This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/E57772525DED11F0B0B00C4DC4F9AE02.roa File: E57772525DED11F0B0B00C4DC4F9AE02.roa (raw, json) Hash identifier: SDWOzOls7ewbKsDsDovGzzc6zqRka52NsV9334kX+ts= Subject key identifier: 1C:E1:EC:7E:1E:49:DE:18:8A:50:4E:A6:42:BE:94:5A:11:CA:32:7D Certificate issuer: /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Certificate serial: 15 Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/E57772525DED11F0B0B00C4DC4F9AE02.roa Signing time: Fri 11 Jul 2025 04:37:29 +0000 ROA not before: Fri 11 Jul 2025 04:37:29 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 45601 IP address blocks: 203.17.165.0/24 maxlen: 24 203.176.120.0/24 maxlen: 24 203.176.121.0/24 maxlen: 24 2001:df0:219::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Validity Not Before: Jul 11 04:37:29 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=68709509-ee2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ef:0c:80:8e:79:58:eb:a9:41:19:d3:da:1f: d5:b7:fb:90:bf:8a:cb:49:2f:09:6a:3b:90:5d:34: ea:fd:0c:91:e3:de:fc:93:dc:96:0c:c9:11:36:66: bb:7d:5d:bc:08:ff:20:42:93:1b:b6:2f:b9:dc:8d: 1b:f8:61:e1:b7:4e:42:f3:cc:7a:f3:40:84:1f:67: e1:4c:63:6d:18:18:b2:1d:e0:bb:d6:2a:75:52:16: 21:a0:c8:3b:b5:12:a0:22:01:a3:ee:58:f8:4e:c5: 0a:9a:1a:e1:89:a3:a8:de:fd:dc:68:1b:84:2e:c2: b4:91:e5:44:78:aa:48:ad:5a:94:c7:90:5c:7c:eb: 35:14:ed:af:29:ec:00:40:25:5f:50:9a:1e:2d:53: b7:7f:bf:02:3a:e1:05:47:35:d0:c1:95:a9:8a:19: 87:38:c3:9c:2e:c0:30:8c:5d:39:bc:67:db:ec:5a: c9:b0:f8:aa:18:1c:ac:51:2d:2c:66:8b:7b:21:72: af:e9:6f:93:3c:44:a6:a4:60:43:65:bc:26:92:94: 76:fb:9b:81:a2:aa:f7:40:64:27:dc:41:c1:8d:9a: 42:34:aa:d1:a4:e6:f9:15:5c:c8:a1:2c:e9:0a:b5: ed:ce:60:85:b4:18:6d:1b:f3:e9:9b:f5:a0:e2:dd: b4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E1:EC:7E:1E:49:DE:18:8A:50:4E:A6:42:BE:94:5A:11:CA:32:7D X509v3 Authority Key Identifier: keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/E57772525DED11F0B0B00C4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.17.165.0/24 203.176.120.0/23 IPv6: 2001:df0:219::/48 Signature Algorithm: sha256WithRSAEncryption 61:6c:0b:3b:02:25:5a:bd:a8:9d:db:79:3d:54:cf:90:8a:f1: ae:53:20:dd:3d:1e:82:ac:c6:27:9a:7c:4f:c1:a1:db:42:52: fa:24:80:36:c6:89:d7:9e:67:09:59:37:5c:0d:0c:19:85:8a: ae:fc:d5:8b:28:ac:a1:ee:d9:f1:3f:78:f3:02:ac:00:34:82: 46:48:d3:39:9f:85:ab:ca:da:c3:81:c4:8d:20:f8:c1:0e:f8: 80:34:f2:e4:e9:ed:7d:2d:4b:f5:45:69:c7:c0:3a:29:54:ea: 74:97:ea:0b:d8:76:2b:cc:9b:ac:b6:64:41:29:86:42:89:21: 7c:19:a6:30:9c:a6:80:ef:f9:95:5d:43:e1:2d:52:91:78:d6: e8:8e:78:fa:d1:6e:ad:bb:f0:69:c7:f1:1f:83:0a:c3:2b:f8: df:36:3a:6f:94:3f:9e:93:a1:4c:e1:11:f4:22:b6:9f:c0:02: 7f:0d:bc:6e:db:d7:00:f0:2d:97:25:85:f5:22:1f:e7:93:22: 8f:75:e6:c4:7e:c8:ef:f8:45:d1:69:17:de:db:9f:b4:cf:52: 8f:d4:a1:66:d5:f0:5e:67:60:92:2a:7a:43:6b:18:e2:16:38: 06:e4:c0:23:2b:65:ee:5e:81:63:32:20:63:31:fe:fe:c1:e2: 3a:7c:b8:b2 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkEwMTExMC8GA1UEBRMoQTA1RUMyNjZCM0MwQkZENkNFQjUxNzEwMEJFMDVDNTA1 Qjk0MzYyNDAeFw0yNTA3MTEwNDM3MjlaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NzA5NTA5LWVlMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDb7wyAjnlY66lBGdPaH9W3+5C/istJLwlqO5BdNOr9DJHj3vyT3JYMyRE2Zrt9 XbwI/yBCkxu2L7ncjRv4YeG3TkLzzHrzQIQfZ+FMY20YGLId4LvWKnVSFiGgyDu1 EqAiAaPuWPhOxQqaGuGJo6je/dxoG4QuwrSR5UR4qkitWpTHkFx86zUU7a8p7ABA JV9Qmh4tU7d/vwI64QVHNdDBlamKGYc4w5wuwDCMXTm8Z9vsWsmw+KoYHKxRLSxm i3shcq/pb5M8RKakYENlvCaSlHb7m4GiqvdAZCfcQcGNmkI0qtGk5vkVXMihLOkK te3OYIW0GG0b8+mb9aDi3bQHAgMBAAGjggKsMIICqDAdBgNVHQ4EFgQUHOHsfh5J 3hiKUE6mQr6UWhHKMn0wHwYDVR0jBBgwFoAUoF7CZrPAv9bOtRcQC+BcUFuUNiQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2QTAxL0Y2NEQzQjI0NTdB OTExRjA4RUU0MjYwOUM0RjlBRTAyL29GN0NaclBBdjliT3RSY1FDLUJjVUZ1VU5p US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb0Y3Q1pyUEF2OWJPdFJjUUMtQmNVRnVVTmlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkEwMS9GNjREM0IyNDU3QTkxMUYwOEVFNDI2MDlDNEY5QUUwMi9FNTc3NzI1MjVE RUQxMUYwQjBCMDBDNERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA2BggrBgEFBQcBBwEB/wQn MCUwEgQCAAEwDAMEAMsRpQMEAcuweDAPBAIAAjAJAwcAIAEN8AIZMA0GCSqGSIb3 DQEBCwUAA4IBAQBhbAs7AiVavaid23k9VM+QivGuUyDdPR6CrMYnmnxPwaHbQlL6 JIA2xonXnmcJWTdcDQwZhYqu/NWLKKyh7tnxP3jzAqwANIJGSNM5n4WrytrDgcSN IPjBDviANPLk6e19LUv1RWnHwDopVOp0l+oL2HYrzJustmRBKYZCiSF8GaYwnKaA 7/mVXUPhLVKReNbojnj60W6tu/Bpx/EfgwrDK/jfNjpvlD+ek6FM4RH0IrafwAJ/ Dbxu29cA8C2XJYX1Ih/nkyKPdebEfsjv+EXRaRfe25+0z1KP1KFm1fBeZ2CSKnpD axjiFjgG5MAjK2XuXoFjMiBjMf7+weI6fLiy -----END CERTIFICATE-----Generated at Mon Dec 8 09:13:15 2025 by rpki-client