This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/CC99502E382F11EEAB87A63EC4F9AE02.roa File: CC99502E382F11EEAB87A63EC4F9AE02.roa (raw, json) Hash identifier: /jxk5arOtk8XX4x0oqH6WonBrSttsEFSJuqdd1pQsXQ= Subject key identifier: 99:7B:8F:A7:13:25:60:17:AF:3F:E0:EB:48:11:E3:38:CB:6B:25:CE Certificate issuer: /CN=A91A86D0/serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E Certificate serial: 0FC9 Authority key identifier: D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/CC99502E382F11EEAB87A63EC4F9AE02.roa Signing time: Tue 02 Dec 2025 17:17:55 +0000 ROA not before: Tue 02 Dec 2025 17:17:54 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134739 IP address blocks: 103.200.132.0/22 maxlen: 22 103.200.132.0/24 maxlen: 24 103.200.133.0/24 maxlen: 24 103.200.134.0/24 maxlen: 24 103.200.135.0/24 maxlen: 24 121.54.164.0/22 maxlen: 22 121.54.164.0/24 maxlen: 24 121.54.165.0/24 maxlen: 24 121.54.166.0/24 maxlen: 24 121.54.167.0/24 maxlen: 24 2403:8e80::/32 maxlen: 32 2403:8e80:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4041 (0xfc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E Validity Not Before: Dec 2 17:17:54 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692f1f42-267d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4f:0e:75:b2:95:5b:c5:a8:77:92:78:d2:44: 2b:1a:d1:83:74:69:cb:9e:ff:b5:db:08:da:86:46: a5:0e:aa:44:1b:d2:90:4a:20:de:42:cc:ef:a8:c9: ff:73:3f:86:73:ca:88:25:9a:0b:41:69:fa:c6:ff: 4b:44:33:d9:79:89:31:45:7b:01:cc:09:89:67:9b: d6:13:62:fe:60:6e:55:f7:10:3e:73:3f:ef:d2:58: 21:8a:48:17:8f:26:08:cd:0b:f2:3e:07:5a:f2:31: 31:84:fa:41:09:b6:b3:c2:0a:2a:a9:a5:91:b6:43: 85:c0:f7:03:12:6e:d6:ad:07:03:f3:6a:86:17:1d: bd:59:5d:d8:77:28:ad:f6:16:21:51:f7:92:96:04: c9:c9:f9:25:eb:de:40:bc:9c:05:34:b5:a6:d1:dd: db:1e:68:df:b9:0c:b0:73:54:cd:b9:43:27:88:8b: 8c:47:e6:0a:df:c2:53:37:d6:3d:19:5e:d7:9a:47: 85:63:b0:79:71:8e:f2:2d:01:94:b0:e1:46:01:d9: fd:13:0d:b3:5e:12:9e:cf:e6:55:93:83:95:b6:2b: 48:e5:22:f6:8a:4f:37:80:85:48:7c:84:5e:98:da: 25:65:0c:58:55:a9:70:25:c5:e4:16:2c:ee:6a:86: 3e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7B:8F:A7:13:25:60:17:AF:3F:E0:EB:48:11:E3:38:CB:6B:25:CE X509v3 Authority Key Identifier: keyid:D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/CC99502E382F11EEAB87A63EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.200.132.0/22 121.54.164.0/22 IPv6: 2403:8e80::/32 Signature Algorithm: sha256WithRSAEncryption 8d:5b:58:2b:64:de:83:4a:b3:f1:23:a1:9f:4c:29:41:7c:3a: 6c:5a:82:16:48:6e:29:8c:aa:15:c7:03:7d:f1:9b:fa:c8:2c: 5f:61:8f:4a:a7:09:2d:9a:ed:47:50:e2:20:0a:5f:78:b3:4a: 7d:11:e5:74:8b:5f:1b:d2:28:22:da:30:0d:de:be:4a:bf:b8: 93:5c:07:dd:4a:d8:04:c7:41:5c:98:a9:9c:ee:aa:e6:8a:23: 70:35:d7:9a:de:c9:47:26:e6:a9:4c:c6:57:64:93:9f:82:9c: 0f:1a:c1:15:63:27:58:1b:cb:e5:db:5d:e4:45:95:4d:20:67: 05:e9:c9:04:a8:08:9c:f1:9e:0b:8a:b1:94:aa:4b:7d:39:01: e9:c6:8b:52:40:91:58:a6:8e:be:30:ee:b4:d1:46:c1:b1:63: 33:88:6b:ca:88:c2:c3:d5:8e:49:db:22:ae:eb:19:9f:c5:26: be:ff:c4:91:5a:65:fe:d9:fe:71:e3:f0:9c:b2:26:18:c6:ca: 5d:3a:5c:9e:94:1c:e5:98:1c:10:98:7b:5f:79:15:d7:c1:59: 95:e6:07:58:aa:48:c5:94:10:22:85:91:97:41:dd:91:aa:16: e2:b7:5f:6a:7c:02:3f:5d:25:f6:ea:3d:df:07:d6:22:4e:f2: 95:23:3b:fe -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICD8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKEQ4QUYzNzcxMkQ1NkIxQjY5M0VGNkQwM0UzNDZDMDBD RjNGMDQ5M0UwHhcNMjUxMjAyMTcxNzU0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmMWY0Mi0yNjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxE8OdbKVW8Wod5J40kQrGtGDdGnLnv+12wjahkalDqpEG9KQSiDeQszvqMn/ cz+Gc8qIJZoLQWn6xv9LRDPZeYkxRXsBzAmJZ5vWE2L+YG5V9xA+cz/v0lghikgX jyYIzQvyPgda8jExhPpBCbazwgoqqaWRtkOFwPcDEm7WrQcD82qGFx29WV3Ydyit 9hYhUfeSlgTJyfkl695AvJwFNLWm0d3bHmjfuQywc1TNuUMniIuMR+YK38JTN9Y9 GV7XmkeFY7B5cY7yLQGUsOFGAdn9Ew2zXhKez+ZVk4OVtitI5SL2ik83gIVIfIRe mNolZQxYValwJcXkFizuaoY+wQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJl7j6cT JWAXrz/g60gR4zjLayXOMB8GA1UdIwQYMBaAFNivN3EtVrG2k+9tA+NGwAzz8Ek+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC9GQTc4QjA0NDZG Q0UxMUU5ODhDNDRCM0VDNEY5QUUwMi8ySzgzY1MxV3NiYVQ3MjBENDBiQURQUHdT VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLODNjUzFXc2JhVDcyMEQ0MGJBRFBQd1NUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTg2RDAvRkE3OEIwNDQ2RkNFMTFFOTg4QzQ0QjNFQzRGOUFFMDIvQ0M5OTUwMkUz ODJGMTFFRUFCODdBNjNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnyIQDBAJ5NqQwDQQCAAIwBwMFACQDjoAwDQYJKoZIhvcN AQELBQADggEBAI1bWCtk3oNKs/EjoZ9MKUF8OmxaghZIbimMqhXHA33xm/rILF9h j0qnCS2a7UdQ4iAKX3izSn0R5XSLXxvSKCLaMA3evkq/uJNcB91K2ATHQVyYqZzu quaKI3A115reyUcm5qlMxldkk5+CnA8awRVjJ1gby+XbXeRFlU0gZwXpyQSoCJzx nguKsZSqS305AenGi1JAkVimjr4w7rTRRsGxYzOIa8qIwsPVjknbIq7rGZ/FJr7/ xJFaZf7Z/nHj8JyyJhjGyl06XJ6UHOWYHBCYe195FdfBWZXmB1iqSMWUECKFkZdB 3ZGqFuK3X2p8Aj9dJfbqPd8H1iJO8pUjO/4= -----END CERTIFICATE-----Generated at Sun Dec 7 02:01:39 2025 by rpki-client