This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/20FA35820DD811F08B2CB42FC4F9AE02.roa File: 20FA35820DD811F08B2CB42FC4F9AE02.roa (raw, json) Hash identifier: MFGsF5s0PywfTQyvPPsd0Or8v7E52MYn4RYdbArMgM4= Subject key identifier: 76:36:35:3D:54:DA:00:B9:66:46:FB:68:34:91:18:CF:BA:8C:DC:87 Certificate issuer: /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812 Certificate serial: 1289 Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/20FA35820DD811F08B2CB42FC4F9AE02.roa Signing time: Sun 16 Nov 2025 16:35:44 +0000 ROA not before: Sun 16 Nov 2025 16:35:44 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 63150 IP address blocks: 103.102.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4745 (0x1289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A8A4, serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812 Validity Not Before: Nov 16 16:35:44 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6919fd60-83a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3e:9d:22:c3:f9:46:21:20:80:ae:07:17:4c: 6d:79:cd:b7:53:23:2e:27:ae:f7:bc:b1:e8:34:10: a3:c7:d1:90:e5:cb:db:1f:1e:4f:c9:b3:3d:92:73: ee:b9:eb:b1:32:2c:98:dc:51:11:8d:03:c4:f4:c0: bb:c1:c1:de:0c:0c:51:1a:18:a1:85:ff:76:ef:ee: 56:07:9e:64:84:33:b7:38:46:4f:a3:b2:c1:d9:37: dd:fb:8e:54:0d:7c:9d:6d:8c:10:4b:9d:aa:b7:2a: 9d:f7:bf:aa:b6:6c:f4:d9:9a:71:de:06:43:9c:dd: 1a:a9:c3:46:f5:2c:0a:7e:f9:cd:d2:98:e6:de:ef: 94:86:fc:ac:53:11:b9:89:a2:ec:9b:38:c5:ae:df: 4b:0c:ca:18:f1:8d:1d:18:d6:13:ff:f3:ec:75:32: fe:15:a5:11:4b:ae:c1:26:7d:d9:34:47:1e:9b:70: 1d:97:d3:e3:34:30:2e:11:6e:e1:db:48:ca:75:26: f5:44:99:2a:71:5c:75:5c:5f:cf:3d:28:a8:e5:b5: 8f:48:78:ad:07:1b:48:85:c0:af:7e:43:7d:a9:9d: 55:bd:89:53:4c:c2:51:0e:d8:7e:ca:26:b8:b0:ff: 25:9b:d4:5c:ce:bb:56:36:a5:66:6c:a4:6e:4d:1d: cb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:36:35:3D:54:DA:00:B9:66:46:FB:68:34:91:18:CF:BA:8C:DC:87 X509v3 Authority Key Identifier: keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/20FA35820DD811F08B2CB42FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.102.4.0/22 Signature Algorithm: sha256WithRSAEncryption 61:01:39:6c:d7:97:96:13:1d:f1:3e:45:27:8e:77:a2:29:5b: 1a:24:38:17:91:68:dd:be:ce:a7:c3:8b:4d:3c:ca:9e:86:81: b1:f8:4a:c8:c9:09:c7:8c:19:2e:7f:fc:b7:0a:03:ec:8a:81: 14:53:4a:c1:3c:1d:9b:b4:b8:67:03:d9:66:56:65:78:47:e4: 50:69:f5:db:a0:61:8c:29:0a:17:ec:65:18:ec:0f:eb:d6:a5: 9f:54:7b:9e:32:7e:14:8b:3d:58:16:4c:ce:bf:32:b6:49:3f: 5d:93:17:36:5e:30:2d:fd:06:94:12:d0:0b:a8:35:75:e4:ad: fb:ed:19:a0:57:11:35:32:a0:55:fd:29:ff:38:72:0b:88:38: 44:74:e0:97:d1:23:e9:35:53:6a:e4:6a:ed:9b:3b:08:b7:b8: 67:a9:fe:02:52:4e:1a:4c:6a:8d:6f:11:9f:ce:91:13:22:da: 49:93:91:4a:b1:c9:2e:32:80:77:19:b8:b8:dc:d1:ba:e0:2b: 84:b2:4f:15:b4:a1:04:56:92:f9:c3:8c:19:88:54:c9:66:fe: 15:c4:da:17:70:a7:28:08:af:c4:bb:0a:dc:1d:e9:f4:20:9f: d8:a3:2f:75:3f:dc:f6:e1:27:c4:49:cf:a5:d4:2b:a5:cb:ed: d9:a9:2f:4d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E4QTQxMTAvBgNVBAUTKDREMTc2QTBCNDU3QTZFNTY5NUQzN0E3RUNCOERDQjNB NzNDQjQ4MTIwHhcNMjUxMTE2MTYzNTQ0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE5ZmQ2MC04M2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxT6dIsP5RiEggK4HF0xtec23UyMuJ673vLHoNBCjx9GQ5cvbHx5PybM9knPu ueuxMiyY3FERjQPE9MC7wcHeDAxRGhihhf927+5WB55khDO3OEZPo7LB2Tfd+45U DXydbYwQS52qtyqd97+qtmz02Zpx3gZDnN0aqcNG9SwKfvnN0pjm3u+UhvysUxG5 iaLsmzjFrt9LDMoY8Y0dGNYT//PsdTL+FaURS67BJn3ZNEcem3Adl9PjNDAuEW7h 20jKdSb1RJkqcVx1XF/PPSio5bWPSHitBxtIhcCvfkN9qZ1VvYlTTMJRDth+yia4 sP8lm9RczrtWNqVmbKRuTR3LtQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHY2NT1U 2gC5Zkb7aDSRGM+6jNyHMB8GA1UdIwQYMBaAFE0XagtFem5WldN6fsuNyzpzy0gS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQThBNC83OTBFNjEwQ0U5 QzMxMUU4QTlDRUQ2NDhDNEY5QUUwMi9UUmRxQzBWNmJsYVYwM3AteTQzTE9uUExT QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSZHFDMFY2YmxhVjAzcC15NDNMT25QTFNCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0E4QTQvNzkwRTYxMENFOUMzMTFFOEE5Q0VENjQ4QzRGOUFFMDIvMjBGQTM1ODIw REQ4MTFGMDhCMkNCNDJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnZgQwDQYJKoZIhvcNAQELBQADggEBAGEBOWzXl5YTHfE+ RSeOd6IpWxokOBeRaN2+zqfDi008yp6GgbH4SsjJCceMGS5//LcKA+yKgRRTSsE8 HZu0uGcD2WZWZXhH5FBp9dugYYwpChfsZRjsD+vWpZ9Ue54yfhSLPVgWTM6/MrZJ P12TFzZeMC39BpQS0AuoNXXkrfvtGaBXETUyoFX9Kf84cguIOER04JfRI+k1U2rk au2bOwi3uGep/gJSThpMao1vEZ/OkRMi2kmTkUqxyS4ygHcZuLjc0brgK4SyTxW0 oQRWkvnDjBmIVMlm/hXE2hdwpygIr8S7Ctwd6fQgn9ijL3U/3PbhJ8RJz6XUK6XL 7dmpL00= -----END CERTIFICATE-----Generated at Sat Dec 6 20:06:55 2025 by rpki-client