This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/9A7071C0462E11ED90035452C4F9AE02.roa File: 9A7071C0462E11ED90035452C4F9AE02.roa (raw, json) Hash identifier: M0oc9XetLztbsHYcH9r9JqV1HvBgRP44vMkf2i+UcSQ= Subject key identifier: 46:EB:C8:13:75:83:FD:D2:84:51:29:49:29:37:C8:1C:7C:E3:9D:0C Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Certificate serial: 0262 Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/9A7071C0462E11ED90035452C4F9AE02.roa Signing time: Thu 27 Nov 2025 00:17:51 +0000 ROA not before: Thu 27 Nov 2025 00:17:51 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133748 IP address blocks: 43.249.248.0/22 maxlen: 24 103.41.128.0/22 maxlen: 24 203.208.22.0/24 maxlen: 24 2401:b080::/32 maxlen: 32 2401:b080:1::/48 maxlen: 48 2401:b080:63::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 610 (0x262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74, serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Validity Not Before: Nov 27 00:17:51 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692798ae-5c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bb:cd:d7:9a:1f:4e:a8:f8:7a:31:0b:cf:85: c8:53:2b:b9:04:fb:9c:c4:dd:15:89:2e:34:5c:e0: 2e:c9:90:e5:9d:77:84:89:37:ac:9a:92:c4:26:01: a9:0e:58:60:a2:b9:31:88:3c:bd:4c:cb:fd:e2:1d: 6c:5f:44:36:46:52:3e:bd:47:93:da:2c:cd:0e:8b: 23:83:70:df:51:f3:19:20:ff:04:e3:fe:8c:9e:6f: 48:5e:bf:50:1e:7f:a2:76:34:b2:5a:b0:94:b6:02: 02:ca:96:0d:3f:06:ac:39:29:2a:05:9d:d6:b4:6c: b5:d1:0b:e5:8c:f6:3f:6a:20:cd:aa:72:34:fa:5e: af:7b:9f:08:b5:b1:56:a1:77:76:94:11:4c:8c:63: 31:5b:11:ce:7b:f1:43:a4:7f:dd:f3:94:18:b3:42: 84:29:05:82:b3:63:88:eb:d7:59:90:86:b4:88:53: bd:59:36:01:29:dc:dc:d5:a9:dd:94:95:9a:e9:c5: 44:15:f7:af:9b:9b:51:8c:e5:74:60:18:82:30:d6: db:8f:39:d8:bb:67:32:48:f1:1e:ac:6a:20:73:ca: a3:12:b4:67:f7:6c:f1:56:4f:56:1e:c9:2c:7d:a1: 1e:af:ce:47:9b:d0:88:68:6e:28:fb:66:84:b1:6c: 86:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EB:C8:13:75:83:FD:D2:84:51:29:49:29:37:C8:1C:7C:E3:9D:0C X509v3 Authority Key Identifier: keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/9A7071C0462E11ED90035452C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.248.0/22 103.41.128.0/22 203.208.22.0/24 IPv6: 2401:b080::/32 Signature Algorithm: sha256WithRSAEncryption 28:79:97:11:a9:c3:9d:dd:10:c2:ad:0c:e7:6f:83:3d:f8:e1: d6:d1:fa:72:14:3f:3d:1f:8d:41:2d:06:5b:97:9c:ce:c3:0f: 07:88:e6:71:88:a6:ba:17:1c:a1:0a:38:ab:01:d7:0d:f1:9a: c6:84:a1:4c:59:9d:32:be:9e:3b:7f:cc:bd:1d:43:76:4e:fb: ae:3c:b5:ee:f1:2c:0c:5d:4f:6b:25:3a:e2:53:c8:89:7b:f2: 12:53:58:7d:d8:80:33:4c:93:0d:4e:e8:2e:96:55:e4:f9:31: b2:f2:46:58:07:1f:0b:86:51:dd:04:ee:5d:82:b9:05:b5:5c: b4:01:e7:df:4b:0b:48:ca:63:20:a6:21:41:2a:94:b7:02:2e: 30:fe:d0:77:e0:a8:ac:4b:47:8d:e5:8e:a9:37:7d:45:51:7c: 8b:c3:7f:7a:7a:ac:f1:24:b7:70:75:56:74:7f:5e:30:14:fa: ba:3a:4a:c6:d9:f2:b7:c6:80:18:98:b3:92:5d:d8:f3:6b:8a: 96:36:ed:55:1c:47:61:c1:c9:de:d4:43:b1:d6:6c:f5:bc:eb: b1:b4:97:29:2c:7f:e6:d8:96:89:26:a2:c9:1e:27:00:50:42: f4:fd:9e:d9:72:c7:f9:05:2f:27:70:7b:00:37:f4:f9:3f:2d: 34:c6:2d:cc -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKERFQ0ZDNzUzNDM5OEM0ODU3OEI5RTQ3NEFFQjgwQjFD OTRDQkM1QkEwHhcNMjUxMTI3MDAxNzUxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI3OThhZS01YzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLvN15ofTqj4ejELz4XIUyu5BPucxN0ViS40XOAuyZDlnXeEiTesmpLEJgGp DlhgorkxiDy9TMv94h1sX0Q2RlI+vUeT2izNDosjg3DfUfMZIP8E4/6Mnm9IXr9Q Hn+idjSyWrCUtgICypYNPwasOSkqBZ3WtGy10QvljPY/aiDNqnI0+l6ve58ItbFW oXd2lBFMjGMxWxHOe/FDpH/d85QYs0KEKQWCs2OI69dZkIa0iFO9WTYBKdzc1and lJWa6cVEFfevm5tRjOV0YBiCMNbbjznYu2cySPEerGogc8qjErRn92zxVk9WHsks faEer85Hm9CIaG4o+2aEsWyG3wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFEbryBN1 g/3ShFEpSSk3yBx8450MMB8GA1UdIwQYMBaAFN7Px1NDmMSFeLnkdK64CxyUy8W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9FNDJDQkM0QzQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJVjR1ZVIwcnJnTEhKVEx4 Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNzX0hVME9ZeElWNHVlUjBycmdMSEpUTHhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OURDNzQvRTQyQ0JDNEM0NjI5MTFFREFFNzhCMjM1QzRGOUFFMDIvOUE3MDcxQzA0 NjJFMTFFRDkwMDM1NDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAIr+fgDBAJnKYADBADL0BYwDQQCAAIwBwMFACQBsIAwDQYJ KoZIhvcNAQELBQADggEBACh5lxGpw53dEMKtDOdvgz344dbR+nIUPz0fjUEtBluX nM7DDweI5nGIproXHKEKOKsB1w3xmsaEoUxZnTK+njt/zL0dQ3ZO+648te7xLAxd T2slOuJTyIl78hJTWH3YgDNMkw1O6C6WVeT5MbLyRlgHHwuGUd0E7l2CuQW1XLQB 599LC0jKYyCmIUEqlLcCLjD+0HfgqKxLR43ljqk3fUVRfIvDf3p6rPEkt3B1VnR/ XjAU+ro6SsbZ8rfGgBiYs5Jd2PNripY27VUcR2HByd7UQ7HWbPW867G0lyksf+bY lokmoskeJwBQQvT9ntlyx/kFLydwewA39Pk/LTTGLcw= -----END CERTIFICATE-----Generated at Sat Dec 6 23:25:46 2025 by rpki-client