This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/2FF7E9A600BB11EA895E5253C4F9AE02.roa File: 2FF7E9A600BB11EA895E5253C4F9AE02.roa (raw, json) Hash identifier: mZM0zWOIX0nGEpyDG7PyWk/q1r9WRDMbkBj3OfFE2JA= Subject key identifier: 6D:BD:D8:5F:B2:86:8E:26:25:30:A7:19:04:72:E0:86:E0:54:8E:A9 Certificate issuer: /CN=A9142A39/serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28 Certificate serial: 2A26 Authority key identifier: 27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/2FF7E9A600BB11EA895E5253C4F9AE02.roa Signing time: Sun 02 Nov 2025 16:02:19 +0000 ROA not before: Sun 02 Nov 2025 16:02:19 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133155 IP address blocks: 103.253.38.0/23 maxlen: 23 103.253.38.0/24 maxlen: 24 103.253.39.0/24 maxlen: 24 2001:df7:d000::/47 maxlen: 47 2001:df7:d000::/48 maxlen: 48 2001:df7:d001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10790 (0x2a26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A39, serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28 Validity Not Before: Nov 2 16:02:19 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6907808a-75b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:78:a0:bb:75:52:a2:2e:aa:97:7d:95:72: ab:9f:63:b0:f0:87:41:a7:a9:a0:fb:b9:88:dc:82: a1:92:42:c0:94:6b:bf:e4:5c:1f:2c:24:c2:b7:ef: 4f:cc:06:fc:de:4f:47:0e:74:75:bf:ce:30:7b:29: 60:74:38:dd:13:83:55:f0:e5:4d:3d:4d:53:0a:1c: bc:bc:3c:f9:c5:9b:a8:ca:a7:08:25:75:3d:7a:05: 71:16:cd:22:85:3f:d4:2a:94:98:9a:aa:db:5e:c6: 7a:36:39:be:5b:ad:af:0a:3f:b3:e7:63:35:ee:77: ff:7e:51:69:15:80:80:8c:44:bc:3a:f5:53:85:54: b5:da:41:63:0b:0c:57:ae:3b:67:38:d2:03:53:85: 54:8e:18:56:9d:34:24:a1:d3:ee:1b:f6:13:39:99: 17:1f:1a:8b:36:a7:4d:75:0d:b4:48:50:a6:44:f5: f1:6a:be:51:ce:44:01:e2:c6:69:8b:bc:fa:fd:ec: c7:00:bf:fd:15:a4:64:cb:4f:d5:b5:9d:ab:77:a9: 0e:30:f5:1f:21:50:40:2b:b2:60:91:99:04:63:5a: de:e5:3f:66:4c:67:fc:de:c6:00:f0:a2:36:cd:40: 45:e2:d1:e4:bb:4a:1f:39:ae:5e:fb:12:3f:ef:c7: 70:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BD:D8:5F:B2:86:8E:26:25:30:A7:19:04:72:E0:86:E0:54:8E:A9 X509v3 Authority Key Identifier: keyid:27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/2FF7E9A600BB11EA895E5253C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.253.38.0/23 IPv6: 2001:df7:d000::/47 Signature Algorithm: sha256WithRSAEncryption 54:55:6d:bd:0a:5f:96:89:64:67:91:05:2c:56:d4:b7:a3:11: 95:b0:f5:a5:f0:71:a9:30:29:7d:fd:1c:35:41:21:3a:4d:50: b0:41:b7:30:60:e9:e3:16:07:13:83:21:73:6d:b6:c1:d2:be: 29:2b:38:0d:95:39:16:65:02:0f:e6:b4:bd:4b:6f:c9:99:72: 51:41:11:c5:33:f9:7f:7e:20:6d:1a:cc:0c:4d:0c:dd:8f:2c: 98:03:f0:63:82:e0:b9:f8:30:2c:e9:fb:53:81:a1:59:ed:b9: f0:e4:6a:c7:1b:d0:fc:5b:99:ee:a2:9c:9b:05:b6:b9:fb:48: 52:e2:77:2b:85:d2:89:3c:e6:63:00:1f:3c:1c:dd:db:ee:39: 20:17:ab:a8:7f:dc:99:09:94:87:89:06:7d:48:43:80:50:8c: 1d:78:cf:23:b9:74:81:11:e8:ff:71:7f:3c:ff:75:18:53:72: cf:83:13:b7:c4:16:c8:b0:d0:43:f3:80:e3:c3:ef:db:54:c9: d9:10:56:23:f3:d4:6b:6f:50:fd:16:a4:71:0c:d7:ed:49:88: c6:59:bd:df:52:bb:dc:2a:8c:24:89:9c:93:84:0f:70:81:c7: 2b:28:99:c6:90:81:fc:16:1d:1f:e0:f3:c3:41:f3:93:5e:44: ef:c3:71:42 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICKiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMzkxMTAvBgNVBAUTKDI3MzJBOTlBODYzQkQ2MjAzQ0Q5MTVDRDcyNTdCNUQx RDk4N0VCMjgwHhcNMjUxMTAyMTYwMjE5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3ODA4YS03NWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8N4oLt1UqIuqpd9lXKrn2Ow8IdBp6mg+7mI3IKhkkLAlGu/5FwfLCTCt+9P zAb83k9HDnR1v84weylgdDjdE4NV8OVNPU1TChy8vDz5xZuoyqcIJXU9egVxFs0i hT/UKpSYmqrbXsZ6Njm+W62vCj+z52M17nf/flFpFYCAjES8OvVThVS12kFjCwxX rjtnONIDU4VUjhhWnTQkodPuG/YTOZkXHxqLNqdNdQ20SFCmRPXxar5RzkQB4sZp i7z6/ezHAL/9FaRky0/VtZ2rd6kOMPUfIVBAK7JgkZkEY1re5T9mTGf83sYA8KI2 zUBF4tHku0ofOa5e+xI/78dwHwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFG292F+y ho4mJTCnGQRy4IbgVI6pMB8GA1UdIwQYMBaAFCcyqZqGO9YgPNkVzXJXtdHZh+so MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkEzOS9BNjU5NDlCMjNC QzQxMUU0QjVBNjNFM0JDNEY5QUUwMi9KektwbW9ZNzFpQTgyUlhOY2xlMTBkbUg2 eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p6S3Btb1k3MWlBODJSWE5jbGUxMGRtSDZ5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDJBMzkvQTY1OTQ5QjIzQkM0MTFFNEI1QTYzRTNCQzRGOUFFMDIvMkZGN0U5QTYw MEJCMTFFQTg5NUU1MjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFn/SYwDwQCAAIwCQMHASABDffQADANBgkqhkiG9w0BAQsF AAOCAQEAVFVtvQpflolkZ5EFLFbUt6MRlbD1pfBxqTApff0cNUEhOk1QsEG3MGDp 4xYHE4Mhc222wdK+KSs4DZU5FmUCD+a0vUtvyZlyUUERxTP5f34gbRrMDE0M3Y8s mAPwY4LgufgwLOn7U4GhWe258ORqxxvQ/FuZ7qKcmwW2uftIUuJ3K4XSiTzmYwAf PBzd2+45IBerqH/cmQmUh4kGfUhDgFCMHXjPI7l0gRHo/3F/PP91GFNyz4MTt8QW yLDQQ/OA48Pv21TJ2RBWI/PUa29Q/RakcQzX7UmIxlm931K73CqMJImck4QPcIHH KyiZxpCB/BYdH+Dzw0Hzk15E78NxQg== -----END CERTIFICATE-----Generated at Sun Dec 7 06:55:04 2025 by rpki-client