This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/960C9032C72711F0BD856955C4F9AE02.roa File: 960C9032C72711F0BD856955C4F9AE02.roa (raw, json) Hash identifier: PfnQedwApVfjJ4O5rlVi1EBEAKOdEI6iu/GpGFC7Hzc= Subject key identifier: 4A:1A:FF:5F:A2:78:BE:BC:FC:34:B6:F8:7B:FE:66:F6:20:8E:B2:14 Certificate issuer: /CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Certificate serial: 01DE Authority key identifier: E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/960C9032C72711F0BD856955C4F9AE02.roa Signing time: Fri 21 Nov 2025 22:15:52 +0000 ROA not before: Fri 21 Nov 2025 22:15:52 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151354 IP address blocks: 103.208.67.0/24 maxlen: 24 103.254.214.0/24 maxlen: 24 2001:df2:7ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:09:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C7F8, serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Validity Not Before: Nov 21 22:15:52 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6920e498-864b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:05:39:34:86:25:48:bc:4c:cd:99:6e:87:1c: af:9b:d0:8c:ec:25:92:d9:4c:f6:d8:1a:f2:30:35: 50:7d:4c:fe:cc:b0:0d:d0:aa:b6:39:43:d1:7b:1f: 99:d9:46:3e:44:4e:be:bd:04:b6:a0:c3:78:68:fb: 99:ac:fb:9d:85:18:1a:07:21:2d:ce:e2:0e:d5:13: 84:4e:9a:7d:f1:1e:a7:03:5e:b6:96:29:e3:8c:ec: da:24:56:5f:b9:1f:2f:bb:ce:31:9c:3d:f2:10:1d: 02:a5:3f:5c:5b:af:05:64:07:8b:d7:17:80:3a:f2: ef:9e:e4:a8:11:23:2e:22:91:6c:9d:c1:3a:20:75: 10:91:3d:8c:82:7e:15:20:43:6c:73:c9:88:90:f1: d5:de:b1:e9:67:01:bc:58:72:5f:65:3e:a5:82:3f: 36:a0:75:f7:a8:4b:26:8f:38:ed:5b:8d:3c:0a:1f: 62:41:22:80:7d:2a:21:22:07:e4:6d:ea:2b:b4:7c: ea:09:68:09:e1:e2:63:22:1e:88:a2:36:da:72:f6: fb:78:dd:bd:88:1d:d8:1b:ea:e1:3b:03:0d:a2:e8: ef:05:ac:3a:0e:a6:a6:4a:d2:6a:9e:6d:75:3c:ce: 06:29:e2:2b:83:fb:f9:4c:e6:88:46:4c:c2:f0:23: 0b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1A:FF:5F:A2:78:BE:BC:FC:34:B6:F8:7B:FE:66:F6:20:8E:B2:14 X509v3 Authority Key Identifier: keyid:E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/960C9032C72711F0BD856955C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.208.67.0/24 103.254.214.0/24 IPv6: 2001:df2:7ec0::/48 Signature Algorithm: sha256WithRSAEncryption 89:83:d0:9d:93:cb:07:b7:c5:5e:3e:de:bc:85:4e:c8:96:89: 75:3e:95:fe:99:cf:b6:46:56:61:ba:b5:a9:87:cb:32:18:54: cd:23:99:97:ca:0a:35:a6:11:5f:ea:25:6c:3b:4f:5c:be:49: 7e:f9:f6:84:d9:b6:65:af:92:af:2c:a2:08:b1:3c:4d:2b:45: 79:f5:67:6a:00:3a:b2:14:56:e7:88:b2:14:70:76:fe:dd:17: 67:ce:5a:f2:9e:ed:5d:58:82:0f:fc:77:2d:68:22:16:c4:a4: 2e:59:4b:dc:1c:5c:95:ea:05:de:f8:33:fa:83:89:42:c0:2d: f6:4a:d9:86:7c:21:9b:31:18:fa:ba:db:92:72:94:64:87:2d: 74:14:3b:f4:d8:aa:68:67:74:13:24:96:7b:21:ea:b0:b6:d9: 3c:3a:d3:ad:df:8a:3e:8e:5f:05:8b:00:5a:4a:0d:75:05:1e: ba:c0:f1:1b:50:9b:a2:12:b9:7f:13:62:b1:4e:e4:82:f6:f3: 08:17:25:3d:47:0b:66:e1:b2:1b:2e:7e:2b:91:05:00:51:fe: 8b:75:47:31:94:18:4b:b6:eb:49:6b:77:06:b0:8f:8f:ad:c6: 74:cb:b7:db:73:a2:71:d9:95:96:ee:bb:09:5f:a5:e4:35:98: c0:df:f5:18 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM3RjgxMTAvBgNVBAUTKEU1MDk2M0Q3MDQ2ODcyNzM1NkI3OEI3RkM0MzgwOTc0 NDI5QjY0RTEwHhcNMjUxMTIxMjIxNTUyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTIwZTQ5OC04NjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgU5NIYlSLxMzZluhxyvm9CM7CWS2Uz22BryMDVQfUz+zLAN0Kq2OUPRex+Z 2UY+RE6+vQS2oMN4aPuZrPudhRgaByEtzuIO1ROETpp98R6nA162linjjOzaJFZf uR8vu84xnD3yEB0CpT9cW68FZAeL1xeAOvLvnuSoESMuIpFsncE6IHUQkT2Mgn4V IENsc8mIkPHV3rHpZwG8WHJfZT6lgj82oHX3qEsmjzjtW408Ch9iQSKAfSohIgfk beortHzqCWgJ4eJjIh6Iojbacvb7eN29iB3YG+rhOwMNoujvBaw6DqamStJqnm11 PM4GKeIrg/v5TOaIRkzC8CMLMQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFEoa/1+i eL68/DS2+Hv+ZvYgjrIUMB8GA1UdIwQYMBaAFOUJY9cEaHJzVreLf8Q4CXRCm2Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzdGOC9FMjUxMEUxQzEy OTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2NuTld0NHRfeERnSmRFS2Ja T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRbGoxd1JvY25OV3Q0dF94RGdKZEVLYlpPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEM3RjgvRTI1MTBFMUMxMjk1MTFFRTg0QkFENzQ2QzRGOUFFMDIvOTYwQzkwMzJD NzI3MTFGMEJEODU2OTU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABn0EMDBABn/tYwDwQCAAIwCQMHACABDfJ+wDANBgkqhkiG 9w0BAQsFAAOCAQEAiYPQnZPLB7fFXj7evIVOyJaJdT6V/pnPtkZWYbq1qYfLMhhU zSOZl8oKNaYRX+olbDtPXL5Jfvn2hNm2Za+SryyiCLE8TStFefVnagA6shRW54iy FHB2/t0XZ85a8p7tXViCD/x3LWgiFsSkLllL3BxcleoF3vgz+oOJQsAt9krZhnwh mzEY+rrbknKUZIctdBQ79NiqaGd0EySWeyHqsLbZPDrTrd+KPo5fBYsAWkoNdQUe usDxG1CbohK5fxNisU7kgvbzCBclPUcLZuGyGy5+K5EFAFH+i3VHMZQYS7brSWt3 BrCPj63GdMu323OicdmVlu67CV+l5DWYwN/1GA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:47:03 2025 by rpki-client