This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/32D8E190D0CB11EEAB1CAF34C4F9AE02.roa File: 32D8E190D0CB11EEAB1CAF34C4F9AE02.roa (raw, json) Hash identifier: AJ+GjJFYq8aJo3te/sesyxrgrEXVzYE2iF8YEjCen0A= Subject key identifier: F1:F5:D9:ED:05:15:ED:95:DE:43:EC:69:62:36:B8:56:A8:11:38:9D Certificate issuer: /CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Certificate serial: 0255 Authority key identifier: E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/32D8E190D0CB11EEAB1CAF34C4F9AE02.roa Signing time: Tue 16 Dec 2025 17:11:20 +0000 ROA not before: Tue 16 Dec 2025 17:11:20 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 150696 IP address blocks: 103.60.204.0/23 maxlen: 23 103.60.204.0/24 maxlen: 24 103.60.205.0/24 maxlen: 24 2400:cf60::/32 maxlen: 32 2400:cf60:fb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911486F, serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Validity Not Before: Dec 16 17:11:20 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=694192b7-e20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3a:76:41:8a:3b:41:09:59:53:45:6e:d1:7e: c9:d7:87:fe:5f:50:cd:dd:3e:bb:f4:12:93:6f:94: b6:94:b0:a4:33:76:c1:67:35:91:13:ac:0b:80:95: bf:09:34:d8:82:7b:ec:ec:69:e1:f2:52:13:73:b4: 4b:e8:da:2c:bf:85:ca:aa:bf:9e:5b:e2:20:1d:69: 8b:59:a3:f1:95:2a:58:aa:01:5d:af:49:ca:5c:92: 4d:2f:8d:c4:24:6f:06:55:6b:21:53:e0:b4:c2:ec: d7:5b:e8:ef:14:c3:d3:c7:91:dc:37:c4:4a:bb:e7: c0:c1:41:4d:ac:cb:53:7b:c4:5e:9d:ad:ae:26:e6: d0:4a:ff:1c:f4:be:89:1c:23:3b:5e:94:01:4e:c3: fb:77:ee:21:91:ba:ee:9a:af:4d:d8:eb:e5:35:2d: 03:83:3b:31:16:1d:45:b4:5e:02:8b:24:e6:89:5c: b5:eb:c5:fe:5e:21:70:9b:1c:48:46:42:dd:77:c7: c5:d0:0b:19:f8:cf:8b:a0:bc:69:7d:ce:d2:3b:f7: 83:ea:3a:94:9d:1a:cf:53:77:7a:a3:bf:80:8d:52: e8:79:1a:e5:f2:66:87:c3:fa:34:cc:09:f7:25:87: 8a:2e:d7:04:90:fb:73:d3:ae:ec:f7:9c:ff:aa:1e: 08:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F5:D9:ED:05:15:ED:95:DE:43:EC:69:62:36:B8:56:A8:11:38:9D X509v3 Authority Key Identifier: keyid:E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/32D8E190D0CB11EEAB1CAF34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.60.204.0/23 IPv6: 2400:cf60::/32 Signature Algorithm: sha256WithRSAEncryption 52:05:a8:d6:33:93:5c:55:87:fa:60:3c:d8:63:9f:7c:4c:e6: 3c:6a:6b:dc:fd:63:be:6c:40:ae:93:05:21:bb:bd:e4:0e:74: e3:92:7c:84:f9:c6:b3:38:12:ae:8f:97:6b:b0:57:f6:8b:2d: 22:75:2c:a9:11:63:c9:9d:d7:fa:55:1e:f2:3c:ef:81:45:b4: 5a:ba:18:0d:ea:98:17:8c:fd:5d:b7:92:2a:9a:eb:b6:7b:0b: 8c:74:d5:c8:32:0e:2e:5b:7b:8f:f9:90:99:fb:87:85:19:22: af:2d:81:58:4f:4c:f8:3c:47:40:23:42:53:38:95:ce:63:37: 7e:22:1f:c2:00:55:bf:43:0f:ef:a7:4d:cf:b3:b2:3d:2f:50: 94:8a:5a:78:a3:77:2a:35:a4:62:8b:df:5d:13:5f:a3:56:d0: 49:2e:e5:06:78:16:19:a7:71:38:53:20:43:f5:79:38:2d:44: 6c:66:fb:8a:13:b8:95:a1:d4:45:68:cc:b9:b9:5a:34:7a:b8: 0c:54:f5:d8:9b:b8:f8:29:08:09:63:14:b1:7a:a8:26:aa:d7: 51:f5:7e:d4:27:89:2c:f1:d2:a9:c9:f5:9d:7d:ba:82:b1:b6: bf:26:4d:0c:44:f4:31:22:32:e1:99:3b:9e:d5:bb:3c:01:18: fa:d3:54:9e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4NkYxMTAvBgNVBAUTKEU2MzJEMzhDNUEzMkMyMTdDNkVFNzFENTJERUY5RjM4 Q0ExNjZDNTEwHhcNMjUxMjE2MTcxMTIwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQxOTJiNy1lMjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDp2QYo7QQlZU0Vu0X7J14f+X1DN3T679BKTb5S2lLCkM3bBZzWRE6wLgJW/ CTTYgnvs7Gnh8lITc7RL6Nosv4XKqr+eW+IgHWmLWaPxlSpYqgFdr0nKXJJNL43E JG8GVWshU+C0wuzXW+jvFMPTx5HcN8RKu+fAwUFNrMtTe8Rena2uJubQSv8c9L6J HCM7XpQBTsP7d+4hkbrumq9N2OvlNS0DgzsxFh1FtF4CiyTmiVy168X+XiFwmxxI RkLdd8fF0AsZ+M+LoLxpfc7SO/eD6jqUnRrPU3d6o7+AjVLoeRrl8maHw/o0zAn3 JYeKLtcEkPtz067s95z/qh4I0wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPH12e0F Fe2V3kPsaWI2uFaoETidMB8GA1UdIwQYMBaAFOYy04xaMsIXxu5x1S3vnzjKFmxR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDg2Ri8yMkNGMzQ0ODg2 NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdoZkc3bkhWTGUtZk9Nb1di RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVqTFRqRm95d2hmRzduSFZMZS1mT01vV2JGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTQ4NkYvMjJDRjM0NDg4NjZDMTFFREFGQTVBNDcxQzRGOUFFMDIvMzJEOEUxOTBE MENCMTFFRUFCMUNBRjM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnPMwwDQQCAAIwBwMFACQAz2AwDQYJKoZIhvcNAQELBQAD ggEBAFIFqNYzk1xVh/pgPNhjn3xM5jxqa9z9Y75sQK6TBSG7veQOdOOSfIT5xrM4 Eq6Pl2uwV/aLLSJ1LKkRY8md1/pVHvI874FFtFq6GA3qmBeM/V23kiqa67Z7C4x0 1cgyDi5be4/5kJn7h4UZIq8tgVhPTPg8R0AjQlM4lc5jN34iH8IAVb9DD++nTc+z sj0vUJSKWnijdyo1pGKL310TX6NW0Eku5QZ4FhmncThTIEP1eTgtRGxm+4oTuJWh 1EVozLm5WjR6uAxU9dibuPgpCAljFLF6qCaq11H1ftQniSzx0qnJ9Z19uoKxtr8m TQxE9DEiMuGZO57VuzwBGPrTVJ4= -----END CERTIFICATE-----Generated at Fri Dec 19 15:26:51 2025 by rpki-client