This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/FC07CE5C3A7C11EBB38FF025C4F9AE02.roa File: FC07CE5C3A7C11EBB38FF025C4F9AE02.roa (raw, json) Hash identifier: gBZ45Ahcw6RfwL3mlFFuHRRbvWj8T4TaJokdj0B0Q2k= Subject key identifier: 11:9F:67:74:2B:D8:BC:0A:4A:1A:B0:71:9B:04:35:AB:3B:C0:6F:53 Certificate issuer: /CN=A914ECA4/serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0 Certificate serial: 077F Authority key identifier: D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/FC07CE5C3A7C11EBB38FF025C4F9AE02.roa Signing time: Tue 02 Dec 2025 20:54:10 +0000 ROA not before: Tue 02 Dec 2025 20:54:10 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141420 IP address blocks: 103.158.226.0/23 maxlen: 23 103.158.226.0/24 maxlen: 24 103.158.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1919 (0x77f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECA4, serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0 Validity Not Before: Dec 2 20:54:10 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=692f51f2-7f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ea:a1:8e:10:bb:1c:2e:b8:d8:d4:cb:b4:20: 20:f5:5b:b8:27:2b:64:95:84:45:f3:28:58:3f:7e: 83:88:3e:8f:9f:7d:70:ca:56:c9:bc:6b:9d:33:df: 7b:e5:a8:5e:4d:7a:f5:92:76:05:22:8c:9a:d3:c3: b0:d9:55:36:85:ff:6b:f7:ff:46:fd:f4:fc:88:67: 11:d7:26:e5:7e:b9:1b:49:5c:74:36:66:54:7f:ca: 31:fd:04:eb:39:7e:9f:18:33:4f:fd:85:ea:1d:d9: 5f:3e:c9:34:5e:01:b7:26:e8:64:fc:cb:3b:56:ba: 1b:e3:87:78:5b:2f:84:c5:f1:f8:1b:dd:d8:c9:80: 9d:ed:13:86:84:ba:fd:49:08:49:3c:e4:6c:48:33: 36:c7:16:4f:ee:34:66:8d:9a:99:71:f2:76:d9:c0: 4a:81:09:29:ab:f1:0f:d5:51:31:a3:75:0f:93:d7: 15:52:15:2a:5b:73:18:cb:83:b7:97:c0:43:2e:66: 1b:87:14:4f:b2:ec:b9:73:f6:73:86:aa:6a:f9:46: 81:00:3d:fa:d4:33:c8:34:86:f7:fd:3d:d7:87:b6: b7:ca:de:86:33:2b:f4:47:6e:20:7b:8c:8a:f0:ec: 93:4d:a9:5f:8a:64:0d:c0:35:3c:4c:92:88:fe:0e: d7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9F:67:74:2B:D8:BC:0A:4A:1A:B0:71:9B:04:35:AB:3B:C0:6F:53 X509v3 Authority Key Identifier: keyid:D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/FC07CE5C3A7C11EBB38FF025C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.226.0/23 Signature Algorithm: sha256WithRSAEncryption 11:fe:f0:b6:f8:69:e2:9d:50:bc:09:ab:22:da:61:11:29:dc: 18:51:10:45:eb:b5:67:16:3b:1b:f0:a3:fa:03:49:81:b1:a4: 92:48:f4:23:b8:ba:e6:6e:6e:0d:7f:b1:cc:69:d9:51:9e:26: af:02:1a:dd:73:d5:90:6c:39:9b:00:6a:b5:aa:3c:95:ab:b3: 46:cc:bd:71:54:00:4f:ab:ba:02:83:6c:9c:c6:86:fa:f7:d4: d7:c9:58:fb:21:a4:17:c9:77:e6:1f:4a:4b:64:ab:b3:74:c5: df:a3:a7:4c:62:4a:3a:0a:1a:b4:ff:ea:1d:32:af:41:38:44: 2c:bc:ae:aa:d9:d8:fc:85:8c:4e:78:d3:72:f1:34:8a:5b:a5: 58:76:2f:78:ab:14:9b:9a:c1:ba:06:27:9a:ff:fd:59:7e:da: f5:32:4f:99:38:b2:0a:62:cd:c7:27:ef:97:51:06:b0:ff:5a: d6:fd:a3:63:f6:ce:b8:0b:ce:4f:40:3f:5d:cc:ee:46:a8:39: 05:b3:35:db:3d:71:00:58:48:cf:48:38:c9:5a:de:c5:02:81: b1:1e:37:11:ef:49:57:a6:c0:f2:8b:42:3c:37:a1:b7:c6:56: ef:5f:1a:5f:be:6e:58:e2:a7:2a:ba:20:ca:fe:7f:54:97:61: be:48:0d:c7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDQTQxMTAvBgNVBAUTKEQ0RUQzMzhBNUUyMDg3RDgyRUY0QzJGNjQ1OTlCNDEx MTI3MkU1RTAwHhcNMjUxMjAyMjA1NDEwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmNTFmMi03ZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7OqhjhC7HC642NTLtCAg9Vu4JytklYRF8yhYP36DiD6Pn31wylbJvGudM997 5aheTXr1knYFIoya08Ow2VU2hf9r9/9G/fT8iGcR1yblfrkbSVx0NmZUf8ox/QTr OX6fGDNP/YXqHdlfPsk0XgG3Juhk/Ms7Vrob44d4Wy+ExfH4G93YyYCd7ROGhLr9 SQhJPORsSDM2xxZP7jRmjZqZcfJ22cBKgQkpq/EP1VExo3UPk9cVUhUqW3MYy4O3 l8BDLmYbhxRPsuy5c/Zzhqpq+UaBAD361DPINIb3/T3Xh7a3yt6GMyv0R24ge4yK 8OyTTalfimQNwDU8TJKI/g7XjQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBGfZ3Qr 2LwKShqwcZsENas7wG9TMB8GA1UdIwQYMBaAFNTtM4peIIfYLvTC9kWZtBEScuXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNBNC83QUU5RkVENjNB N0IxMUVCQjc4NjlDMjRDNEY5QUUwMi8xTzB6aWw0Z2g5Z3U5TUwyUlptMEVSSnk1 ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFPMHppbDRnaDlndTlNTDJSWm0wRVJKeTVlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVDQTQvN0FFOUZFRDYzQTdCMTFFQkI3ODY5QzI0QzRGOUFFMDIvRkMwN0NFNUMz QTdDMTFFQkIzOEZGMDI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnnuIwDQYJKoZIhvcNAQELBQADggEBABH+8Lb4aeKdULwJ qyLaYREp3BhREEXrtWcWOxvwo/oDSYGxpJJI9CO4uuZubg1/scxp2VGeJq8CGt1z 1ZBsOZsAarWqPJWrs0bMvXFUAE+rugKDbJzGhvr31NfJWPshpBfJd+YfSktkq7N0 xd+jp0xiSjoKGrT/6h0yr0E4RCy8rqrZ2PyFjE5403LxNIpbpVh2L3irFJuawboG J5r//Vl+2vUyT5k4sgpizccn75dRBrD/Wtb9o2P2zrgLzk9AP13M7kaoOQWzNds9 cQBYSM9IOMla3sUCgbEeNxHvSVemwPKLQjw3obfGVu9fGl++bljipyq6IMr+f1SX Yb5IDcc= -----END CERTIFICATE-----Generated at Sun Dec 7 04:43:25 2025 by rpki-client