This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/E4EB20D84C0C11F08C577458C4F9AE02.roa File: E4EB20D84C0C11F08C577458C4F9AE02.roa (raw, json) Hash identifier: 2gw1MPH+9gJhqqbpMge6estJwPuHTaPF1vMXeS3q2UM= Subject key identifier: D8:6E:AF:4B:71:31:A9:94:1C:D2:51:85:73:F6:54:93:B4:3B:DE:CB Certificate issuer: /CN=A91975CC/serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C Certificate serial: 0398 Authority key identifier: 0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/E4EB20D84C0C11F08C577458C4F9AE02.roa Signing time: Wed 18 Jun 2025 06:24:31 +0000 ROA not before: Wed 18 Jun 2025 06:24:31 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 135352 IP address blocks: 43.225.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 920 (0x398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91975CC, serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C Validity Not Before: Jun 18 06:24:31 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68525b9f-f8cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b9:b3:05:99:a7:6c:41:fc:75:00:0f:d7:3f: e5:d8:ea:46:e9:25:a3:b2:be:66:a5:fa:7f:36:0d: 61:9e:cd:37:ec:3b:44:ef:a2:b4:08:50:4a:d9:9e: 2c:20:f6:da:9c:6f:05:ae:4d:c3:ab:32:ba:d8:74: f2:90:c0:95:5f:54:69:9e:c9:a4:e4:1c:02:8c:88: 92:fe:4b:d1:57:8f:6e:d0:af:2c:d2:34:50:4f:42: 26:4f:b5:60:14:c3:cc:1a:bb:cc:e6:e8:0a:72:8a: cc:b5:26:69:4a:61:53:86:57:a4:6e:36:5b:b8:d0: 43:e4:49:f5:24:fb:5e:b0:a4:d3:74:ce:16:25:ee: 03:79:c8:f7:64:6a:5a:e9:c4:e3:19:28:60:2a:1d: 1a:e6:df:3f:af:71:23:e1:15:63:b1:d5:60:6d:63: 74:be:2a:8c:58:f7:55:bf:67:5b:90:25:43:cc:e0: 3a:5f:4f:71:b9:94:86:f1:19:4f:d2:b3:71:65:d3: fa:25:b9:d2:6c:ca:61:5c:56:58:b2:dd:a8:b8:30: 00:77:46:0a:d9:db:0d:93:db:fa:af:73:b0:90:56: 33:87:4e:41:fc:1e:71:cb:03:b9:9b:d8:10:66:5d: c1:84:c3:df:9f:ae:8f:e5:d3:d2:1b:84:dd:61:9e: 5e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6E:AF:4B:71:31:A9:94:1C:D2:51:85:73:F6:54:93:B4:3B:DE:CB X509v3 Authority Key Identifier: keyid:0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/E4EB20D84C0C11F08C577458C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.60.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:02:e6:00:57:f3:a5:f3:d9:bc:86:c9:95:00:84:78:c2:48: c8:a9:ad:d4:9b:f6:4e:fb:8a:76:a6:c7:aa:44:54:5e:c3:59: f6:9e:74:55:09:bd:0e:f5:ca:d5:2b:24:e0:9b:89:65:6c:4b: 0e:30:b0:32:4e:87:a4:b6:e1:9f:20:7b:95:01:ec:55:c4:41: 77:7c:d2:5c:3f:28:13:2e:30:80:35:d2:33:fa:90:a2:9b:07: f8:ca:b8:d6:d6:01:d8:3d:78:85:80:8f:08:45:50:b7:e5:ce: fb:77:82:ef:56:8d:dd:33:d0:69:1a:fe:1d:ee:aa:95:3e:5d: 7b:af:b3:bd:81:ae:8a:b3:f3:23:1b:f4:69:72:69:59:0a:ab: dd:91:28:0a:6d:9b:42:4e:84:cb:68:0f:29:98:37:b2:5a:82: 6b:9f:32:e8:87:3b:62:cf:0f:fa:cf:5a:58:9a:fd:11:2d:0e: 4c:45:ca:5e:ab:1c:e7:28:e4:98:5e:08:60:91:9c:ff:ad:48: ac:1c:09:5b:a3:9b:34:ef:f7:97:ec:67:73:3d:3a:5c:9b:f0: 19:74:e3:bc:3c:b6:82:4d:88:b0:3f:bd:50:ba:72:1e:c6:c9: e8:55:c2:63:ed:fc:cb:5c:0f:89:34:24:34:f5:32:ee:71:ea: 74:68:4e:fb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1Q0MxMTAvBgNVBAUTKDBCQUM0Mjk4NkU5QUJEQjdDRUUyQ0RGQjJBOUZFOEQ2 RDAyQUFCNUMwHhcNMjUwNjE4MDYyNDMxWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODUyNWI5Zi1mOGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrmzBZmnbEH8dQAP1z/l2OpG6SWjsr5mpfp/Ng1hns037DtE76K0CFBK2Z4s IPbanG8Frk3DqzK62HTykMCVX1Rpnsmk5BwCjIiS/kvRV49u0K8s0jRQT0ImT7Vg FMPMGrvM5ugKcorMtSZpSmFThlekbjZbuNBD5En1JPtesKTTdM4WJe4Decj3ZGpa 6cTjGShgKh0a5t8/r3Ej4RVjsdVgbWN0viqMWPdVv2dbkCVDzOA6X09xuZSG8RlP 0rNxZdP6JbnSbMphXFZYst2ouDAAd0YK2dsNk9v6r3OwkFYzh05B/B5xywO5m9gQ Zl3BhMPfn66P5dPSG4TdYZ5ewQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNhur0tx MamUHNJRhXP2VJO0O97LMB8GA1UdIwQYMBaAFAusQphumr23zuLN+yqf6NbQKqtc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzVDQy8xRUEzNDNFMkFG RTMxMUVDQTJDQjA2NkRDNEY5QUUwMi9DNnhDbUc2YXZiZk80czM3S3BfbzF0QXFx MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2eENtRzZhdmJmTzRzMzdLcF9vMXRBcXExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTc1Q0MvMUVBMzQzRTJBRkUzMTFFQ0EyQ0IwNjZEQzRGOUFFMDIvRTRFQjIwRDg0 QzBDMTFGMDhDNTc3NDU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr4TwwDQYJKoZIhvcNAQELBQADggEBAI8C5gBX86Xz2byG yZUAhHjCSMiprdSb9k77inamx6pEVF7DWfaedFUJvQ71ytUrJOCbiWVsSw4wsDJO h6S24Z8ge5UB7FXEQXd80lw/KBMuMIA10jP6kKKbB/jKuNbWAdg9eIWAjwhFULfl zvt3gu9Wjd0z0Gka/h3uqpU+XXuvs72Broqz8yMb9GlyaVkKq92RKAptm0JOhMto DymYN7JagmufMuiHO2LPD/rPWlia/REtDkxFyl6rHOco5JheCGCRnP+tSKwcCVuj mzTv95fsZ3M9Olyb8Bl047w8toJNiLA/vVC6ch7GyehVwmPt/MtcD4k0JDT1Mu5x 6nRoTvs= -----END CERTIFICATE-----Generated at Sun Dec 7 04:56:03 2025 by rpki-client