This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/1ED4125C50C111EFA64C2437C4F9AE02.roa File: 1ED4125C50C111EFA64C2437C4F9AE02.roa (raw, json) Hash identifier: 02gdGUoKaGU981qYNAOicujQXSbUOhKyvNrMWXNfXQk= Subject key identifier: 11:A3:9F:E1:BA:08:B9:5E:3E:10:01:FF:02:39:B8:B8:18:5C:9A:48 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 057A Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/1ED4125C50C111EFA64C2437C4F9AE02.roa Signing time: Wed 19 Nov 2025 09:53:53 +0000 ROA not before: Wed 19 Nov 2025 09:53:53 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 36007 IP address blocks: 103.6.168.0/24 maxlen: 24 103.6.169.0/24 maxlen: 24 103.6.170.0/24 maxlen: 24 103.6.171.0/24 maxlen: 24 103.102.46.0/24 maxlen: 24 103.125.216.0/24 maxlen: 24 103.125.217.0/24 maxlen: 24 103.125.218.0/24 maxlen: 24 103.125.219.0/24 maxlen: 24 114.29.239.0/24 maxlen: 24 2401:df40:2::/48 maxlen: 48 2403:fa40:1::/48 maxlen: 48 2403:fa40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1402 (0x57a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Nov 19 09:53:53 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=691d93b1-72e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:07:d9:0f:62:bc:35:9b:62:6d:f2:91:50:62: 5c:3a:d7:ea:da:00:9c:5c:65:36:7c:cb:01:6a:07: 3e:b8:cf:b1:61:75:14:8d:fd:e4:6b:a5:90:bb:36: 53:97:79:ca:73:98:d2:b5:5c:99:db:ec:2a:38:b3: 33:03:07:5d:d4:8f:d2:0a:a0:a1:5a:7f:b7:4f:be: c6:60:00:fe:1a:e4:ed:d6:8f:d5:30:c7:62:d6:0b: 40:87:3a:5a:c0:08:99:4c:22:85:b6:dc:29:26:f9: 83:62:57:8e:fb:40:49:57:06:50:97:c2:32:c4:d0: b3:d1:0f:68:58:7f:91:bc:65:91:a1:81:69:c2:42: 12:11:c8:6e:07:66:86:2d:6f:56:2c:a5:da:46:23: 08:c7:7b:08:0f:8e:fb:71:45:a6:6f:03:a2:2a:9b: 98:7b:2a:04:15:68:a8:11:a0:41:e4:f7:7c:64:b9: 29:9e:d8:b4:3e:26:13:70:47:04:1a:9c:e7:49:e5: 4b:f5:52:06:cc:95:73:ef:f7:b4:6c:26:cb:ce:b7: c2:cb:8c:a5:73:33:46:a7:03:b7:27:d0:05:da:31: e1:fd:37:91:e8:1f:a0:4c:98:63:a2:f4:b7:a0:ac: 4f:46:29:0f:89:59:55:83:d0:50:56:70:6b:3d:67: 15:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A3:9F:E1:BA:08:B9:5E:3E:10:01:FF:02:39:B8:B8:18:5C:9A:48 X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/1ED4125C50C111EFA64C2437C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.6.168.0/22 103.102.46.0/24 103.125.216.0/22 114.29.239.0/24 IPv6: 2401:df40:2::/48 2403:fa40:1::-2403:fa40:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 09:ec:23:43:5d:ec:b1:37:51:61:56:e8:7c:0c:25:ea:07:55: 18:93:98:9d:ec:cd:cd:2c:19:23:51:d3:ec:67:2d:c1:00:5d: 06:2c:e4:40:f2:b8:dc:ca:f8:30:0a:98:c4:42:16:58:72:b4: ce:e1:d7:aa:21:c9:75:8a:15:d5:a4:e0:77:5c:c7:7b:43:05: ca:bf:40:f3:e9:ac:5d:56:de:25:d9:73:44:b1:69:e4:df:83: b4:df:16:1d:29:6c:cb:1a:34:29:ba:9f:cd:9f:1d:97:8a:c8: 9c:40:83:f8:14:e6:4b:b2:4c:ec:12:b9:2c:29:dd:98:e0:82: 3d:c3:f5:6f:d6:ad:31:17:b1:6b:27:2b:f7:ce:5e:66:91:a4: 36:d4:f5:9a:e2:cb:2d:7f:df:c1:ee:60:c9:b0:96:6f:97:d3: ed:aa:a4:d7:a3:10:d9:03:ab:16:6e:65:03:9b:e2:4d:a6:fd: 6b:8a:dc:b1:77:eb:5a:82:65:23:7a:d1:5c:71:bb:c4:11:58: 0c:e3:cd:f7:07:91:5a:52:2d:bc:af:bf:fd:43:2d:52:bb:c1: 02:6a:4c:8e:68:9d:98:a6:6f:38:56:2e:21:e3:b7:dc:67:49: 27:4a:10:73:4b:00:54:1b:eb:d7:e7:5a:ed:6d:92:6e:60:da: 30:9c:9c:26 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgICBXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjUxMTE5MDk1MzUzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFkOTNiMS03MmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowfZD2K8NZtibfKRUGJcOtfq2gCcXGU2fMsBagc+uM+xYXUUjf3ka6WQuzZT l3nKc5jStVyZ2+wqOLMzAwdd1I/SCqChWn+3T77GYAD+GuTt1o/VMMdi1gtAhzpa wAiZTCKFttwpJvmDYleO+0BJVwZQl8IyxNCz0Q9oWH+RvGWRoYFpwkISEchuB2aG LW9WLKXaRiMIx3sID477cUWmbwOiKpuYeyoEFWioEaBB5Pd8ZLkpnti0PiYTcEcE GpznSeVL9VIGzJVz7/e0bCbLzrfCy4ylczNGpwO3J9AF2jHh/TeR6B+gTJhjovS3 oKxPRikPiVlVg9BQVnBrPWcVHwIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFBGjn+G6 CLlePhAB/wI5uLgYXJpIMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU0QjcvRUIzMTJGMDIxRUFBMTFFQ0I3NTZCRjMwQzRGOUFFMDIvMUVENDEyNUM1 MEMxMTFFRkE2NEMyNDM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVgYIKwYBBQUHAQcBAf8E RzBFMB4EAgABMBgDBAJnBqgDBABnZi4DBAJnfdgDBAByHe8wIwQCAAIwHQMHACQB 30AAAjASAwcAJAP6QAABAwcAJAP6QAACMA0GCSqGSIb3DQEBCwUAA4IBAQAJ7CND XeyxN1FhVuh8DCXqB1UYk5id7M3NLBkjUdPsZy3BAF0GLORA8rjcyvgwCpjEQhZY crTO4deqIcl1ihXVpOB3XMd7QwXKv0Dz6axdVt4l2XNEsWnk34O03xYdKWzLGjQp up/Nnx2XisicQIP4FOZLskzsErksKd2Y4II9w/Vv1q0xF7FrJyv3zl5mkaQ21PWa 4sstf9/B7mDJsJZvl9PtqqTXoxDZA6sWbmUDm+JNpv1rityxd+tagmUjetFccbvE EVgM4833B5FaUi28r7/9Qy1Su8ECakyOaJ2Ypm84Vi4h47fcZ0knShBzSwBUG+vX 51rtbZJuYNownJwm -----END CERTIFICATE-----Generated at Sat Dec 6 19:14:46 2025 by rpki-client