This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/3C48E7BECA0E11F0B519EA6AC4F9AE02.roa File: 3C48E7BECA0E11F0B519EA6AC4F9AE02.roa (raw, json) Hash identifier: 6C2XdU8buaTolYWVi2wUw72c3AjLoAvMHOiZ1E1mGPM= Subject key identifier: 6C:6C:40:51:E9:93:8D:DD:4E:C5:4B:AA:68:8D:0F:57:3D:80:05:5D Certificate issuer: /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Certificate serial: 0C71 Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/3C48E7BECA0E11F0B519EA6AC4F9AE02.roa Signing time: Tue 25 Nov 2025 14:51:34 +0000 ROA not before: Tue 25 Nov 2025 14:51:34 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138192 IP address blocks: 103.129.212.0/22 maxlen: 24 2403:88c0::/32 maxlen: 36 2403:88c0::/48 maxlen: 48 2403:88c0:1::/48 maxlen: 48 2403:88c0:a::/48 maxlen: 48 2403:88c0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3185 (0xc71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E4AA, serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Validity Not Before: Nov 25 14:51:34 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6925c276-bcb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a5:25:2c:42:79:9b:fb:8f:3f:21:45:4c:a0: 4b:89:07:7b:00:b2:9d:b0:87:87:0c:73:4e:f6:80: c4:42:a9:42:81:b6:9b:54:0a:b5:c1:bc:61:9f:62: ab:7e:c4:fe:d7:74:ae:b7:5a:7c:63:5d:35:48:c2: 71:9e:48:4f:1f:86:39:9c:47:f6:81:4d:18:7c:1f: 45:ae:e4:fb:bd:0c:3e:2a:0c:de:ca:0a:94:8f:ef: 36:58:f9:85:29:c2:5a:5b:95:82:9a:0d:88:cc:a6: d6:38:cb:9f:76:08:e6:a9:94:67:64:f9:77:8f:0c: 69:07:c6:83:f0:15:c7:01:d3:97:78:95:03:b6:60: 06:6f:7b:84:31:65:06:5e:30:97:20:28:f7:46:e2: b7:9c:c2:27:d8:a1:02:68:01:10:0b:30:07:6a:86: f6:ef:32:8c:72:dc:8e:af:2d:4e:32:86:5d:2f:bd: c2:79:2b:d5:9c:52:a6:3b:7a:6e:bd:fc:1f:a8:16: 19:2d:f4:5f:4f:95:08:52:cc:b9:15:b6:4f:a8:53: 52:7e:fc:a4:5f:55:70:52:a6:b3:a1:a0:b6:32:ef: a2:cb:79:96:e9:ce:cf:6c:08:d9:cc:49:a6:fb:0b: 47:d6:cf:e9:de:fd:ea:0d:71:63:1f:8b:72:93:f8: 1f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6C:40:51:E9:93:8D:DD:4E:C5:4B:AA:68:8D:0F:57:3D:80:05:5D X509v3 Authority Key Identifier: keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/3C48E7BECA0E11F0B519EA6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.129.212.0/22 IPv6: 2403:88c0::/32 Signature Algorithm: sha256WithRSAEncryption 50:cd:83:36:fb:63:60:0a:32:a2:32:cf:42:9d:e8:47:b1:ce: 09:b1:83:cf:62:3a:b1:51:25:60:c4:27:e8:26:ca:29:35:85: 46:2e:9e:82:50:31:1c:bc:f5:74:b4:d9:fd:c7:e1:93:86:dc: 61:b0:4a:95:d3:16:96:a5:49:a9:c6:bc:13:a4:b4:a6:ff:ea: 03:73:6c:3f:e2:57:d2:c6:cf:8b:7c:2a:6d:6f:12:55:a5:58: 34:da:16:c6:20:67:51:57:6d:6d:e9:cc:7d:03:a4:57:19:68: 41:cb:8c:4c:50:79:b0:83:d5:0b:9c:e1:25:d2:6d:7b:03:54: 39:91:b1:cf:72:27:6c:c4:90:0b:f3:c4:36:bc:95:b7:b3:fe: 09:b0:09:15:89:41:9a:cb:dc:48:b8:ff:65:e1:d1:00:f9:a9: 9c:69:23:7e:e3:48:af:89:c5:c0:ee:2e:0a:33:24:53:d1:2d: c8:de:8a:c2:cd:94:84:93:0e:40:d0:32:17:e2:3d:53:d7:d3: 13:eb:b5:40:27:c3:f2:c4:51:e1:f7:df:d3:0b:36:c2:7f:11: b9:4f:01:9d:62:ce:37:d1:d0:87:5a:73:42:f3:1d:0e:9d:0d: 46:36:53:0a:e3:64:70:24:f0:60:dc:f8:d0:2e:88:59:b9:82: 59:8a:c1:6d -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U0QUExMTAvBgNVBAUTKDYzODgzRTRDQTJDOEU3REREQUMzOTg3RTQ4NEZEMUQ2 NzJEOTM5NDkwHhcNMjUxMTI1MTQ1MTM0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI1YzI3Ni1iY2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqUlLEJ5m/uPPyFFTKBLiQd7ALKdsIeHDHNO9oDEQqlCgbabVAq1wbxhn2Kr fsT+13Sut1p8Y101SMJxnkhPH4Y5nEf2gU0YfB9FruT7vQw+KgzeygqUj+82WPmF KcJaW5WCmg2IzKbWOMufdgjmqZRnZPl3jwxpB8aD8BXHAdOXeJUDtmAGb3uEMWUG XjCXICj3RuK3nMIn2KECaAEQCzAHaob27zKMctyOry1OMoZdL73CeSvVnFKmO3pu vfwfqBYZLfRfT5UIUsy5FbZPqFNSfvykX1VwUqazoaC2Mu+iy3mW6c7PbAjZzEmm +wtH1s/p3v3qDXFjH4tyk/gfRQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGxsQFHp k43dTsVLqmiND1c9gAVdMB8GA1UdIwQYMBaAFGOIPkyiyOfd2sOYfkhP0dZy2TlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTRBQS82NzRDQTI5RTEx REIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5M2F3NWgtU0VfUjFuTFpP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k0Zy1US0xJNTkzYXc1aC1TRV9SMW5MWk9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0U0QUEvNjc0Q0EyOUUxMURCMTFFQUJGNDVEQTU1QzRGOUFFMDIvM0M0OEU3QkVD QTBFMTFGMEI1MTlFQTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJngdQwDQQCAAIwBwMFACQDiMAwDQYJKoZIhvcNAQELBQAD ggEBAFDNgzb7Y2AKMqIyz0Kd6Eexzgmxg89iOrFRJWDEJ+gmyik1hUYunoJQMRy8 9XS02f3H4ZOG3GGwSpXTFpalSanGvBOktKb/6gNzbD/iV9LGz4t8Km1vElWlWDTa FsYgZ1FXbW3pzH0DpFcZaEHLjExQebCD1Quc4SXSbXsDVDmRsc9yJ2zEkAvzxDa8 lbez/gmwCRWJQZrL3Ei4/2Xh0QD5qZxpI37jSK+JxcDuLgozJFPRLcjeisLNlIST DkDQMhfiPVPX0xPrtUAnw/LEUeH339MLNsJ/EblPAZ1izjfR0Idac0LzHQ6dDUY2 UwrjZHAk8GDc+NAuiFm5glmKwW0= -----END CERTIFICATE-----Generated at Sun Dec 7 05:24:11 2025 by rpki-client