This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/F6C1C6C85F7611EFBFEE134FC4F9AE02.roa File: F6C1C6C85F7611EFBFEE134FC4F9AE02.roa (raw, json) Hash identifier: lteU0o64kIICtIo+zbEltkZ82DIGdAKRcEg8q8f09gQ= Subject key identifier: 03:A0:2E:22:14:6B:22:F9:45:EE:85:85:9E:C7:18:EC:DB:E7:A7:6F Certificate issuer: /CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417 Certificate serial: 0B9E Authority key identifier: 80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/F6C1C6C85F7611EFBFEE134FC4F9AE02.roa Signing time: Wed 26 Nov 2025 00:53:15 +0000 ROA not before: Wed 26 Nov 2025 00:53:15 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 10084 IP address blocks: 43.250.232.0/23 maxlen: 24 43.250.234.0/24 maxlen: 24 103.2.116.0/24 maxlen: 24 103.2.117.0/24 maxlen: 24 103.2.118.0/24 maxlen: 24 103.2.119.0/24 maxlen: 24 103.79.72.0/24 maxlen: 24 218.100.43.0/24 maxlen: 24 2402:9200::/32 maxlen: 32 2402:9200::/37 maxlen: 37 2402:9200::/45 maxlen: 45 2402:9200:8::/45 maxlen: 45 2402:9200:10::/45 maxlen: 45 2402:9200:18::/45 maxlen: 45 2402:9200:20::/45 maxlen: 45 2402:9200:28::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2974 (0xb9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF51, serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417 Validity Not Before: Nov 26 00:53:15 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69264f7a-be1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ad:12:89:78:ef:fb:67:03:8d:16:5c:52:02: fc:04:08:9f:87:d7:de:ec:be:53:c2:a4:2e:c9:2a: a0:17:6e:18:fc:c9:f8:38:9e:04:63:9a:77:0d:07: 85:09:8c:f9:92:13:a6:60:68:9f:7a:0d:1c:6b:b1: 42:2d:c2:bc:54:8c:3f:8f:f4:9f:f4:de:bb:6e:16: a9:eb:38:00:f2:cd:25:63:ef:e8:0a:6a:ad:fc:49: a3:02:fc:29:87:76:59:f9:cc:18:56:d7:49:a8:9b: 54:b9:65:6c:81:2a:82:e6:c3:a7:61:39:c0:1e:bb: be:05:be:54:b8:ec:b7:ec:f6:5a:2b:ad:f9:75:67: a9:67:37:a1:d3:fa:92:03:84:d3:44:a8:af:8e:13: 5a:89:a0:05:79:4a:30:ba:c0:ea:44:63:1d:1a:bc: 30:98:30:52:0c:1d:46:65:10:2a:8d:d1:56:b4:e6: 7f:18:63:12:62:6c:67:f3:0a:6f:b0:9e:40:80:a0: cb:c1:6a:94:08:2d:e0:84:9c:c6:0c:c7:c8:aa:d2: 56:00:09:71:fb:7b:ba:ac:c6:0b:3f:c1:4a:c7:59: 09:3a:a2:b9:6f:32:2d:1d:f0:3c:8c:67:21:aa:f3: 2c:23:75:91:0a:13:2a:b3:9c:c6:f2:2a:31:a6:1e: dd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A0:2E:22:14:6B:22:F9:45:EE:85:85:9E:C7:18:EC:DB:E7:A7:6F X509v3 Authority Key Identifier: keyid:80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/F6C1C6C85F7611EFBFEE134FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.232.0-43.250.234.255 103.2.116.0/22 103.79.72.0/24 218.100.43.0/24 IPv6: 2402:9200::/32 Signature Algorithm: sha256WithRSAEncryption 9f:ac:44:ae:a2:4d:f4:74:6d:5b:45:ea:ad:2f:0c:4a:b6:ad: 04:89:34:fe:2e:66:cd:8f:88:45:5d:a4:a5:79:a4:33:77:28: 01:a7:f9:ae:92:a8:b9:72:55:2d:dc:32:ee:ff:0c:9c:06:3b: d5:67:18:bc:5d:2a:23:55:66:61:4a:e0:50:75:ae:07:47:32: 0c:16:16:30:00:79:c0:29:9a:4a:ec:83:e3:ea:52:39:7a:41: 06:9c:d9:7e:85:35:f5:07:5e:46:71:e9:be:ad:0a:7c:c8:1b: 22:1a:52:6a:de:98:e3:2a:75:cb:17:bf:4e:cb:be:f9:9e:dc: 01:54:d3:53:8c:f7:b2:81:4d:17:94:ca:04:12:3b:a3:7a:1f: d7:9c:b6:45:11:e8:6a:8a:ef:d3:1e:1b:25:f4:4d:e1:37:b7: 04:26:35:fe:68:1c:fc:54:fd:90:4a:ec:6f:16:ce:a9:f4:83: 61:a4:f6:01:d9:74:5e:e6:73:f6:6a:6f:63:7e:cd:53:d2:68: 48:35:24:28:3f:45:98:67:33:f1:e8:53:00:41:0b:40:58:b3: d0:e4:cd:4c:79:ea:ee:c4:78:99:86:65:29:1d:0d:c2:b0:6d: 10:33:a7:db:7f:cb:0c:c9:6c:5c:fb:53:3f:08:f9:80:37:51: f5:76:c7:ca -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgICC54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNTExMTAvBgNVBAUTKDgwNjcwNjYzNzk1MEVGOERBRTdCRUJEMUM5QTc0QkIx RjI2NUQ0MTcwHhcNMjUxMTI2MDA1MzE1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI2NGY3YS1iZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzq0SiXjv+2cDjRZcUgL8BAifh9fe7L5TwqQuySqgF24Y/Mn4OJ4EY5p3DQeF CYz5khOmYGifeg0ca7FCLcK8VIw/j/Sf9N67bhap6zgA8s0lY+/oCmqt/EmjAvwp h3ZZ+cwYVtdJqJtUuWVsgSqC5sOnYTnAHru+Bb5UuOy37PZaK635dWepZzeh0/qS A4TTRKivjhNaiaAFeUowusDqRGMdGrwwmDBSDB1GZRAqjdFWtOZ/GGMSYmxn8wpv sJ5AgKDLwWqUCC3ghJzGDMfIqtJWAAlx+3u6rMYLP8FKx1kJOqK5bzItHfA8jGch qvMsI3WRChMqs5zG8ioxph7dswIDAQABo4ICvjCCArowHQYDVR0OBBYEFAOgLiIU ayL5Re6FhZ7HGOzb56dvMB8GA1UdIwQYMBaAFIBnBmN5UO+Nrnvr0cmnS7HyZdQX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9BODgzRTgxQzNE ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0MnVlLXZSeWFkTHNmSmwx QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHY0dZM2xRNzQydWUtdlJ5YWRMc2ZKbDFCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVGNTEvQTg4M0U4MUMzRDgyMTFFQTlGMjY3MzcwQzRGOUFFMDIvRjZDMUM2Qzg1 Rjc2MTFFRkJGRUUxMzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSAYIKwYBBQUHAQcBAf8E OTA3MCYEAgABMCAwDAMEAyv66AMEACv66gMEAmcCdAMEAGdPSAMEANpkKzANBAIA AjAHAwUAJAKSADANBgkqhkiG9w0BAQsFAAOCAQEAn6xErqJN9HRtW0XqrS8MSrat BIk0/i5mzY+IRV2kpXmkM3coAaf5rpKouXJVLdwy7v8MnAY71WcYvF0qI1VmYUrg UHWuB0cyDBYWMAB5wCmaSuyD4+pSOXpBBpzZfoU19QdeRnHpvq0KfMgbIhpSat6Y 4yp1yxe/Tsu++Z7cAVTTU4z3soFNF5TKBBI7o3of15y2RRHoaorv0x4bJfRN4Te3 BCY1/mgc/FT9kErsbxbOqfSDYaT2Adl0XuZz9mpvY37NU9JoSDUkKD9FmGcz8ehT AEELQFiz0OTNTHnq7sR4mYZlKR0NwrBtEDOn23/LDMlsXPtTPwj5gDdR9XbHyg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:54:53 2025 by rpki-client