: a1:f4:43:5c:1d:68:d0:4e:44:08:6e:40:fb:0c:67: 8c:c4:0f:97:0d:a5:9d:22:c3:da:dc:60:6f:76:e0: 4d:36:91:3b:42:30:20:26:62:43:cf:78:5d:2a:12: dc:9c:6a:77:93:7f:b3:19:c6:2c:30:cf:97:f5:c3: 2f:b9:fd:59:61:28:9e:1d:73:05:5f:9b:99:d1:b2: 31:61:ed:8a:ad:a6:b3:9a:1d:13:83:42:8a:56:af: 3c:e0:02:81:80:ff:9e:7b:1a:d7:1d:1b:29:08:65: 1f:fd:55:71:a8:e5:a5:50:c2:f7:82:91:6a:b0:3f: af:75:30:c2:31:f7:9b:38:48:fc:27:bd:66:61:3b: 5a:04:ef:dd:16:ce:ef:a4:e0:6e:b4:70:1f:d1:4f: 0f:12:27:08:b7:c3:b2:e6:3a:ba:4b:af:19:3c:00: 82:14:c1:db:d5:90:ad:0d:ef:c1:ff:4d:4b:e7:ab: 9c:16:e7:2b:f7:eb:7f:c1:64:e9:26:1a:e1:c9:6f: 49:12:40:0b:1d:77:89:64:a1:69:9e:75:6d:53:67: 13:32:01:e9:00:19:80:61:24:7c:01:80:84:a0:16: 50:58:bd:4c:ca:d0:fa:8b:fc:6f:a3:e0:a6:6c:e3: ee:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AD:63:43:66:7C:10:7B:EC:62:DC:3D:80:D2:2E:F4:C3:DF:C4:8C X509v3 Authority Key Identifier: keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/20AB43C81F9411F083A54B70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.104.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:bc:7c:5b:f6:2c:b9:e9:d4:c3:4a:81:06:ff:b3:1e:c5:e4: a2:92:10:f3:cd:1b:d6:5a:59:52:20:6e:fe:b2:b2:9b:c3:e7: a7:f5:10:fc:c1:be:3e:3e:1a:8e:37:4b:14:1b:c7:54:64:5c: 1b:4d:77:7f:ce:8e:39:b8:bf:d4:8e:09:9c:ea:f4:0a:ec:d7: 6b:d9:82:dc:1a:d1:8c:fe:51:8d:0e:1a:7c:d2:2f:56:50:bb: b0:c8:a9:09:12:5d:9e:7e:56:45:3e:48:e3:a5:9a:ea:ea:54: 7d:df:4d:cd:ca:09:9f:26:5a:5f:d8:5c:18:7e:52:00:12:d8: f4:9e:b9:db:e8:fc:c4:db:d7:22:3e:e2:c8:a0:87:5c:51:63: 70:3d:fa:ca:41:51:a4:ea:4a:b6:82:76:89:17:f7:e5:43:9a: 4b:ad:eb:77:0a:ae:d2:40:e0:0b:2f:e8:15:cf:e9:a5:48:38: 2b:64:01:c6:58:d9:0b:7f:5e:79:ac:99:16:f3:c0:64:0a:44: 24:f3:a1:43:ed:44:57:fa:83:90:2d:8f:63:76:71:42:5d:03: ff:a4:f8:30:4d:74:34:28:b3:09:79:11:2c:50:47:af:68:50: 62:a5:22:af:19:98:fb:a1:d6:85:b0:5f:85:ae:2f:a1:02:75: cd:1c:2e:e1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICD5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC NTI3NzZGNzIwHhcNMjUxMTExMDkyNDAyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTEzMDBiMi05YzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGK6wE56RT9qPui6xFCh9ENcHWjQTkQIbkD7DGeMxA+XDaWdIsPa3GBvduBN NpE7QjAgJmJDz3hdKhLcnGp3k3+zGcYsMM+X9cMvuf1ZYSieHXMFX5uZ0bIxYe2K raazmh0Tg0KKVq884AKBgP+eexrXHRspCGUf/VVxqOWlUML3gpFqsD+vdTDCMfeb OEj8J71mYTtaBO/dFs7vpOButHAf0U8PEicIt8Oy5jq6S68ZPACCFMHb1ZCtDe/B /01L56ucFucr9+t/wWTpJhrhyW9JEkALHXeJZKFpnnVtU2cTMgHpABmAYSR8AYCE oBZQWL1MytD6i/xvo+CmbOPuoQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDytY0Nm fBB77GLcPYDSLvTD38SMMB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZCRkYvRTQyQkVBQzI5M0YwMTFFOUJDMENGRjcxQzRGOUFFMDIvMjBBQjQzQzgx Rjk0MTFGMDgzQTU0QjcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr+mgwDQYJKoZIhvcNAQELBQADggEBAJq8fFv2LLnp1MNK gQb/sx7F5KKSEPPNG9ZaWVIgbv6yspvD56f1EPzBvj4+Go43SxQbx1RkXBtNd3/O jjm4v9SOCZzq9Ars12vZgtwa0Yz+UY0OGnzSL1ZQu7DIqQkSXZ5+VkU+SOOlmurq VH3fTc3KCZ8mWl/YXBh+UgAS2PSeudvo/MTb1yI+4sigh1xRY3A9+spBUaTqSraC dokX9+VDmkut63cKrtJA4Asv6BXP6aVIOCtkAcZY2Qt/XnmsmRbzwGQKRCTzoUPt RFf6g5Atj2N2cUJdA/+k+DBNdDQoswl5ESxQR69oUGKlIq8ZmPuh1oWwX4WuL6EC dc0cLuE= -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:11 2025 by rpki-client