This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/2A03C2CEBEE011F08AE93C56C4F9AE02.roa File: 2A03C2CEBEE011F08AE93C56C4F9AE02.roa (raw, json) Hash identifier: uUszxvUkrwIpDzKco/U3eyxpAs8VyjPRgjFefdF5QYo= Subject key identifier: 00:24:8E:88:7B:86:75:39:8B:6E:CD:AA:5C:40:F7:68:28:4C:85:31 Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Certificate serial: 0F99 Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/2A03C2CEBEE011F08AE93C56C4F9AE02.roa Signing time: Tue 11 Nov 2025 09:24:04 +0000 ROA not before: Tue 11 Nov 2025 09:24:04 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 210110 IP address blocks: 103.232.212.0/24 maxlen: 24 103.232.213.0/24 maxlen: 24 2402:3180:8::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3993 (0xf99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Validity Not Before: Nov 11 09:24:04 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=691300b3-88fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c6:40:8b:72:97:71:93:de:9b:63:72:3c:e9: 29:32:9c:0a:d2:4a:d7:4e:5c:c2:ea:95:5e:a8:4c: be:fc:3e:0e:f9:d8:e1:24:16:e3:19:8f:c6:65:46: 5e:47:2f:d1:b1:72:e8:fe:51:9c:05:ad:17:f3:cb: 3c:96:d7:c2:fd:9b:f8:a7:75:0a:ff:10:c4:f7:9a: 9b:96:65:a5:46:65:c6:aa:56:57:80:e1:14:78:0f: f9:6b:b2:e3:39:fe:22:cf:14:67:c2:79:c1:02:7f: b0:96:39:4b:7d:7c:24:6a:6b:da:ca:35:8c:cd:9c: 49:ca:a9:51:30:8d:24:67:47:5c:17:f9:ff:e4:50: c4:1b:d7:54:8f:22:41:eb:5a:47:8f:cf:a7:92:a1: eb:8d:a1:54:21:a5:06:50:12:8c:b8:30:91:e0:32: 4b:65:8b:90:97:fd:d6:3f:e9:2c:99:06:8e:4a:06: fa:18:de:8d:7e:42:e4:73:30:b4:d0:fe:e5:ba:89: 4c:f0:e3:b2:63:57:d1:f1:e2:6a:53:ea:c8:70:98: c6:3a:26:ff:1f:09:cc:58:89:dc:d9:e8:80:90:26: b2:c8:be:df:49:ef:f7:5f:b5:aa:15:96:0a:33:c7: ee:8e:5b:cd:0a:f4:fe:e2:37:1b:79:31:5d:b5:4c: 6e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:24:8E:88:7B:86:75:39:8B:6E:CD:AA:5C:40:F7:68:28:4C:85:31 X509v3 Authority Key Identifier: keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/2A03C2CEBEE011F08AE93C56C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.232.212.0/23 IPv6: 2402:3180:8::/45 Signature Algorithm: sha256WithRSAEncryption a3:72:d1:e8:8b:4b:53:4d:a2:82:f7:b8:30:92:a2:59:65:84: 3a:01:8d:fa:60:8c:34:5f:df:2d:d2:32:9e:53:19:8f:ee:cd: a2:2c:d0:9c:3f:0f:cc:ed:02:9a:01:d8:29:1e:50:c3:1f:51: 2d:a8:8f:f5:cd:52:b5:ae:df:dd:b3:bc:55:a9:bb:ab:1e:9c: ec:ce:78:5b:c2:b1:1a:07:7f:48:4c:f4:71:dd:8e:07:68:45: a8:5f:d2:d6:c1:d6:aa:2e:40:a6:2d:95:41:f0:31:6e:0c:65: 0e:07:5a:c7:f5:b3:64:ea:e5:3b:6e:8c:9f:9b:f4:d6:00:e3: b2:82:cc:c4:dd:12:39:41:0b:4e:9b:16:8f:5f:97:d0:06:fd: b9:e8:18:27:62:41:9c:c9:0a:0d:7d:7c:f4:39:c5:2e:3c:df: 19:c2:2e:6c:97:1a:53:81:6c:0f:cd:d0:9c:80:d6:66:f0:d6: 79:ce:bc:51:f4:4f:50:4b:dd:32:fb:b3:c4:5a:ca:6a:61:59: a2:60:99:40:74:15:8d:88:c5:cc:93:1c:68:35:1e:64:3f:ba: d4:a9:0b:17:db:ec:e9:87:fe:d2:75:32:12:12:de:c2:18:3a: e4:37:aa:d5:10:fd:07:b2:3f:3b:eb:ba:5d:6b:7b:4a:53:1e: 35:d7:b5:e2 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICD5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC NTI3NzZGNzIwHhcNMjUxMTExMDkyNDA0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTEzMDBiMy04OGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8ZAi3KXcZPem2NyPOkpMpwK0krXTlzC6pVeqEy+/D4O+djhJBbjGY/GZUZe Ry/RsXLo/lGcBa0X88s8ltfC/Zv4p3UK/xDE95qblmWlRmXGqlZXgOEUeA/5a7Lj Of4izxRnwnnBAn+wljlLfXwkamvayjWMzZxJyqlRMI0kZ0dcF/n/5FDEG9dUjyJB 61pHj8+nkqHrjaFUIaUGUBKMuDCR4DJLZYuQl/3WP+ksmQaOSgb6GN6NfkLkczC0 0P7luolM8OOyY1fR8eJqU+rIcJjGOib/HwnMWInc2eiAkCayyL7fSe/3X7WqFZYK M8fujlvNCvT+4jcbeTFdtUxuowIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAAkjoh7 hnU5i27NqlxA92goTIUxMB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZCRkYvRTQyQkVBQzI5M0YwMTFFOUJDMENGRjcxQzRGOUFFMDIvMkEwM0MyQ0VC RUUwMTFGMDhBRTkzQzU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFn6NQwDwQCAAIwCQMHAyQCMYAACDANBgkqhkiG9w0BAQsF AAOCAQEAo3LR6ItLU02igve4MJKiWWWEOgGN+mCMNF/fLdIynlMZj+7NoizQnD8P zO0CmgHYKR5Qwx9RLaiP9c1Sta7f3bO8Vam7qx6c7M54W8KxGgd/SEz0cd2OB2hF qF/S1sHWqi5Api2VQfAxbgxlDgdax/WzZOrlO26Mn5v01gDjsoLMxN0SOUELTpsW j1+X0Ab9uegYJ2JBnMkKDX189DnFLjzfGcIubJcaU4FsD83QnIDWZvDWec68UfRP UEvdMvuzxFrKamFZomCZQHQVjYjFzJMcaDUeZD+61KkLF9vs6Yf+0nUyEhLewhg6 5Deq1RD9B7I/O+u6XWt7SlMeNde14g== -----END CERTIFICATE-----Generated at Sat Dec 6 18:22:47 2025 by rpki-client