This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/E9689162C8FE11F0BCA3A555C4F9AE02.roa File: E9689162C8FE11F0BCA3A555C4F9AE02.roa (raw, json) Hash identifier: cxYtuj/s/bSvnaQ4JfJbG+7S68mrHrbAGrbGPiwy+Uo= Subject key identifier: E7:C5:D7:75:A6:C7:4F:57:46:33:B9:01:64:D9:AF:97:DD:CD:B0:CE Certificate issuer: /CN=A919AE6A/serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2 Certificate serial: 0A Authority key identifier: F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/E9689162C8FE11F0BCA3A555C4F9AE02.roa Signing time: Mon 24 Nov 2025 06:29:21 +0000 ROA not before: Mon 24 Nov 2025 06:29:21 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 154261 IP address blocks: 43.240.54.0/23 maxlen: 23 43.240.54.0/24 maxlen: 24 43.240.55.0/24 maxlen: 24 2001:df6:2540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AE6A, serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2 Validity Not Before: Nov 24 06:29:21 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6923fb41-c1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d5:72:d1:a0:2c:79:13:58:25:70:59:a3:1a: fb:e6:d9:79:0b:45:91:12:2d:37:c6:9b:5b:f0:3c: 80:0a:85:87:49:f8:a5:46:3c:74:ac:27:64:a2:c7: 33:1d:6c:9d:4a:b5:ee:11:3e:1d:2c:ea:22:25:6d: 5e:79:bd:bc:1d:e6:f0:56:c5:21:61:f7:34:62:62: fe:32:16:ab:46:99:78:34:a0:08:51:d2:e7:24:ea: e9:ac:8c:3e:20:79:40:7d:44:ca:15:05:a7:33:be: a6:1c:f8:d5:75:75:9f:a2:76:f8:69:5f:f6:38:dc: 31:56:dd:ea:93:6b:e8:1e:01:89:5d:2c:79:41:ff: 0c:21:f6:14:34:fc:85:ab:6e:f3:06:e5:29:30:af: 5f:34:ca:1e:cf:96:d5:2a:04:61:d3:48:2b:01:19: 80:75:0f:a1:9e:c7:2a:22:06:c4:cc:d3:e8:fa:bb: 83:58:82:4f:c7:1c:d0:c1:64:5b:d7:35:73:eb:b6: 47:f9:c7:6e:8f:26:da:2f:68:54:8c:4b:22:47:e7: 57:33:d5:05:6e:4b:e8:59:0e:ca:06:7e:9c:7c:80: df:19:59:63:7b:68:fd:cb:ed:21:b1:7e:1e:bc:e6: e3:9e:71:ab:d8:00:de:58:24:f3:d1:fc:8a:74:0e: b2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C5:D7:75:A6:C7:4F:57:46:33:B9:01:64:D9:AF:97:DD:CD:B0:CE X509v3 Authority Key Identifier: keyid:F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/E9689162C8FE11F0BCA3A555C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.240.54.0/23 IPv6: 2001:df6:2540::/48 Signature Algorithm: sha256WithRSAEncryption 08:9e:e6:ea:62:76:ff:ea:c6:3f:9f:e8:9b:e5:ab:a2:4b:c2: ad:66:1d:15:0a:56:8f:b1:12:21:06:7f:c9:89:2b:ff:47:f4: 15:b8:ac:13:9d:db:ac:2f:fc:4f:fd:4a:ce:86:07:7c:79:ca: 65:fe:f8:75:5b:cc:54:30:e3:34:6a:81:21:19:1e:a9:06:6f: 7d:e2:90:73:93:92:88:f7:9a:80:95:c8:16:57:b6:b7:17:5c: 35:14:32:08:d1:47:89:cb:14:92:a0:82:c8:cd:27:99:69:7a: b5:a7:bf:2f:c1:50:1d:8e:f6:cf:a9:e5:ec:7f:d2:ab:93:16: fd:22:c2:b0:43:3c:d0:2b:a5:05:19:f6:72:72:7e:44:dc:2d: d1:54:44:dd:13:bc:e0:0d:45:bd:1c:b6:18:b1:42:ac:d6:49: 32:87:b7:b4:99:d8:c2:ae:e2:b2:84:1c:f7:79:f4:bc:3b:7e: 59:fd:a4:17:da:64:47:95:d7:87:75:4c:a6:47:49:aa:3d:2b: f1:38:bc:7e:f4:b6:1c:2d:b8:f4:ea:9f:e6:94:6a:e4:5b:95: 6e:f6:40:34:5b:e3:11:34:1a:19:60:df:4e:0e:8c:0a:93:d9: 20:66:a3:20:35:9b:79:5a:fd:92:85:bf:e1:a5:b6:b9:a6:a7: 6f:72:75:51 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QUU2QTExMC8GA1UEBRMoRjA1MjFBNUI2REIwNEQ3NTZGQTI5NTJBMEYyOUEzOTEy MTJDNThCMjAeFw0yNTExMjQwNjI5MjFaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjNmYjQxLWMxZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG1XLRoCx5E1glcFmjGvvm2XkLRZESLTfGm1vwPIAKhYdJ+KVGPHSsJ2SixzMd bJ1Kte4RPh0s6iIlbV55vbwd5vBWxSFh9zRiYv4yFqtGmXg0oAhR0uck6umsjD4g eUB9RMoVBaczvqYc+NV1dZ+idvhpX/Y43DFW3eqTa+geAYldLHlB/wwh9hQ0/IWr bvMG5Skwr180yh7PltUqBGHTSCsBGYB1D6GexyoiBsTM0+j6u4NYgk/HHNDBZFvX NXPrtkf5x26PJtovaFSMSyJH51cz1QVuS+hZDsoGfpx8gN8ZWWN7aP3L7SGxfh68 5uOecavYAN5YJPPR/Ip0DrIlAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU58XXdabH T1dGM7kBZNmvl93NsM4wHwYDVR0jBBgwFoAU8FIaW22wTXVvopUqDymjkSEsWLIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBRTZBLzIxOUQ3RDhBQkMx MjExRjA4NTVGRDg3QUM0RjlBRTAyLzhGSWFXMjJ3VFhWdm9wVXFEeW1qa1NFc1dM SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEZJYVcyMndUWFZ2b3BVcUR5bWprU0VzV0xJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUU2QS8yMTlEN0Q4QUJDMTIxMUYwODU1RkQ4N0FDNEY5QUUwMi9FOTY4OTE2MkM4 RkUxMUYwQkNBM0E1NTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEASvwNjAPBAIAAjAJAwcAIAEN9iVAMA0GCSqGSIb3DQEBCwUA A4IBAQAInubqYnb/6sY/n+ib5auiS8KtZh0VClaPsRIhBn/JiSv/R/QVuKwTndus L/xP/UrOhgd8ecpl/vh1W8xUMOM0aoEhGR6pBm994pBzk5KI95qAlcgWV7a3F1w1 FDII0UeJyxSSoILIzSeZaXq1p78vwVAdjvbPqeXsf9Krkxb9IsKwQzzQK6UFGfZy cn5E3C3RVETdE7zgDUW9HLYYsUKs1kkyh7e0mdjCruKyhBz3efS8O35Z/aQX2mRH ldeHdUymR0mqPSvxOLx+9LYcLbj06p/mlGrkW5Vu9kA0W+MRNBoZYN9ODowKk9kg ZqMgNZt5Wv2Shb/hpba5pqdvcnVR -----END CERTIFICATE-----Generated at Mon Dec 8 09:09:40 2025 by rpki-client