This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/4953C028C13A11F0B7555663C4F9AE02.roa File: 4953C028C13A11F0B7555663C4F9AE02.roa (raw, json) Hash identifier: 3gNf/u9nadhlUcAgpo8x77hPh3SM5nPzkGr92yhZDJE= Subject key identifier: B8:04:2E:07:B4:4F:E2:62:0B:B0:9B:3C:5F:E1:08:49:F0:E6:CC:DD Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Certificate serial: 025A Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/4953C028C13A11F0B7555663C4F9AE02.roa Signing time: Fri 14 Nov 2025 09:14:13 +0000 ROA not before: Fri 14 Nov 2025 09:14:13 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 401783 IP address blocks: 103.86.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Validity Not Before: Nov 14 09:14:13 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6916f2e5-b8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:34:6e:7c:08:0a:07:bc:05:1f:36:81:87:cc: a0:14:2a:f7:92:65:91:c3:4a:55:2a:4e:7c:78:f0: 4a:00:c1:26:b5:7a:33:bd:2a:6c:27:49:3e:41:ca: 8c:dd:93:1c:0b:cc:02:63:3f:3d:61:db:17:56:78: ac:46:b5:37:8a:5b:28:a5:8f:e6:d3:7e:07:4e:cb: 1b:62:bd:1c:c3:36:91:fb:72:ae:d0:85:6f:b2:c3: a5:c4:78:03:7a:92:de:32:82:1b:43:a3:0b:a2:7b: df:6d:ee:1a:c2:b2:25:74:8f:c0:fb:e7:33:a7:a6: 8e:15:36:30:6e:7d:2d:94:3c:18:32:01:27:ab:4e: d4:2e:33:fa:bc:17:c3:f2:aa:aa:62:64:89:68:92: 85:f2:3b:2a:4a:dd:b7:e6:21:12:10:04:9b:2e:1e: 81:fe:4f:5a:02:a9:12:02:24:ca:08:fd:71:7c:16: 4d:91:ba:b9:52:39:dd:06:59:fa:68:41:0f:17:43: a2:f6:c0:ef:b7:7b:63:9b:50:03:c6:a2:d0:05:a1: f4:82:c8:60:4b:64:d2:bf:d1:96:1a:4a:3f:61:db: ce:6f:75:44:09:a8:86:0f:75:46:b4:9f:c9:f3:6e: 58:42:6d:b3:5d:f2:11:e4:9b:00:f4:60:3f:c9:a7: cb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:04:2E:07:B4:4F:E2:62:0B:B0:9B:3C:5F:E1:08:49:F0:E6:CC:DD X509v3 Authority Key Identifier: keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/4953C028C13A11F0B7555663C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.86.121.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:c9:af:50:73:88:38:a8:22:b2:fc:fb:fc:ce:f4:b4:db:6e: fe:bf:7b:15:1b:ca:8e:01:a0:52:d2:61:06:e2:9d:93:46:d5: 32:c3:22:0b:42:35:53:dd:c0:54:54:39:a2:68:37:ea:5c:0a: c1:fb:0c:3b:e7:fa:6a:f8:fc:cf:5d:66:21:ad:c3:d7:e1:13: 52:f3:a5:b0:e1:b1:2c:2e:f1:fd:5c:0a:34:df:2d:bd:5e:7d: 74:23:37:1d:87:fb:a2:fc:9a:2d:b7:bd:ba:ab:b0:ca:61:fd: 71:de:f9:7b:30:e3:fa:d6:d1:be:0c:75:56:31:e3:df:fc:5c: a6:e5:d5:bf:fa:d7:67:25:c8:a7:57:d0:99:16:06:40:5f:f0: 0e:ff:e9:0e:fd:1f:c8:52:35:64:13:5e:ac:b9:69:80:79:19: 87:19:a0:f0:e3:8c:5a:02:f6:79:0e:73:4b:4a:6f:43:00:25: 0f:9a:cf:4b:ac:91:fb:76:c1:55:f6:20:15:85:a2:60:24:8d: 0e:2d:73:90:26:6e:67:96:f2:f9:6b:a6:71:41:eb:2d:34:eb: a8:37:bd:15:54:c3:de:ed:b1:41:03:87:c9:36:7c:55:1c:65: 32:a2:84:a4:f1:b1:44:0f:f2:99:58:59:10:a1:b7:7c:9e:c6: f4:d6:61:29 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0 ODJDNkY5QjQwHhcNMjUxMTE0MDkxNDEzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OTE2ZjJlNS1iOGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TRufAgKB7wFHzaBh8ygFCr3kmWRw0pVKk58ePBKAMEmtXozvSpsJ0k+QcqM 3ZMcC8wCYz89YdsXVnisRrU3ilsopY/m034HTssbYr0cwzaR+3Ku0IVvssOlxHgD epLeMoIbQ6MLonvfbe4awrIldI/A++czp6aOFTYwbn0tlDwYMgEnq07ULjP6vBfD 8qqqYmSJaJKF8jsqSt235iESEASbLh6B/k9aAqkSAiTKCP1xfBZNkbq5UjndBln6 aEEPF0Oi9sDvt3tjm1ADxqLQBaH0gshgS2TSv9GWGko/YdvOb3VECaiGD3VGtJ/J 825YQm2zXfIR5JsA9GA/yafLSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLgELge0 T+JiC7CbPF/hCEnw5szdMB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0 MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM2MjEvRjdEMDBCRUU3NDM5MTFFRDk4NkQ3Mzg1QzRGOUFFMDIvNDk1M0MwMjhD MTNBMTFGMEI3NTU1NjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnVnkwDQYJKoZIhvcNAQELBQADggEBAHrJr1BziDioIrL8 +/zO9LTbbv6/exUbyo4BoFLSYQbinZNG1TLDIgtCNVPdwFRUOaJoN+pcCsH7DDvn +mr4/M9dZiGtw9fhE1LzpbDhsSwu8f1cCjTfLb1efXQjNx2H+6L8mi23vbqrsMph /XHe+Xsw4/rW0b4MdVYx49/8XKbl1b/612clyKdX0JkWBkBf8A7/6Q79H8hSNWQT Xqy5aYB5GYcZoPDjjFoC9nkOc0tKb0MAJQ+az0uskft2wVX2IBWFomAkjQ4tc5Am bmeW8vlrpnFB6y0066g3vRVUw97tsUEDh8k2fFUcZTKihKTxsUQP8plYWRCht3ye xvTWYSk= -----END CERTIFICATE-----Generated at Thu Dec 4 21:25:05 2025 by rpki-client