This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/DE0A75A605EB11EA94CD7287C4F9AE02.roa File: DE0A75A605EB11EA94CD7287C4F9AE02.roa (raw, json) Hash identifier: dRGqWnvgsIsN2pbF+Ps/gIu/drVJ5zxN2ZisSAeqSPE= Subject key identifier: 8E:7A:68:3A:B3:1C:96:39:E5:ED:39:2A:37:E7:95:54:81:27:4B:57 Certificate issuer: /CN=A916022F/serialNumber=29D16C98DB3D5BF64B6B9204C09600860CD29452 Certificate serial: 1126 Authority key identifier: 29:D1:6C:98:DB:3D:5B:F6:4B:6B:92:04:C0:96:00:86:0C:D2:94:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/DE0A75A605EB11EA94CD7287C4F9AE02.roa Signing time: Sun 30 Nov 2025 16:45:38 +0000 ROA not before: Sun 30 Nov 2025 16:45:38 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134812 IP address blocks: 103.16.24.0/23 maxlen: 24 103.137.80.0/23 maxlen: 23 103.137.80.0/24 maxlen: 24 103.137.81.0/24 maxlen: 24 2001:df5:7e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.crl rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4390 (0x1126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916022F, serialNumber=29D16C98DB3D5BF64B6B9204C09600860CD29452 Validity Not Before: Nov 30 16:45:38 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692c74b2-6e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:95:de:6f:dc:68:6e:63:24:e7:53:0d:db:6f: 8c:eb:b5:bb:ac:c4:96:78:4e:81:de:00:c3:2b:cb: 7e:83:e8:b9:68:0b:ac:c1:c5:32:6d:17:3c:e1:bd: 4c:f5:3d:b0:7e:0b:41:d3:6d:86:10:df:b9:5f:c7: e6:4b:6c:12:4b:3a:3b:b5:29:39:70:00:a6:9d:cd: e3:4b:f6:c8:15:09:38:53:72:1c:3a:51:b3:c6:f8: 8e:85:6e:3d:69:3a:92:38:5e:03:62:15:a7:86:b4: 0f:c3:b0:52:b5:77:10:bf:41:71:44:94:5d:26:82: e1:0d:f6:84:5f:24:c0:df:19:52:a3:d3:26:48:6b: a7:2c:a9:55:95:9c:bc:e2:85:dd:38:e5:68:d8:be: 07:72:0b:f4:c9:0e:ce:1b:11:43:7a:7a:89:68:02: cc:8c:f3:97:c8:db:e0:6b:f3:ef:ff:9f:6f:06:71: 98:c0:28:59:35:0a:4d:7c:01:19:1d:3a:87:23:ba: 01:07:d0:89:f0:2f:61:ed:35:ef:7f:66:55:a6:c2: 2a:d6:7a:14:0d:e5:08:8b:f7:e3:34:01:71:14:45: 23:84:73:c0:f0:bc:6e:97:b1:ea:58:d3:e5:73:8c: 36:ea:09:77:22:74:85:9e:77:c8:67:01:1c:b1:15: 9e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7A:68:3A:B3:1C:96:39:E5:ED:39:2A:37:E7:95:54:81:27:4B:57 X509v3 Authority Key Identifier: keyid:29:D1:6C:98:DB:3D:5B:F6:4B:6B:92:04:C0:96:00:86:0C:D2:94:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/DE0A75A605EB11EA94CD7287C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.16.24.0/23 103.137.80.0/23 IPv6: 2001:df5:7e00::/48 Signature Algorithm: sha256WithRSAEncryption 76:53:a1:9d:8c:39:c7:4e:21:53:fd:3f:7f:d5:56:b2:d9:0f: 83:1e:37:eb:28:b7:59:ad:d2:94:7e:31:bf:75:a9:08:75:d8: 5d:88:be:04:46:7d:2b:e3:5c:aa:9a:8f:87:35:70:3d:89:29: 66:da:b8:b3:de:ab:05:1a:4a:ee:70:07:39:05:40:c4:fa:70: b6:40:ba:66:c6:64:c2:cd:3e:44:79:43:57:be:31:24:56:0a: 6a:44:79:3a:d6:35:e1:11:c5:2c:1d:11:db:c4:43:5a:c1:00: f0:c3:56:eb:53:d0:26:8c:d5:ff:89:e5:2e:ff:16:8b:29:39: 72:80:50:fd:0f:8d:c4:54:bd:be:b0:ff:f9:df:76:6c:e0:5e: 22:9c:fa:78:05:ba:d3:7f:0e:d8:89:62:18:54:40:cd:3a:13: 41:5b:f2:e8:a2:b2:b4:95:e9:f2:78:01:dc:c3:0e:76:f6:4e: 86:a7:c4:86:d0:36:71:7e:1e:b5:d9:89:64:37:6d:7a:15:0f: 36:48:0d:cc:77:6e:d9:67:19:c7:a0:11:f7:9c:cc:09:b1:23: 9d:26:6e:1c:7b:8f:d8:e6:f5:50:8f:cf:22:95:02:5d:03:be: 82:f3:9a:53:c8:1e:65:fe:fd:eb:28:96:9e:f7:4a:59:11:b5: 86:06:2d:fa -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICESYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyMkYxMTAvBgNVBAUTKDI5RDE2Qzk4REIzRDVCRjY0QjZCOTIwNEMwOTYwMDg2 MENEMjk0NTIwHhcNMjUxMTMwMTY0NTM4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJjNzRiMi02ZTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JXeb9xobmMk51MN22+M67W7rMSWeE6B3gDDK8t+g+i5aAuswcUybRc84b1M 9T2wfgtB022GEN+5X8fmS2wSSzo7tSk5cACmnc3jS/bIFQk4U3IcOlGzxviOhW49 aTqSOF4DYhWnhrQPw7BStXcQv0FxRJRdJoLhDfaEXyTA3xlSo9MmSGunLKlVlZy8 4oXdOOVo2L4Hcgv0yQ7OGxFDenqJaALMjPOXyNvga/Pv/59vBnGYwChZNQpNfAEZ HTqHI7oBB9CJ8C9h7TXvf2ZVpsIq1noUDeUIi/fjNAFxFEUjhHPA8Lxul7HqWNPl c4w26gl3InSFnnfIZwEcsRWeRwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFI56aDqz HJY55e05KjfnlVSBJ0tXMB8GA1UdIwQYMBaAFCnRbJjbPVv2S2uSBMCWAIYM0pRS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDIyRi85RUM3QUZCNEFB N0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9LZEZzbU5zOVdfWkxhNUlFd0pZQWhnelNs RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tkRnNtTnM5V19aTGE1SUV3SllBaGd6U2xGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjAyMkYvOUVDN0FGQjRBQTdEMTFFODg2MTQ0NTI0QzRGOUFFMDIvREUwQTc1QTYw NUVCMTFFQTk0Q0Q3Mjg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFnEBgDBAFniVAwDwQCAAIwCQMHACABDfV+ADANBgkqhkiG 9w0BAQsFAAOCAQEAdlOhnYw5x04hU/0/f9VWstkPgx436yi3Wa3SlH4xv3WpCHXY XYi+BEZ9K+NcqpqPhzVwPYkpZtq4s96rBRpK7nAHOQVAxPpwtkC6ZsZkws0+RHlD V74xJFYKakR5OtY14RHFLB0R28RDWsEA8MNW61PQJozV/4nlLv8Wiyk5coBQ/Q+N xFS9vrD/+d92bOBeIpz6eAW6038O2IliGFRAzToTQVvy6KKytJXp8ngB3MMOdvZO hqfEhtA2cX4etdmJZDdtehUPNkgNzHdu2WcZx6AR95zMCbEjnSZuHHuP2Ob1UI/P IpUCXQO+gvOaU8geZf796yiWnvdKWRG1hgYt+g== -----END CERTIFICATE-----Generated at Mon Dec 8 09:12:52 2025 by rpki-client