This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/D676DC068A7311EEB46D5B0BC4F9AE02.roa File: D676DC068A7311EEB46D5B0BC4F9AE02.roa (raw, json) Hash identifier: 7sh5158waxEGrYQ9/m768pYUuSViCdWzsmXCpRYvJFc= Subject key identifier: 9B:A5:79:EA:34:A6:BB:29:95:7B:7A:DB:B3:59:2C:CC:52:A2:30:90 Certificate issuer: /CN=A918F7E6/serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Certificate serial: 06DB Authority key identifier: 2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/D676DC068A7311EEB46D5B0BC4F9AE02.roa Signing time: Thu 04 Dec 2025 21:05:32 +0000 ROA not before: Thu 04 Dec 2025 21:05:32 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133130 IP address blocks: 43.245.112.0/22 maxlen: 24 103.252.56.0/22 maxlen: 22 103.252.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1755 (0x6db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7E6, serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Validity Not Before: Dec 4 21:05:32 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6931f79c-57d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0c:6c:a6:ca:10:d5:7a:26:cd:db:ee:ba:77: 4c:77:19:07:e4:6d:e2:49:3f:48:4b:23:9d:89:07: 30:5d:a2:12:46:a0:44:96:81:d5:09:08:b1:db:b2: 37:55:ce:71:6b:61:05:27:36:e4:98:be:15:a8:58: 0d:0a:38:05:d8:3e:37:fc:c3:fb:47:2b:3f:fc:56: 72:45:44:e6:5b:78:4e:22:f7:b8:9b:07:6c:97:01: 56:ad:54:18:72:11:58:6a:65:17:8c:18:ad:23:63: 0f:bd:7f:06:0d:26:0c:ae:cb:73:3e:b6:3b:a4:05: 54:6a:67:d6:cf:be:83:af:6e:7f:f3:7f:a8:4f:b0: 43:59:d5:4e:cc:aa:11:44:e4:31:75:b6:7e:d8:b9: d3:1c:2b:04:0d:63:3e:65:29:e4:a4:ad:ac:d5:4f: 36:b0:d2:53:70:db:86:57:8a:2d:1a:01:81:71:fe: 92:3d:70:71:59:6c:0e:2b:96:21:cc:e6:8e:4e:c4: 7b:84:2f:44:2f:6d:0b:33:d3:71:10:23:98:01:89: 54:40:96:31:ea:5e:fe:24:e1:d7:a6:d2:c2:c9:c1: ed:e2:08:b1:bf:0f:9a:7f:97:a5:17:8d:d4:03:1b: 53:2f:29:30:06:ce:66:c4:20:b6:99:5c:b8:fd:26: d3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A5:79:EA:34:A6:BB:29:95:7B:7A:DB:B3:59:2C:CC:52:A2:30:90 X509v3 Authority Key Identifier: keyid:2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/D676DC068A7311EEB46D5B0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.112.0/22 103.252.56.0/22 Signature Algorithm: sha256WithRSAEncryption 64:43:b7:75:07:a2:fd:c1:42:0b:40:51:b2:56:cd:49:5f:6c: ef:32:e4:05:32:7c:12:75:89:27:50:7f:d5:bd:c2:d6:53:0a: 10:c9:52:9d:82:a9:a6:75:df:03:d6:f4:a5:93:27:2d:29:fa: a2:dd:6e:e2:79:4d:8c:20:75:29:71:6c:0a:c3:f5:a3:fa:1c: a4:93:b1:d6:cf:0d:13:fc:6a:f7:96:15:e0:e4:82:e3:2b:dc: fe:7f:9b:03:3d:c7:ff:5d:95:d3:c7:db:f4:b6:15:6e:99:27: d9:33:c5:8e:cf:c8:a7:b2:cf:e9:a2:5c:14:a1:68:0a:e6:8c: f9:c7:a4:f8:d9:55:27:b3:fd:e4:d3:8e:f4:62:bc:ce:a4:ba: 2a:a0:2d:6c:1f:77:c5:9c:91:a6:83:fe:a0:e4:f4:95:15:ce: 87:32:95:3e:b6:42:07:06:9b:6a:93:49:ec:c0:54:c5:68:a5: 28:37:50:41:63:40:b9:d4:76:16:44:59:ec:a4:71:b1:e2:f2: bf:91:53:95:e5:a7:d5:07:0c:44:3a:e3:55:91:cb:c9:73:ab: a7:6f:c3:c8:24:48:9a:85:d0:f4:b3:ae:cc:cc:93:40:3d:40: 33:c9:72:88:24:de:b7:2e:3c:db:38:4b:7c:40:fb:8b:9d:53: e3:26:ee:f0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3RTYxMTAvBgNVBAUTKDJFNUMwQ0FFQTVGQUY5NkFERUEwMTU4QUE4RkI1MkZB MzQ2N0UwRTgwHhcNMjUxMjA0MjEwNTMyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMxZjc5Yy01N2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowxspsoQ1XomzdvuundMdxkH5G3iST9ISyOdiQcwXaISRqBEloHVCQix27I3 Vc5xa2EFJzbkmL4VqFgNCjgF2D43/MP7Rys//FZyRUTmW3hOIve4mwdslwFWrVQY chFYamUXjBitI2MPvX8GDSYMrstzPrY7pAVUamfWz76Dr25/83+oT7BDWdVOzKoR ROQxdbZ+2LnTHCsEDWM+ZSnkpK2s1U82sNJTcNuGV4otGgGBcf6SPXBxWWwOK5Yh zOaOTsR7hC9EL20LM9NxECOYAYlUQJYx6l7+JOHXptLCycHt4gixvw+af5elF43U AxtTLykwBs5mxCC2mVy4/SbT9wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJuleeo0 prsplXt627NZLMxSojCQMB8GA1UdIwQYMBaAFC5cDK6l+vlq3qAViqj7Uvo0Z+Do MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdFNi8wMUM3MkM4MDdE NzUxMUVCOEQ4RjQ4NkRDNEY5QUUwMi9MbHdNcnFYNi1XcmVvQldLcVB0Uy1qUm40 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsd01ycVg2LVdyZW9CV0txUHRTLWpSbjRPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY3RTYvMDFDNzJDODA3RDc1MTFFQjhEOEY0ODZEQzRGOUFFMDIvRDY3NkRDMDY4 QTczMTFFRUI0NkQ1QjBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr9XADBAJn/DgwDQYJKoZIhvcNAQELBQADggEBAGRDt3UH ov3BQgtAUbJWzUlfbO8y5AUyfBJ1iSdQf9W9wtZTChDJUp2CqaZ13wPW9KWTJy0p +qLdbuJ5TYwgdSlxbArD9aP6HKSTsdbPDRP8aveWFeDkguMr3P5/mwM9x/9dldPH 2/S2FW6ZJ9kzxY7PyKeyz+miXBShaArmjPnHpPjZVSez/eTTjvRivM6kuiqgLWwf d8WckaaD/qDk9JUVzocylT62QgcGm2qTSezAVMVopSg3UEFjQLnUdhZEWeykcbHi 8r+RU5Xlp9UHDEQ641WRy8lzq6dvw8gkSJqF0PSzrszMk0A9QDPJcogk3rcuPNs4 S3xA+4udU+Mm7vA= -----END CERTIFICATE-----Generated at Sat Dec 6 21:40:10 2025 by rpki-client