This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/594A0BF2152E11EC94BCB264C4F9AE02.roa File: 594A0BF2152E11EC94BCB264C4F9AE02.roa (raw, json) Hash identifier: 1qOnTV46N1waQtQ9X47A8DgcQV4uyBkcfnz65a0/6wE= Subject key identifier: A4:BC:3C:4E:BC:44:C0:D6:B9:4E:A6:DC:38:37:FA:C6:EA:7E:C1:95 Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 0562 Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/594A0BF2152E11EC94BCB264C4F9AE02.roa Signing time: Thu 04 Dec 2025 22:06:11 +0000 ROA not before: Thu 04 Dec 2025 22:06:10 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133493 IP address blocks: 103.60.22.0/24 maxlen: 24 103.60.23.0/24 maxlen: 24 103.60.96.0/24 maxlen: 24 103.238.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1378 (0x562) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: Dec 4 22:06:10 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=693205d2-1c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:70:2d:ac:fb:95:9c:fc:69:a4:70:7a:04:c0: ca:b4:a4:83:5d:a5:35:5b:44:b3:b3:4e:c3:49:10: 54:1e:60:58:e7:cc:5a:52:1e:74:4f:be:b1:f6:bb: f9:e7:a4:a4:48:03:d3:5b:e9:50:ab:34:ab:14:91: 6b:99:b6:d4:35:bf:02:78:57:4c:69:06:5e:fc:96: c0:a0:b8:a8:bc:06:9a:99:61:7b:d0:89:8c:5f:28: 94:43:e1:76:d7:ba:f8:07:37:2b:56:7b:c9:81:de: 88:25:8c:ea:a6:57:f3:74:31:fc:ec:eb:6a:19:26: 28:d6:09:3f:84:0a:5d:33:db:07:34:e5:90:5b:82: 1d:5d:cb:07:7d:f3:43:4a:ec:db:5f:aa:be:d9:1e: a8:9b:98:f1:b0:bf:da:cf:f7:66:39:f7:c7:8b:9a: 4e:ad:55:1b:d3:67:04:62:5d:64:36:db:c1:96:0d: de:f2:c1:24:d8:dc:c7:39:38:19:78:ba:e4:9e:54: cb:b0:96:ea:2d:70:8c:93:03:47:b4:f7:14:26:87: 31:d0:2b:9b:53:2f:f0:fc:9d:ab:0f:16:34:8e:7e: b2:87:ad:2a:5f:43:ca:77:16:de:da:96:97:ce:8b: 87:dc:2d:72:4c:03:fc:b2:3b:6f:c4:58:33:78:59: 14:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:BC:3C:4E:BC:44:C0:D6:B9:4E:A6:DC:38:37:FA:C6:EA:7E:C1:95 X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/594A0BF2152E11EC94BCB264C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.60.22.0/23 103.60.96.0/24 103.238.62.0/24 Signature Algorithm: sha256WithRSAEncryption 39:35:90:dc:4a:73:06:50:28:82:a4:05:9d:51:80:2b:22:3f: 33:41:df:94:de:ea:9b:89:89:cf:56:9b:69:4f:99:34:91:10: 4b:a3:c7:37:5e:78:b6:be:74:b9:1e:c6:12:61:c3:fe:84:42: 2a:94:c4:ea:96:e5:5a:b2:3d:74:44:2c:41:b4:8d:42:fd:ad: f4:c8:24:6e:a4:5c:64:fa:69:1b:01:8a:85:48:df:d8:c8:69: 01:32:ef:4c:c3:33:cb:67:4c:1f:17:7d:b7:05:57:fe:3d:e7: 0f:10:26:98:9f:68:3e:b8:be:8c:dc:12:6d:83:32:fd:2a:68: 89:71:ce:63:04:f9:2f:58:1b:73:45:39:ce:3b:e8:34:62:2c: 4f:f7:2b:0d:6e:35:bd:cc:cd:64:d6:21:41:7f:e5:81:b3:7f: dd:43:78:16:a6:6a:de:0e:c2:8f:1d:dc:8c:17:fb:5b:a6:b0: 3e:cf:6f:0c:6e:ea:ff:98:f0:c8:63:df:32:1e:3a:70:ed:09: e2:bc:b5:eb:e1:cb:a9:d1:14:6c:3b:83:a2:4c:24:fc:b9:f1: 7d:46:66:9d:d2:2f:1b:fd:63:7c:85:b1:59:ee:92:f0:6b:5d: 6c:cf:63:d5:11:16:55:e2:34:43:a1:28:d8:c3:ff:17:d9:95: 07:0e:8e:f7 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjUxMjA0MjIwNjEwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMyMDVkMi0xYzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHAtrPuVnPxppHB6BMDKtKSDXaU1W0Szs07DSRBUHmBY58xaUh50T76x9rv5 56SkSAPTW+lQqzSrFJFrmbbUNb8CeFdMaQZe/JbAoLiovAaamWF70ImMXyiUQ+F2 17r4BzcrVnvJgd6IJYzqplfzdDH87OtqGSYo1gk/hApdM9sHNOWQW4IdXcsHffND SuzbX6q+2R6om5jxsL/az/dmOffHi5pOrVUb02cEYl1kNtvBlg3e8sEk2NzHOTgZ eLrknlTLsJbqLXCMkwNHtPcUJocx0CubUy/w/J2rDxY0jn6yh60qX0PKdxbe2paX zouH3C1yTAP8sjtvxFgzeFkUvQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFKS8PE68 RMDWuU6m3Dg3+sbqfsGVMB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM2NDMvQTVEODg0QzQxNTJCMTFFQ0E1M0U0QzYzQzRGOUFFMDIvNTk0QTBCRjIx NTJFMTFFQzk0QkNCMjY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAFnPBYDBABnPGADBABn7j4wDQYJKoZIhvcNAQELBQADggEB ADk1kNxKcwZQKIKkBZ1RgCsiPzNB35Te6puJic9Wm2lPmTSREEujxzdeeLa+dLke xhJhw/6EQiqUxOqW5VqyPXRELEG0jUL9rfTIJG6kXGT6aRsBioVI39jIaQEy70zD M8tnTB8XfbcFV/495w8QJpifaD64vozcEm2DMv0qaIlxzmME+S9YG3NFOc476DRi LE/3Kw1uNb3MzWTWIUF/5YGzf91DeBamat4Owo8d3IwX+1umsD7Pbwxu6v+Y8Mhj 3zIeOnDtCeK8tevhy6nRFGw7g6JMJPy58X1GZp3SLxv9Y3yFsVnukvBrXWzPY9UR FlXiNEOhKNjD/xfZlQcOjvc= -----END CERTIFICATE-----Generated at Sun Dec 7 01:38:05 2025 by rpki-client