This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/7CEC1452E17E11ECAB421316C4F9AE02.roa File: 7CEC1452E17E11ECAB421316C4F9AE02.roa (raw, json) Hash identifier: 1Xe1cmvJhp+1uOgf9drz3lA2Kuch55N2lYYnYgzX/Sc= Subject key identifier: BE:3F:5E:CD:61:21:83:52:6A:D5:FE:CE:46:14:53:23:EB:F9:B3:F7 Certificate issuer: /CN=A91B2D29/serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28 Certificate serial: 0A0E Authority key identifier: B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/7CEC1452E17E11ECAB421316C4F9AE02.roa Signing time: Sun 16 Nov 2025 15:33:06 +0000 ROA not before: Sun 16 Nov 2025 15:33:06 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 58895 IP address blocks: 43.246.220.0/22 maxlen: 24 103.35.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2574 (0xa0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28 Validity Not Before: Nov 16 15:33:06 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6919eeb2-85f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8a:6b:00:b9:d8:e0:71:3a:7e:39:d9:1b:55: 3f:80:88:a6:12:ed:83:01:ca:fe:2b:53:b7:32:2c: 95:50:16:ff:9b:96:bc:63:e1:28:4b:17:a9:a1:bb: 35:49:e5:f4:1f:68:0b:4c:05:b0:97:eb:0b:9a:22: ed:2e:23:8e:37:59:4d:48:07:d5:16:8b:96:f0:28: bc:a1:b4:f1:58:b3:78:ba:a0:9c:a9:d1:ee:22:47: c2:e0:fa:96:53:42:46:88:59:95:df:42:96:ae:01: 24:47:30:10:3f:af:83:bf:95:85:63:06:8e:b1:d3: b6:02:bb:00:e5:c2:8c:22:11:36:79:09:b8:4d:6c: db:60:73:e7:aa:73:ad:e6:e7:c4:0d:cf:d1:be:1e: 1e:d7:b7:3f:fe:4a:23:f7:fd:35:dd:e6:95:3b:fa: 0f:79:78:cb:b4:db:0c:66:6f:bb:a0:63:b7:b5:3f: 5a:82:66:3b:d8:c4:8d:86:f2:ea:57:6a:dc:ec:de: 19:88:cc:10:24:33:59:37:d1:fe:ba:57:fe:7e:12: f1:40:d2:b7:c0:bd:2e:54:c5:98:77:c1:f7:ea:fc: 2d:72:37:2d:ad:3b:39:10:0a:91:f0:97:b7:b0:e0: 69:97:51:ea:e6:90:a3:42:ba:79:52:84:a1:fe:4e: 82:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3F:5E:CD:61:21:83:52:6A:D5:FE:CE:46:14:53:23:EB:F9:B3:F7 X509v3 Authority Key Identifier: keyid:B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/7CEC1452E17E11ECAB421316C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.246.220.0/22 103.35.208.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:1d:f9:9c:7e:83:a1:87:aa:03:36:93:8c:69:a5:ef:aa:79: 12:ab:81:aa:d4:a6:c3:35:5d:79:fa:e0:93:13:b4:2e:67:91: d4:e8:2f:24:39:bd:44:d7:c5:19:37:1e:3f:fe:0d:17:78:f2: 72:6c:54:7b:7a:3d:d3:71:3b:03:aa:88:20:08:8d:53:d7:66: 53:42:65:13:b9:8e:e0:f5:8f:2e:4e:9e:02:f1:14:59:04:77: 77:98:9c:bc:56:f1:50:75:67:38:0a:5c:78:42:15:3a:28:a8: 17:69:12:f7:eb:6d:9c:25:25:3b:30:bd:ab:46:0d:c9:18:c1: 17:e2:00:bc:1f:1a:29:bd:ff:1a:e0:dc:a3:80:66:7f:5a:97: 61:8c:04:0f:e3:0d:df:94:37:36:bd:54:0a:b8:e1:2d:e3:fb: f7:7c:2a:e8:b6:67:76:82:84:df:5a:d0:62:b4:c8:3e:53:df: e8:15:79:e0:ba:42:53:87:b7:06:6e:dc:9d:01:70:0a:68:fd: 94:28:80:98:95:6d:b3:d3:7d:4d:c0:ea:8f:ca:20:e7:0d:12: e8:db:ca:e5:9c:a3:3d:f3:04:31:9d:45:db:5a:2e:21:a5:9b: 32:7c:1a:9e:60:a0:d2:a6:88:7a:ab:f5:d6:99:ee:11:f4:5d: 3e:a4:51:45 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKEI4RTk2QzZBMEQ5NTQ4QTJBMDQwQ0JFNzE5OTc0NUJB N0RCMUVEMjgwHhcNMjUxMTE2MTUzMzA2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE5ZWViMi04NWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYprALnY4HE6fjnZG1U/gIimEu2DAcr+K1O3MiyVUBb/m5a8Y+EoSxepobs1 SeX0H2gLTAWwl+sLmiLtLiOON1lNSAfVFouW8Ci8obTxWLN4uqCcqdHuIkfC4PqW U0JGiFmV30KWrgEkRzAQP6+Dv5WFYwaOsdO2ArsA5cKMIhE2eQm4TWzbYHPnqnOt 5ufEDc/Rvh4e17c//koj9/013eaVO/oPeXjLtNsMZm+7oGO3tT9agmY72MSNhvLq V2rc7N4ZiMwQJDNZN9H+ulf+fhLxQNK3wL0uVMWYd8H36vwtcjctrTs5EAqR8Je3 sOBpl1Hq5pCjQrp5UoSh/k6CWwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFL4/Xs1h IYNSatX+zkYUUyPr+bP3MB8GA1UdIwQYMBaAFLjpbGoNlUiioEDL5xmXRbp9se0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi91T2xzYWcyVlNLS2dRTXZuR1pkRnVuMng3 U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPbHNhZzJWU0tLZ1FNdm5HWmRGdW4yeDdTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjJEMjkvRjcxRTcxNjY1NTIxMTFFNUFEQjIwOTJBQzRGOUFFMDIvN0NFQzE0NTJF MTdFMTFFQ0FCNDIxMzE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr9twDBAJnI9AwDQYJKoZIhvcNAQELBQADggEBABsd+Zx+ g6GHqgM2k4xppe+qeRKrgarUpsM1XXn64JMTtC5nkdToLyQ5vUTXxRk3Hj/+DRd4 8nJsVHt6PdNxOwOqiCAIjVPXZlNCZRO5juD1jy5OngLxFFkEd3eYnLxW8VB1ZzgK XHhCFTooqBdpEvfrbZwlJTswvatGDckYwRfiALwfGim9/xrg3KOAZn9al2GMBA/j Dd+UNza9VAq44S3j+/d8Kui2Z3aChN9a0GK0yD5T3+gVeeC6QlOHtwZu3J0BcApo /ZQogJiVbbPTfU3A6o/KIOcNEujbyuWcoz3zBDGdRdtaLiGlmzJ8Gp5goNKmiHqr 9daZ7hH0XT6kUUU= -----END CERTIFICATE-----Generated at Sat Dec 6 16:29:58 2025 by rpki-client