This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/3A5DE11AE17511F084EED35B3E6F56BC.roa File: 3A5DE11AE17511F084EED35B3E6F56BC.roa (raw, json) Hash identifier: l3RVikFLeca+HYpW+WRcSqgwKP5/7iXrHIxKACBAWyY= Subject key identifier: EF:1D:4C:6D:EC:A3:C0:A7:4F:47:FC:1A:F1:AC:59:A9:24:78:58:37 Certificate issuer: /CN=A911ABA2/serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9 Certificate serial: 02 Authority key identifier: FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/3A5DE11AE17511F084EED35B3E6F56BC.roa Signing time: Thu 25 Dec 2025 09:36:46 +0000 ROA not before: Thu 25 Dec 2025 09:36:45 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 137386 IP address blocks: 103.48.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Jan 2026 07:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABA2, serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9 Validity Not Before: Dec 25 09:36:45 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=694d05ad-66fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:71:f3:35:76:5b:bd:57:f1:06:ea:bd:6d:b4: 20:4d:ca:09:16:2c:ea:69:08:0c:03:fd:d4:1c:3c: cb:e5:22:bc:28:11:14:39:e9:c6:32:f6:60:fd:d6: d3:3b:a1:f9:5b:4b:5a:ff:df:87:c9:7b:41:ab:a4: c3:d3:bd:4c:a2:a2:75:cf:31:f4:45:c4:32:a2:3c: 9c:c2:fd:06:d3:c8:f3:f8:70:ff:37:73:4c:15:68: 96:54:4e:a0:cf:e8:e8:83:6d:ac:38:7b:a8:04:b6: 22:06:9c:f9:4e:ea:ef:4a:83:1b:6b:c8:f5:9d:21: 81:dc:a6:b1:4e:9d:ca:38:24:53:53:23:06:54:e2: 96:5a:df:18:6c:d4:5c:d8:a8:ba:d6:53:19:65:7f: 18:e7:7c:9d:b4:18:6a:43:93:9e:2b:58:f7:3e:0e: f3:e6:b2:61:54:3d:84:99:82:71:1d:a0:a4:84:9f: 1d:e1:92:7b:6d:b7:e0:b9:64:10:29:b8:3b:35:88: ef:de:85:6d:39:c6:bc:1c:ae:c3:44:cd:a4:59:80: dc:82:ae:2d:cd:5f:b5:ba:d6:da:4d:b3:47:9d:a4: 9b:7e:9a:d6:58:8f:4f:e8:ad:32:f6:be:e2:2c:f1: c1:c8:07:22:28:72:a0:ab:ad:d3:8c:41:21:c5:38: 0d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1D:4C:6D:EC:A3:C0:A7:4F:47:FC:1A:F1:AC:59:A9:24:78:58:37 X509v3 Authority Key Identifier: keyid:FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/3A5DE11AE17511F084EED35B3E6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.48.164.0/22 Signature Algorithm: sha256WithRSAEncryption 64:71:4d:61:d0:bc:56:b6:06:53:bf:a7:35:18:ea:1f:00:f7: f3:8e:05:f5:47:de:57:ab:64:1c:ca:34:38:81:42:f4:01:3e: 05:0e:ed:ab:24:78:7c:c3:63:9f:da:79:06:88:92:25:d9:fb: 03:ce:37:31:eb:e4:83:f5:34:2c:c9:15:f4:d1:07:d2:3e:9f: cd:be:b0:c2:8f:a3:3e:65:41:28:cb:dc:d6:f0:16:c4:d6:fc: f9:a9:0f:bf:77:01:22:e1:74:aa:29:ed:23:e4:a5:a0:4f:22: f4:a8:3b:b8:ab:91:45:73:29:4b:5b:e7:09:80:2a:a1:9f:0e: 3c:e0:6c:e5:cf:7c:03:9b:56:e4:71:37:e5:e1:e8:1a:35:bb: 9b:63:6c:27:00:fb:f1:66:b1:4f:9e:e3:c0:83:02:f2:38:85: b0:6c:15:a8:b2:d2:ed:3c:8f:4c:3f:ee:c9:45:10:e0:95:fb: df:ab:2e:9d:44:ac:dd:be:d9:a3:0c:6c:15:4c:dc:0c:d5:09: 1d:03:da:19:62:9d:8c:62:e5:84:84:79:76:75:1e:a0:ae:38: 23:06:30:c8:d0:33:6b:2c:08:d0:11:d4:d8:c8:dd:2f:80:3c: f5:38:32:12:14:ee:2e:f9:c1:46:62:bb:09:bb:3f:f4:47:13: 06:9e:ba:c4 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTEx QUJBMjExMC8GA1UEBRMoRkU5OThBQkJCMTM0QjkzQzFDRTdGODRFOEI5RkJFMURE QTlCNjRBOTAeFw0yNTEyMjUwOTM2NDVaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NGQwNWFkLTY2ZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBcfM1dlu9V/EG6r1ttCBNygkWLOppCAwD/dQcPMvlIrwoERQ56cYy9mD91tM7 oflbS1r/34fJe0GrpMPTvUyionXPMfRFxDKiPJzC/QbTyPP4cP83c0wVaJZUTqDP 6OiDbaw4e6gEtiIGnPlO6u9KgxtryPWdIYHcprFOnco4JFNTIwZU4pZa3xhs1FzY qLrWUxllfxjnfJ20GGpDk54rWPc+DvPmsmFUPYSZgnEdoKSEnx3hknttt+C5ZBAp uDs1iO/ehW05xrwcrsNEzaRZgNyCri3NX7W61tpNs0edpJt+mtZYj0/orTL2vuIs 8cHIByIocqCrrdOMQSHFOA3dAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU7x1Mbeyj wKdPR/wa8axZqSR4WDcwHwYDVR0jBBgwFoAU/pmKu7E0uTwc5/hOi5++HdqbZKkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBQkEyL0I0NDM2MEM4RTE3 NDExRjBBNTQxRDAyRDNFNkY1NkJDL19wbUt1N0UwdVR3YzVfaE9pNS0tSGRxYlpL ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3BtS3U3RTB1VHdjNV9oT2k1LS1IZHFiWktrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJBMi9CNDQzNjBDOEUxNzQxMUYwQTU0MUQwMkQzRTZGNTZCQy8zQTVERTExQUUx NzUxMUYwODRFRUQzNUIzRTZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmcwpDANBgkqhkiG9w0BAQsFAAOCAQEAZHFNYdC8VrYGU7+n NRjqHwD3844F9UfeV6tkHMo0OIFC9AE+BQ7tqyR4fMNjn9p5BoiSJdn7A843Mevk g/U0LMkV9NEH0j6fzb6wwo+jPmVBKMvc1vAWxNb8+akPv3cBIuF0qintI+SloE8i 9Kg7uKuRRXMpS1vnCYAqoZ8OPOBs5c98A5tW5HE35eHoGjW7m2NsJwD78WaxT57j wIMC8jiFsGwVqLLS7TyPTD/uyUUQ4JX736sunUSs3b7ZowxsFUzcDNUJHQPaGWKd jGLlhIR5dnUeoK44IwYwyNAzaywI0BHU2MjdL4A89TgyEhTuLvnBRmK7Cbs/9EcT Bp66xA== -----END CERTIFICATE-----Generated at Thu Jan 8 09:32:00 2026 by rpki-client