This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/DC06CBC0419A11EAA5E2BA6EC4F9AE02.roa File: DC06CBC0419A11EAA5E2BA6EC4F9AE02.roa (raw, json) Hash identifier: G2W8m/eV6702B0nYB9iT5F2PnH2esMGhObytqKEXlpg= Subject key identifier: 5B:E2:E3:45:3A:50:40:BE:CB:E1:D4:9E:B7:C1:85:0D:34:DC:A5:3C Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Certificate serial: 0B8A Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/DC06CBC0419A11EAA5E2BA6EC4F9AE02.roa Signing time: Tue 02 Dec 2025 18:50:21 +0000 ROA not before: Tue 02 Dec 2025 18:50:21 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132827 IP address blocks: 43.249.92.0/24 maxlen: 24 43.249.93.0/24 maxlen: 24 43.249.94.0/23 maxlen: 23 43.249.95.0/24 maxlen: 24 103.246.254.0/24 maxlen: 24 103.246.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2954 (0xb8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Validity Not Before: Dec 2 18:50:21 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=692f34ec-c89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1b:59:07:6f:3b:90:b6:2a:ba:53:c1:f5:d4: 0e:1f:40:99:70:3d:d0:c7:3d:bb:c1:84:82:ab:04: a5:73:98:c0:5e:aa:f2:61:6b:9b:82:b1:43:fe:f8: c0:f1:85:f9:36:ee:fd:d9:c0:c3:44:ec:d4:b3:46: b1:b8:44:d1:ba:19:f6:08:ea:40:4c:24:a9:27:e6: 42:1c:f2:09:63:36:94:76:7b:2c:96:34:c4:6e:d8: 1e:05:22:43:69:b8:1b:e2:ca:07:22:f5:e2:16:e5: 88:ab:6f:86:a5:95:b2:5d:b5:e2:75:05:12:1a:d1: 7a:91:29:8f:3f:92:a9:62:b4:be:2d:ad:ab:57:0a: 78:e1:2b:a9:3e:41:d8:6f:87:80:25:ee:b1:f0:0a: c2:4b:d0:dc:28:ec:45:dd:52:ff:45:7e:1c:f8:ed: 76:a4:e4:0d:36:7f:c8:7c:0b:e9:24:a5:bb:11:d2: 2d:9c:f4:52:87:1e:89:fc:f6:cb:f2:de:ee:f6:91: 89:81:00:31:15:b2:a3:a9:8a:6e:11:d7:5f:1f:35: 45:d1:aa:19:86:32:a4:da:1d:e8:3f:55:85:b2:1f: 53:b7:c9:24:ee:fb:5f:32:16:49:5c:3a:7e:0e:00: 02:78:99:e5:0b:a5:e2:b3:c0:32:6a:05:9e:88:5b: 63:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E2:E3:45:3A:50:40:BE:CB:E1:D4:9E:B7:C1:85:0D:34:DC:A5:3C X509v3 Authority Key Identifier: keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/DC06CBC0419A11EAA5E2BA6EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.92.0/22 103.246.254.0/23 Signature Algorithm: sha256WithRSAEncryption 73:f8:83:16:ad:c3:78:b8:5c:30:ae:f8:fb:db:eb:6e:82:ce: 86:84:4e:e7:03:7e:57:24:64:76:22:a4:ac:8e:4f:23:7a:46: fb:eb:af:cc:4f:e8:15:f8:84:72:00:bd:9e:e9:03:8b:80:b4: fb:3a:9a:7c:75:d9:04:0d:29:4d:7c:36:34:70:cc:df:69:86: 21:06:32:7d:9b:5c:5f:29:79:56:62:15:a2:d9:31:f8:60:17: 37:18:08:8a:95:2c:9c:bd:38:21:d4:10:2e:0d:4a:ef:4e:e7: da:f0:3d:9b:15:59:ca:ac:07:f4:e2:d0:81:13:34:6c:90:36: 3a:ed:09:8a:a4:3d:45:4b:09:64:cd:73:3d:9a:ac:cc:a6:50: 37:bb:bb:2f:34:1a:92:d3:89:71:d7:eb:2e:00:b4:fa:de:b8: eb:44:c3:f6:9a:04:f4:ce:b8:21:c3:b5:9f:20:f0:18:ad:09: 99:46:13:6a:e8:24:a5:26:bc:70:6d:51:74:4f:70:31:ab:3a: ed:98:bc:77:97:76:2c:2c:2e:b8:78:d1:56:4f:eb:ec:6b:16: 17:b9:f6:e4:47:09:6f:5f:08:46:98:54:ad:09:4b:b4:29:46: ff:12:fa:79:96:65:72:66:fb:12:11:01:26:4a:1f:37:77:a5: c6:a0:a3:47 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICC4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF M0RBRDE1NzEwHhcNMjUxMjAyMTg1MDIxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmMzRlYy1jODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxtZB287kLYqulPB9dQOH0CZcD3Qxz27wYSCqwSlc5jAXqryYWubgrFD/vjA 8YX5Nu792cDDROzUs0axuETRuhn2COpATCSpJ+ZCHPIJYzaUdnssljTEbtgeBSJD abgb4soHIvXiFuWIq2+GpZWyXbXidQUSGtF6kSmPP5KpYrS+La2rVwp44SupPkHY b4eAJe6x8ArCS9DcKOxF3VL/RX4c+O12pOQNNn/IfAvpJKW7EdItnPRShx6J/PbL 8t7u9pGJgQAxFbKjqYpuEddfHzVF0aoZhjKk2h3oP1WFsh9Tt8kk7vtfMhZJXDp+ DgACeJnlC6Xis8AyagWeiFtjGwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFvi40U6 UEC+y+HUnrfBhQ003KU8MB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZDNDAvNjE3RjM1MzY0MEUxMTFFQUJDNjJEQjI2QzRGOUFFMDIvREMwNkNCQzA0 MTlBMTFFQUE1RTJCQTZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr+VwDBAFn9v4wDQYJKoZIhvcNAQELBQADggEBAHP4gxat w3i4XDCu+Pvb626CzoaETucDflckZHYipKyOTyN6Rvvrr8xP6BX4hHIAvZ7pA4uA tPs6mnx12QQNKU18NjRwzN9phiEGMn2bXF8peVZiFaLZMfhgFzcYCIqVLJy9OCHU EC4NSu9O59rwPZsVWcqsB/Ti0IETNGyQNjrtCYqkPUVLCWTNcz2arMymUDe7uy80 GpLTiXHX6y4AtPreuOtEw/aaBPTOuCHDtZ8g8BitCZlGE2roJKUmvHBtUXRPcDGr Ou2YvHeXdiwsLrh40VZP6+xrFhe59uRHCW9fCEaYVK0JS7QpRv8S+nmWZXJm+xIR ASZKHzd3pcago0c= -----END CERTIFICATE-----Generated at Sun Dec 7 04:20:30 2025 by rpki-client