This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/FD5873EC83BA11F089D8E166C4F9AE02.roa File: FD5873EC83BA11F089D8E166C4F9AE02.roa (raw, json) Hash identifier: ogrNcabXP9sjgRUTd8oiYjyi/d+2H2T3Z6kqfL3pDfs= Subject key identifier: 61:1E:06:B5:41:C5:66:66:B3:21:0A:10:B4:93:60:1C:53:55:83:9B Certificate issuer: /CN=A91509B3/serialNumber=E57261FFC81071407934B6504A22BBA3C150E173 Certificate serial: 42 Authority key identifier: E5:72:61:FF:C8:10:71:40:79:34:B6:50:4A:22:BB:A3:C1:50:E1:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/FD5873EC83BA11F089D8E166C4F9AE02.roa Signing time: Wed 03 Dec 2025 06:05:06 +0000 ROA not before: Wed 03 Dec 2025 06:05:06 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 38263 IP address blocks: 203.1.208.0/24 maxlen: 24 203.1.209.0/24 maxlen: 24 203.1.210.0/24 maxlen: 24 203.1.211.0/24 maxlen: 24 203.1.212.0/24 maxlen: 24 203.1.213.0/24 maxlen: 24 203.1.214.0/24 maxlen: 24 203.1.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509B3, serialNumber=E57261FFC81071407934B6504A22BBA3C150E173 Validity Not Before: Dec 3 06:05:06 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692fd312-6e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d8:a0:76:2e:bb:f7:b4:cb:db:f3:1b:b3:f9: 90:35:40:80:cf:02:28:97:88:bb:90:62:62:4d:3c: 5f:5d:89:c9:fd:75:78:78:04:d8:92:e2:b6:3a:2f: 70:71:e5:1c:c1:ff:ad:d5:ef:4d:17:08:d8:7a:2a: cb:78:b6:d1:9e:f3:a6:1a:1e:34:12:73:06:16:96: 92:70:46:3d:2d:79:2d:30:c3:b3:3e:c6:1a:19:b8: 20:0f:be:06:1e:a0:8e:2a:5c:fa:5c:c9:9b:89:6c: 52:10:fa:4d:c2:31:cf:1d:9f:ee:d9:9c:54:e8:e5: e8:58:70:27:07:48:f1:cb:4f:67:f4:0d:98:e4:05: 42:a9:7b:04:2c:50:6f:28:77:17:08:24:47:c4:e1: ab:0e:bb:a6:73:1b:9f:4e:4c:30:56:6f:2b:d1:58: bb:ec:32:f9:f6:1c:35:cc:a4:cf:0d:a6:05:80:6c: e2:d2:44:a4:fc:ca:09:b4:ec:cc:d0:7b:aa:e0:ba: d5:e8:17:19:87:cd:54:6c:7a:c1:ce:32:b5:7c:dc: 82:41:1e:6b:66:6c:ad:b4:17:ce:90:b6:17:21:b7: eb:cc:33:a7:68:09:1b:63:15:da:6e:2d:6e:5e:21: 87:f8:38:cc:b5:c4:a4:12:52:72:17:35:d9:ac:24: ed:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1E:06:B5:41:C5:66:66:B3:21:0A:10:B4:93:60:1C:53:55:83:9B X509v3 Authority Key Identifier: keyid:E5:72:61:FF:C8:10:71:40:79:34:B6:50:4A:22:BB:A3:C1:50:E1:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/FD5873EC83BA11F089D8E166C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.1.208.0/21 Signature Algorithm: sha256WithRSAEncryption 99:2f:c7:e6:3f:c3:0e:d7:3c:ec:fc:33:ce:8c:6b:71:6f:2e: 2b:1c:fb:98:c0:7f:08:a7:62:0a:27:5c:70:77:b0:c5:13:4d: 7d:c8:63:4f:66:95:e2:33:30:f6:0d:76:67:b1:42:0d:8e:42: 5b:eb:b7:95:11:22:9c:28:52:ba:c0:c6:26:57:73:c5:e8:cb: cb:61:86:74:3a:6c:07:1c:82:22:5b:7a:ce:b4:7a:fd:9e:e4: 39:35:3d:a6:d7:29:b3:ef:84:90:ab:52:fa:a2:41:a8:d9:61: 74:ba:0e:df:3f:b6:50:f2:50:b6:57:dc:7b:c8:b9:de:46:34: c1:eb:98:25:b5:31:43:61:5d:08:3d:e3:89:df:a0:32:b3:79: 55:b2:74:6c:88:7b:ee:ac:fb:38:83:1b:50:0e:55:ce:2d:6a: 09:6c:d3:14:99:62:81:50:a2:b3:7b:23:de:ab:c3:69:50:90: de:a9:71:b3:a8:95:7d:86:12:05:5c:53:8f:db:6c:8e:0a:42: 17:b8:b3:14:fc:0a:f1:7a:a4:26:5a:96:70:2b:f8:7f:ec:f7: ca:3e:8e:44:da:a3:34:ec:63:06:9d:bf:e4:64:6c:35:66:22: 22:5e:82:0c:d9:cd:e1:54:b9:13:b3:22:77:6a:5a:74:fb:f8: 11:53:9f:a9 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MDlCMzExMC8GA1UEBRMoRTU3MjYxRkZDODEwNzE0MDc5MzRCNjUwNEEyMkJCQTND MTUwRTE3MzAeFw0yNTEyMDMwNjA1MDZaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MmZkMzEyLTZlMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDr2KB2Lrv3tMvb8xuz+ZA1QIDPAiiXiLuQYmJNPF9dicn9dXh4BNiS4rY6L3Bx 5RzB/63V700XCNh6Kst4ttGe86YaHjQScwYWlpJwRj0teS0ww7M+xhoZuCAPvgYe oI4qXPpcyZuJbFIQ+k3CMc8dn+7ZnFTo5ehYcCcHSPHLT2f0DZjkBUKpewQsUG8o dxcIJEfE4asOu6ZzG59OTDBWbyvRWLvsMvn2HDXMpM8NpgWAbOLSRKT8ygm07MzQ e6rgutXoFxmHzVRsesHOMrV83IJBHmtmbK20F86Qthcht+vMM6doCRtjFdpuLW5e IYf4OMy1xKQSUnIXNdmsJO2TAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUYR4GtUHF ZmazIQoQtJNgHFNVg5swHwYDVR0jBBgwFoAU5XJh/8gQcUB5NLZQSiK7o8FQ4XMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUwOUIzLzc1NzAwMTQyODNB QzExRjBBRDU0MEQxQkM0RjlBRTAyLzVYSmhfOGdRY1VCNU5MWlFTaUs3bzhGUTRY TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNVhKaF84Z1FjVUI1TkxaUVNpSzdvOEZRNFhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDlCMy83NTcwMDE0MjgzQUMxMUYwQUQ1NDBEMUJDNEY5QUUwMi9GRDU4NzNFQzgz QkExMUYwODlEOEUxNjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEA8sB0DANBgkqhkiG9w0BAQsFAAOCAQEAmS/H5j/DDtc87Pwz zoxrcW8uKxz7mMB/CKdiCidccHewxRNNfchjT2aV4jMw9g12Z7FCDY5CW+u3lREi nChSusDGJldzxejLy2GGdDpsBxyCIlt6zrR6/Z7kOTU9ptcps++EkKtS+qJBqNlh dLoO3z+2UPJQtlfce8i53kY0weuYJbUxQ2FdCD3jid+gMrN5VbJ0bIh77qz7OIMb UA5Vzi1qCWzTFJligVCis3sj3qvDaVCQ3qlxs6iVfYYSBVxTj9tsjgpCF7izFPwK 8XqkJlqWcCv4f+z3yj6ORNqjNOxjBp2/5GRsNWYiIl6CDNnN4VS5E7Mid2padPv4 EVOfqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:39:44 2025 by rpki-client