This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/5A0804A4152E11EC94BCB264C4F9AE02.roa File: 5A0804A4152E11EC94BCB264C4F9AE02.roa (raw, json) Hash identifier: IhF3xpRX9OoLW4rm4Xp59CrFWa/bSzisaDG59ePuZ74= Subject key identifier: 4E:56:D0:B9:91:1D:8D:A9:37:7B:09:AA:86:AF:48:FF:30:BC:53:43 Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 0563 Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/5A0804A4152E11EC94BCB264C4F9AE02.roa Signing time: Thu 04 Dec 2025 22:06:12 +0000 ROA not before: Thu 04 Dec 2025 22:06:12 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138354 IP address blocks: 45.120.36.0/24 maxlen: 24 103.60.22.0/24 maxlen: 24 103.60.23.0/24 maxlen: 24 103.60.96.0/24 maxlen: 24 103.131.40.0/24 maxlen: 24 103.131.41.0/24 maxlen: 24 103.238.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1379 (0x563) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: Dec 4 22:06:12 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=693205d4-b6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:22:47:12:70:a5:ea:5f:00:d6:19:93:6d:81: fb:21:69:9b:46:26:2c:c0:f5:b4:c6:8e:9d:93:53: 0f:d0:44:31:cb:96:59:dc:5e:3c:09:7f:40:4d:91: ef:e9:98:ce:25:55:46:ee:f5:2d:b6:73:ba:5b:80: 04:cf:80:7d:b6:70:a5:4b:4d:10:20:2c:a7:83:c3: 25:f9:a0:38:43:3b:a8:1c:77:ab:64:96:82:63:8d: 18:68:52:1a:96:94:72:2c:2c:b0:7a:b8:6d:67:2c: d5:cc:d8:f1:35:28:75:22:e2:e4:eb:86:2b:08:01: a5:3b:e6:54:1a:46:47:4d:ca:3c:db:27:a1:39:db: 48:37:04:33:a8:7d:2f:1c:7c:b2:50:9d:64:2d:d1: 84:13:d3:d4:4f:28:54:df:60:3e:89:d2:90:9c:db: 67:c6:67:25:29:44:64:20:bc:e7:17:55:4c:b8:33: 53:2e:74:2d:ab:a8:b0:48:5e:4d:5f:93:09:95:7c: ea:e9:bb:02:b0:5a:5c:f5:e8:ab:5a:44:12:2f:9a: ae:98:74:77:b7:93:72:56:6b:70:ab:f4:9b:b0:34: de:70:1e:70:ab:1f:b7:04:ca:f4:a4:6c:e2:16:cf: bb:de:84:e1:7c:1e:c9:26:9f:6d:8f:cd:40:f0:24: eb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:56:D0:B9:91:1D:8D:A9:37:7B:09:AA:86:AF:48:FF:30:BC:53:43 X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/5A0804A4152E11EC94BCB264C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.120.36.0/24 103.60.22.0/23 103.60.96.0/24 103.131.40.0/23 103.238.62.0/24 Signature Algorithm: sha256WithRSAEncryption 75:b5:e9:e4:04:47:04:04:1b:af:c0:1a:be:49:3e:31:d0:b7: 9a:43:c9:12:ad:68:69:d2:fa:9a:c5:e9:ef:8d:4e:b4:60:f5: 0a:43:7c:ca:96:d4:38:f8:92:b8:9c:75:15:af:35:6a:dc:ef: c9:fe:9c:7a:8e:c8:7e:e6:30:57:f2:14:b5:2a:1d:18:59:5a: be:f9:ac:1c:a4:2f:44:9b:71:21:3d:aa:da:d6:9b:7a:73:a5: 2b:66:e2:8a:ed:ba:43:34:f2:23:f3:70:81:78:e9:45:b9:c3: 81:58:ec:29:45:c8:5a:e2:ab:11:ce:85:8d:4c:24:07:f8:73: 44:5f:4f:54:39:3f:e2:09:54:6b:ad:ad:98:db:81:be:8e:c8: 67:de:5b:57:99:0d:f9:21:71:15:19:26:98:5e:a4:31:f4:15: 87:bf:4b:38:21:7c:6f:97:ad:0c:d7:00:1a:8f:68:ba:c9:a3: 8f:7c:c0:94:15:3e:c0:85:7d:1f:8e:8e:c2:fb:d3:0b:7b:53: 17:fa:b5:28:11:ca:66:a1:84:03:13:7c:ee:98:a7:85:d0:f2: 17:4a:74:43:5e:d8:83:db:8d:59:41:f8:55:9f:24:0a:a5:75: 68:ce:55:1a:10:93:0a:63:89:43:2b:b7:3a:e4:90:12:7a:14: c9:27:12:f4 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICBWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjUxMjA0MjIwNjEyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMyMDVkNC1iNmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyJHEnCl6l8A1hmTbYH7IWmbRiYswPW0xo6dk1MP0EQxy5ZZ3F48CX9ATZHv 6ZjOJVVG7vUttnO6W4AEz4B9tnClS00QICyng8Ml+aA4QzuoHHerZJaCY40YaFIa lpRyLCywerhtZyzVzNjxNSh1IuLk64YrCAGlO+ZUGkZHTco82yehOdtINwQzqH0v HHyyUJ1kLdGEE9PUTyhU32A+idKQnNtnxmclKURkILznF1VMuDNTLnQtq6iwSF5N X5MJlXzq6bsCsFpc9eirWkQSL5qumHR3t5NyVmtwq/SbsDTecB5wqx+3BMr0pGzi Fs+73oThfB7JJp9tj81A8CTrnwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFE5W0LmR HY2pN3sJqoavSP8wvFNDMB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM2NDMvQTVEODg0QzQxNTJCMTFFQ0E1M0U0QzYzQzRGOUFFMDIvNUEwODA0QTQx NTJFMTFFQzk0QkNCMjY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAAteCQDBAFnPBYDBABnPGADBAFngygDBABn7j4wDQYJKoZI hvcNAQELBQADggEBAHW16eQERwQEG6/AGr5JPjHQt5pDyRKtaGnS+prF6e+NTrRg 9QpDfMqW1Dj4kricdRWvNWrc78n+nHqOyH7mMFfyFLUqHRhZWr75rBykL0SbcSE9 qtrWm3pzpStm4ortukM08iPzcIF46UW5w4FY7ClFyFriqxHOhY1MJAf4c0RfT1Q5 P+IJVGutrZjbgb6OyGfeW1eZDfkhcRUZJphepDH0FYe/SzghfG+XrQzXABqPaLrJ o498wJQVPsCFfR+OjsL70wt7Uxf6tSgRymahhAMTfO6Yp4XQ8hdKdENe2IPbjVlB +FWfJAqldWjOVRoQkwpjiUMrtzrkkBJ6FMknEvQ= -----END CERTIFICATE-----Generated at Sat Dec 6 22:45:27 2025 by rpki-client