This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/800676321BD311EAA341A62DC4F9AE02.roa File: 800676321BD311EAA341A62DC4F9AE02.roa (raw, json) Hash identifier: aUyXUaqCNsH6HYXJXGaaJ8mNYQlTWyCTAV55+fIoheQ= Subject key identifier: FA:C5:EB:C1:63:1A:45:6C:B3:20:67:D9:A9:A5:17:48:2D:F6:BC:72 Certificate issuer: /CN=A914877B/serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9 Certificate serial: 0C2D Authority key identifier: 7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/800676321BD311EAA341A62DC4F9AE02.roa Signing time: Thu 20 Nov 2025 18:09:16 +0000 ROA not before: Thu 20 Nov 2025 18:09:16 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 55854 IP address blocks: 103.237.132.0/24 maxlen: 24 103.237.133.0/24 maxlen: 24 103.241.105.0/24 maxlen: 24 202.74.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3117 (0xc2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914877B, serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9 Validity Not Before: Nov 20 18:09:16 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691f594c-e941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:24:16:8c:47:91:25:d1:11:10:6a:78:58:82: 4c:f5:35:1e:8f:ba:64:98:a5:67:46:f2:03:32:67: 30:77:81:d4:cd:ad:3e:2d:6c:1a:5c:99:5b:9f:af: db:2c:3b:87:d3:95:71:7e:aa:64:bb:05:23:ca:af: 83:0e:73:dd:1e:0c:ea:51:40:e7:73:4b:71:c0:1f: f2:c3:ff:87:f3:5b:2c:39:4c:e5:7f:ab:b6:43:3e: ee:ac:fe:40:b9:d9:ae:db:d7:8a:a1:ed:37:64:55: 21:21:81:fb:56:97:1f:d9:b6:3d:73:bf:eb:76:89: 2d:73:0e:18:3d:55:27:67:6b:a1:08:e4:0a:2f:b9: 74:aa:06:78:d6:2c:92:11:0f:48:6c:bc:14:f8:01: 3b:a9:86:63:6d:0c:13:e0:f1:d5:24:22:e9:28:ce: 64:22:da:55:6d:49:f9:14:e2:00:43:6f:0f:44:57: e4:97:b7:43:11:6b:d3:4d:42:b9:33:65:1e:6d:f4: 72:e0:ba:3e:0d:d4:d1:be:5f:24:23:89:30:e4:2e: 44:54:ad:75:c4:82:3a:1e:ec:fd:bc:02:c8:74:3d: 0d:36:9e:5f:68:96:63:25:3a:21:8f:57:07:fa:09: 69:dd:c4:c0:97:02:f2:e1:06:22:ce:07:9d:af:4a: f4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C5:EB:C1:63:1A:45:6C:B3:20:67:D9:A9:A5:17:48:2D:F6:BC:72 X509v3 Authority Key Identifier: keyid:7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/800676321BD311EAA341A62DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.237.132.0/23 103.241.105.0/24 202.74.37.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:ff:48:a3:c9:15:7c:0e:dc:17:5a:9c:53:d4:2c:05:2e:48: d6:31:10:61:e2:27:f1:51:06:4f:54:98:e0:ce:c9:f0:62:78: 06:c0:30:90:d6:74:d6:8f:df:48:87:a6:f7:ba:4d:19:2d:55: 62:d8:e8:03:6c:7d:6f:14:a7:e0:30:98:17:38:1b:47:d6:1a: ae:e3:eb:07:94:bf:7b:a6:f5:4d:84:f1:d3:11:53:5a:72:6a: e0:49:96:3f:73:ac:44:cd:cb:ba:0f:95:0c:c4:ea:70:ef:fe: 44:27:20:ca:eb:5e:12:86:b1:fa:75:6a:f9:37:b5:f6:bc:66: 57:db:68:7a:ee:41:b9:8b:14:ba:e9:39:49:7f:29:62:3b:12: de:b6:14:52:41:8d:07:4a:86:01:d5:5a:9c:23:e4:34:c8:40: f1:39:c6:b1:82:da:81:4b:50:2c:54:7e:fb:bd:0b:83:d2:21: ac:54:4e:f7:3c:61:6e:3f:99:a6:d4:06:f2:04:e4:2f:62:56: cf:fd:c6:03:04:59:8f:c7:3c:d5:d8:ab:ac:d5:01:0b:2f:44: 12:83:8c:8a:2d:22:22:e9:38:e6:14:4e:38:18:76:8f:63:7d: 73:75:c3:bb:c2:f1:c5:1c:cd:79:56:2c:fd:42:2a:7b:50:be: a3:32:a2:e6 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3N0IxMTAvBgNVBAUTKDdGN0QzMjBGMkEwN0U0MzNEREJERkUyODU3RjVEMzE5 MzU0NTE3QjkwHhcNMjUxMTIwMTgwOTE2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFmNTk0Yy1lOTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSQWjEeRJdEREGp4WIJM9TUej7pkmKVnRvIDMmcwd4HUza0+LWwaXJlbn6/b LDuH05VxfqpkuwUjyq+DDnPdHgzqUUDnc0txwB/yw/+H81ssOUzlf6u2Qz7urP5A udmu29eKoe03ZFUhIYH7Vpcf2bY9c7/rdoktcw4YPVUnZ2uhCOQKL7l0qgZ41iyS EQ9IbLwU+AE7qYZjbQwT4PHVJCLpKM5kItpVbUn5FOIAQ28PRFfkl7dDEWvTTUK5 M2UebfRy4Lo+DdTRvl8kI4kw5C5EVK11xII6Huz9vALIdD0NNp5faJZjJTohj1cH +glp3cTAlwLy4QYizgedr0r07QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFPrF68Fj GkVssyBn2amlF0gt9rxyMB8GA1UdIwQYMBaAFH99Mg8qB+Qz3b3+KFf10xk1RRe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODc3Qi8yNTkxMDExRTFC RDIxMUVBQUJEMEVFMkFDNEY5QUUwMi9mMzB5RHlvSDVEUGR2ZjRvVl9YVEdUVkZG N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzMHlEeW9INURQZHZmNG9WX1hUR1RWRkY3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDg3N0IvMjU5MTAxMUUxQkQyMTFFQUFCRDBFRTJBQzRGOUFFMDIvODAwNjc2MzIx QkQzMTFFQUEzNDFBNjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAFn7YQDBABn8WkDBADKSiUwDQYJKoZIhvcNAQELBQADggEB AG//SKPJFXwO3BdanFPULAUuSNYxEGHiJ/FRBk9UmODOyfBieAbAMJDWdNaP30iH pve6TRktVWLY6ANsfW8Up+AwmBc4G0fWGq7j6weUv3um9U2E8dMRU1pyauBJlj9z rETNy7oPlQzE6nDv/kQnIMrrXhKGsfp1avk3tfa8ZlfbaHruQbmLFLrpOUl/KWI7 Et62FFJBjQdKhgHVWpwj5DTIQPE5xrGC2oFLUCxUfvu9C4PSIaxUTvc8YW4/mabU BvIE5C9iVs/9xgMEWY/HPNXYq6zVAQsvRBKDjIotIiLpOOYUTjgYdo9jfXN1w7vC 8cUczXlWLP1CKntQvqMyouY= -----END CERTIFICATE-----Generated at Sat Dec 6 23:05:54 2025 by rpki-client