This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/258F8662BBDF11ED8CE89144C4F9AE02.roa File: 258F8662BBDF11ED8CE89144C4F9AE02.roa (raw, json) Hash identifier: Vk/BPlikr8GL2wUW/O/0DN0xiV+fIUVJRYZDatgCOv8= Subject key identifier: 13:8A:83:28:02:F5:3B:C5:C6:9E:88:72:DD:69:85:54:53:45:14:77 Certificate issuer: /CN=A916EF5E/serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361 Certificate serial: 1028 Authority key identifier: 42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/258F8662BBDF11ED8CE89144C4F9AE02.roa Signing time: Tue 18 Nov 2025 16:35:04 +0000 ROA not before: Tue 18 Nov 2025 16:35:04 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 54415 IP address blocks: 103.99.168.0/24 maxlen: 24 2401:b140::/48 maxlen: 48 2401:b140:1::/48 maxlen: 48 2401:b140:2::/48 maxlen: 48 2401:b140:3::/48 maxlen: 48 2401:b140:4::/48 maxlen: 48 2401:b140:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4136 (0x1028) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361 Validity Not Before: Nov 18 16:35:04 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=691ca038-edea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:e7:dc:f1:13:f7:8c:62:fe:f5:13:23:6e: 0f:22:d4:45:96:cb:3b:f5:c4:09:b0:a6:ed:68:00: f3:cf:11:7c:74:0e:bd:14:40:73:06:35:9d:dc:dd: eb:0a:d2:c5:87:c1:a5:38:cf:dd:0d:f0:52:8d:86: 35:7b:ad:5d:87:f9:6c:52:a2:d7:e3:77:74:3b:da: 38:a7:93:98:c4:80:56:6c:98:17:b5:c0:39:eb:90: e4:84:6c:a7:85:d7:e6:33:da:b5:45:e5:d8:dc:06: fb:2a:52:90:5c:08:c2:65:8c:6b:ce:d6:5f:fa:97: 78:51:8d:06:04:ea:9c:54:48:74:e8:60:fe:d2:5d: 5a:c8:e2:58:d4:b0:ff:9e:1f:af:44:20:4c:c0:1f: 68:6e:37:b7:65:2a:a1:c8:c2:49:bb:f5:a7:2b:5e: a8:25:bd:c9:65:75:56:f6:79:2c:6b:fc:2d:84:e1: cf:da:24:b1:a5:4a:98:00:b7:cd:7d:88:79:6b:fb: 49:47:81:26:f1:50:49:b9:6b:d1:f5:84:0e:fe:24: 65:ea:1a:1a:6a:dd:fc:13:df:5d:6e:26:9b:7a:d3: 5d:ee:3a:ce:be:27:55:2e:83:d9:05:d0:26:c4:35: ff:78:6f:29:03:29:31:29:b7:02:76:3c:76:11:9f: 89:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:8A:83:28:02:F5:3B:C5:C6:9E:88:72:DD:69:85:54:53:45:14:77 X509v3 Authority Key Identifier: keyid:42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/258F8662BBDF11ED8CE89144C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.168.0/24 IPv6: 2401:b140::-2401:b140:5:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3d:5f:ce:06:98:62:ce:b4:b9:c0:f2:20:00:e1:5d:ce:1e:f6: 91:ef:8c:bd:b7:43:4c:08:2f:00:28:7a:e4:df:53:53:eb:38: 9e:b5:bc:27:a8:5e:1a:6e:b5:e8:a6:9a:43:66:d9:d3:93:0c: 89:dd:51:40:b0:fe:19:8e:a6:65:c9:bb:a1:68:e8:12:0c:0c: aa:04:70:49:f0:ed:70:37:09:63:a9:d2:c3:e7:7a:d0:42:27: c4:86:da:5d:b0:db:50:ab:20:fb:07:a9:18:e6:cd:34:29:d8: 88:6f:d1:5f:77:6e:63:15:f9:68:cd:b9:be:c0:b2:76:cb:b8: 1f:b2:8d:d4:b2:74:6f:bf:aa:75:3f:62:91:d2:0c:a7:e1:40: 1c:f7:60:67:15:d8:93:7e:37:f1:18:6b:de:6f:46:83:2c:f8: d4:17:eb:71:da:c5:82:57:84:2c:5f:02:44:25:d6:87:3d:6f: be:c5:ff:24:95:eb:5a:78:d9:81:d9:71:a4:d7:4e:ab:ff:0c: 4a:60:57:7d:81:66:88:e0:38:e8:f7:a2:df:af:e1:78:3d:6f: 03:b4:32:c9:f3:6c:35:92:ec:42:3a:89:96:32:41:8c:3e:b4: d1:f5:f3:b5:38:03:87:4e:b0:21:64:0f:6a:1e:85:93:8a:40: 40:4c:7a:19 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICECgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKDQyMTgyRjVGNzFBNTg5ODRDRTg4NTlBRTYwQTRDQUNB NzNGRTgzNjEwHhcNMjUxMTE4MTYzNTA0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFjYTAzOC1lZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtETn3PET94xi/vUTI24PItRFlss79cQJsKbtaADzzxF8dA69FEBzBjWd3N3r CtLFh8GlOM/dDfBSjYY1e61dh/lsUqLX43d0O9o4p5OYxIBWbJgXtcA565DkhGyn hdfmM9q1ReXY3Ab7KlKQXAjCZYxrztZf+pd4UY0GBOqcVEh06GD+0l1ayOJY1LD/ nh+vRCBMwB9obje3ZSqhyMJJu/WnK16oJb3JZXVW9nksa/wthOHP2iSxpUqYALfN fYh5a/tJR4Em8VBJuWvR9YQO/iRl6hoaat38E99dbiabetNd7jrOvidVLoPZBdAm xDX/eG8pAykxKbcCdjx2EZ+JNwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFBOKgygC 9TvFxp6Ict1phVRTRRR3MB8GA1UdIwQYMBaAFEIYL19xpYmEzohZrmCkyspz/oNh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS9GMzhEQ0Y4QTEw NkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9RaGd2WDNHbGlZVE9pRm11WUtUS3luUC1n MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FoZ3ZYM0dsaVlUT2lGbXVZS1RLeW5QLWcyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkVGNUUvRjM4RENGOEExMDZCMTFFOEI4Q0EwMjBCQzRGOUFFMDIvMjU4Rjg2NjJC QkRGMTFFRDhDRTg5MTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMAwEAgABMAYDBABnY6gwGAQCAAIwEjAQAwUGJAGxQAMHASQBsUAABDANBgkq hkiG9w0BAQsFAAOCAQEAPV/OBphizrS5wPIgAOFdzh72ke+MvbdDTAgvACh65N9T U+s4nrW8J6heGm616KaaQ2bZ05MMid1RQLD+GY6mZcm7oWjoEgwMqgRwSfDtcDcJ Y6nSw+d60EInxIbaXbDbUKsg+wepGObNNCnYiG/RX3duYxX5aM25vsCydsu4H7KN 1LJ0b7+qdT9ikdIMp+FAHPdgZxXYk3438Rhr3m9Ggyz41BfrcdrFgleELF8CRCXW hz1vvsX/JJXrWnjZgdlxpNdOq/8MSmBXfYFmiOA46Pei36/heD1vA7QyyfNsNZLs QjqJljJBjD600fXztTgDh06wIWQPah6Fk4pAQEx6GQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:25:17 2025 by rpki-client