This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/FDA3EFA45C6211EB91658215C4F9AE02.roa File: FDA3EFA45C6211EB91658215C4F9AE02.roa (raw, json) Hash identifier: 3IMbjiUOCfbRYN7Htz538ACGC+HZm8dI0Isqa2du++M= Subject key identifier: 6E:C8:9E:F5:99:8A:A5:5A:60:89:48:04:CE:BF:0B:B8:DD:E6:A7:94 Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 0743 Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/FDA3EFA45C6211EB91658215C4F9AE02.roa Signing time: Thu 04 Dec 2025 21:04:44 +0000 ROA not before: Thu 04 Dec 2025 21:04:44 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 14618 IP address blocks: 103.124.134.0/24 maxlen: 24 103.124.135.0/24 maxlen: 24 2403:e040:8000::/34 maxlen: 34 2403:e040:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1859 (0x743) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: Dec 4 21:04:44 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6931f76c-d4cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9d:f7:55:bd:50:8a:7e:46:ad:d7:24:f8:4d: b1:b9:0f:a7:da:a3:b9:e9:d0:35:02:1b:27:c5:a9: 00:6e:b1:2e:a0:64:35:50:be:42:8c:bf:d1:b1:6e: 90:07:ce:94:a4:cb:79:a5:2a:c0:03:d4:74:67:61: 95:88:9e:9d:22:21:05:76:1a:e4:6d:a2:da:2b:6d: 1b:86:85:3f:f1:0b:7f:d6:13:5a:a9:6c:d4:b9:80: f1:4f:86:f1:42:11:7a:40:91:ae:0b:17:3e:d1:f0: 4f:cb:c7:e5:ba:d4:a6:e4:a6:4f:2b:51:b2:10:cf: b0:f1:b0:07:3f:0a:ba:bb:c7:81:04:7f:28:6e:e5: 2d:98:26:be:5f:be:33:07:30:0c:1d:66:a4:7a:40: 5b:a5:39:84:a3:0c:6d:56:8c:ba:68:d6:76:ed:cb: bb:ea:51:c5:81:e0:f0:02:5b:06:2e:e5:05:dc:f7: 2e:3b:b5:d1:4a:04:ed:8b:47:4f:2e:f6:45:6f:9d: 1f:1c:69:9f:0a:17:47:04:16:4f:44:a5:b0:21:93: f6:92:4c:47:5e:2c:eb:fa:cc:02:20:24:af:dd:47: b3:e1:45:30:88:bc:48:54:98:43:a5:64:01:0f:d1: c6:77:50:4f:24:76:1c:14:77:39:5b:42:95:9f:f2: bf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C8:9E:F5:99:8A:A5:5A:60:89:48:04:CE:BF:0B:B8:DD:E6:A7:94 X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/FDA3EFA45C6211EB91658215C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.124.134.0/23 IPv6: 2403:e040:8000::/33 Signature Algorithm: sha256WithRSAEncryption 90:72:58:88:50:b8:dc:80:f0:6a:97:69:61:f6:d2:e9:2b:1f: 4d:60:d0:4f:4c:fe:7c:2b:40:70:04:b8:4c:55:20:8b:cd:d5: 58:80:16:d2:3c:e5:70:eb:59:79:98:61:3b:65:5a:c6:2f:46: ef:a4:51:78:25:a8:ef:5f:8c:f9:ea:cd:19:85:2b:4e:8c:b3: 3f:d6:2e:c4:23:f0:9e:13:b1:ef:16:5e:a3:3c:d5:30:4e:d1: 4f:36:48:a5:07:c1:eb:a1:36:84:24:15:6e:96:7a:8c:48:a2: 9a:4a:c3:63:5c:7f:e8:de:7c:51:bf:9c:21:3f:d2:49:69:82: 15:35:1c:98:52:e7:03:41:ac:eb:45:03:ae:d7:de:15:10:67: 87:15:bf:00:48:55:5b:70:4f:85:41:f8:72:f2:2a:74:ab:6f: cc:9c:fd:65:c1:c9:0d:2b:ce:d5:b9:93:0c:71:3c:ce:dd:bc: 61:26:e4:87:de:14:56:5b:b1:ee:5f:82:bf:c5:83:ac:e3:f3: fe:8b:d9:3a:a3:57:39:44:e6:70:32:4b:fc:97:13:2e:62:df: ba:33:36:42:8e:e5:ce:6d:3a:69:8e:55:96:19:25:8d:4b:ae: c0:20:0e:33:18:c1:90:9e:6f:1d:39:03:d4:e8:41:38:00:9d: a4:e2:6c:0b -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICB0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjUxMjA0MjEwNDQ0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMxZjc2Yy1kNGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJ33Vb1Qin5Grdck+E2xuQ+n2qO56dA1AhsnxakAbrEuoGQ1UL5CjL/RsW6Q B86UpMt5pSrAA9R0Z2GViJ6dIiEFdhrkbaLaK20bhoU/8Qt/1hNaqWzUuYDxT4bx QhF6QJGuCxc+0fBPy8flutSm5KZPK1GyEM+w8bAHPwq6u8eBBH8obuUtmCa+X74z BzAMHWakekBbpTmEowxtVoy6aNZ27cu76lHFgeDwAlsGLuUF3PcuO7XRSgTti0dP LvZFb50fHGmfChdHBBZPRKWwIZP2kkxHXizr+swCICSv3Uez4UUwiLxIVJhDpWQB D9HGd1BPJHYcFHc5W0KVn/K/zwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFG7InvWZ iqVaYIlIBM6/C7jd5qeUMB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzFBMUIvREM1OENDNUE1QzQxMTFFQjgxRDdDNjBCQzRGOUFFMDIvRkRBM0VGQTQ1 QzYyMTFFQjkxNjU4MjE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAFnfIYwDgQCAAIwCAMGByQD4ECAMA0GCSqGSIb3DQEBCwUA A4IBAQCQcliIULjcgPBql2lh9tLpKx9NYNBPTP58K0BwBLhMVSCLzdVYgBbSPOVw 61l5mGE7ZVrGL0bvpFF4JajvX4z56s0ZhStOjLM/1i7EI/CeE7HvFl6jPNUwTtFP NkilB8HroTaEJBVulnqMSKKaSsNjXH/o3nxRv5whP9JJaYIVNRyYUucDQazrRQOu 194VEGeHFb8ASFVbcE+FQfhy8ip0q2/MnP1lwckNK87VuZMMcTzO3bxhJuSH3hRW W7HuX4K/xYOs4/P+i9k6o1c5ROZwMkv8lxMuYt+6MzZCjuXObTppjlWWGSWNS67A IA4zGMGQnm8dOQPU6EE4AJ2k4mwL -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:22 2025 by rpki-client