This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/86A83D10DA3E11F09B1225578ED3641D.roa File: 86A83D10DA3E11F09B1225578ED3641D.roa (raw, json) Hash identifier: cYo/bv4qOhqtc2EXJ3pnpcx0v1pGJ4KX6dqhgSn3dVg= Subject key identifier: B9:CA:AC:75:ED:01:35:9A:FF:60:0C:FD:04:FF:0B:E8:98:D8:D1:61 Certificate issuer: /CN=A911CC61/serialNumber=0474937E79A9D673353EABD82C4B8424B6C6830D Certificate serial: 02 Authority key identifier: 04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/86A83D10DA3E11F09B1225578ED3641D.roa Signing time: Tue 16 Dec 2025 05:17:33 +0000 ROA not before: Tue 16 Dec 2025 05:17:33 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 152194 IP address blocks: 43.226.16.0/24 maxlen: 24 103.45.64.0/24 maxlen: 24 103.45.65.0/24 maxlen: 24 103.45.66.0/24 maxlen: 24 103.45.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.crl rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 05:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CC61, serialNumber=0474937E79A9D673353EABD82C4B8424B6C6830D Validity Not Before: Dec 16 05:17:33 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6940eb6d-3540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ef:ce:52:98:ba:c4:f1:63:b3:e7:e6:87:47: f0:53:3c:51:c8:83:b4:7d:d9:ca:7f:38:23:e1:40: 08:8a:36:e5:98:d6:2c:5b:8f:41:25:3b:0a:14:c0: 8c:d1:70:54:a3:77:27:2a:65:e3:f1:54:ec:16:1f: cc:d4:58:58:6e:82:56:29:38:5a:e0:8d:17:2a:3d: 7a:c9:ab:c3:82:1a:d9:9c:4a:85:15:72:aa:3f:7a: 4c:ba:28:20:f5:73:f6:38:81:9b:84:68:7f:0d:fc: c7:91:e7:a7:f5:b0:af:7c:6a:b6:b3:72:44:f6:69: 76:72:48:be:16:58:50:32:97:10:f0:15:65:04:a1: 0e:a7:92:c2:71:f0:88:a1:9c:cc:01:dc:9e:26:ec: 01:d8:25:35:18:66:f8:0b:d4:fb:f2:e2:51:ef:d1: 34:a2:2f:c2:83:08:d8:8c:2a:79:61:64:3c:88:33: ee:1f:ae:62:1d:1f:d7:41:1c:b8:d2:56:ef:3a:22: 6f:30:82:2f:55:7e:ee:95:d0:af:08:24:76:b5:b7: 36:62:f8:32:17:13:1c:5d:f1:df:19:94:dc:62:dc: 37:ac:6e:2f:23:fd:d6:32:76:29:64:43:1a:a2:86: 46:39:f5:15:88:13:54:09:40:76:98:24:79:4b:a9: d5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CA:AC:75:ED:01:35:9A:FF:60:0C:FD:04:FF:0B:E8:98:D8:D1:61 X509v3 Authority Key Identifier: keyid:04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/86A83D10DA3E11F09B1225578ED3641D.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.226.16.0/24 103.45.64.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:03:bd:26:84:d8:cd:56:08:eb:69:38:ab:35:8e:6a:72:bf: 4f:19:9d:d5:d5:59:04:85:20:d3:2c:74:3a:87:77:cb:75:42: 04:26:38:36:fa:0f:6f:73:e7:90:3d:ea:05:75:01:66:b6:55: 81:b2:a3:ea:67:5e:9f:9c:7f:40:4d:2d:81:ab:ae:16:d8:6c: 13:74:a4:cc:a4:83:dd:29:6f:0c:f1:a5:0d:f5:96:d5:7a:0c: 4e:9e:a1:56:52:f6:0f:7e:a5:f8:85:9f:bf:82:51:1b:e7:6e: 5e:8b:6f:a4:9e:11:39:85:e6:ea:2c:11:40:2b:3a:3a:85:e4: 71:bc:f4:ab:5e:a6:6f:0b:eb:c8:ef:29:06:88:0a:1f:da:e9: cd:f6:27:b4:99:72:b2:29:74:41:f5:7c:b9:35:7e:2a:75:0b: 46:c7:97:34:18:d8:21:de:7a:ba:ad:89:7a:1b:45:e2:fe:7d: b0:81:f3:40:a1:92:cc:49:14:b8:79:47:b8:8e:ba:a1:4e:6d: 6f:be:2b:e0:58:77:ad:4d:9f:67:a5:0c:b4:d1:7b:1a:13:3a: 47:47:03:a9:bb:e2:e8:e5:9c:7a:b4:19:3d:80:f2:d1:82:e2: 1c:50:23:cd:0c:db:2f:f0:2d:7f:6c:1f:ab:3b:9d:a4:f5:d6: 87:e3:16:6c -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0M2MTExMC8GA1UEBRMoMDQ3NDkzN0U3OUE5RDY3MzM1M0VBQkQ4MkM0Qjg0MjRC NkM2ODMwRDAeFw0yNTEyMTYwNTE3MzNaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NDBlYjZkLTM1NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCl785SmLrE8WOz5+aHR/BTPFHIg7R92cp/OCPhQAiKNuWY1ixbj0ElOwoUwIzR cFSjdycqZePxVOwWH8zUWFhuglYpOFrgjRcqPXrJq8OCGtmcSoUVcqo/eky6KCD1 c/Y4gZuEaH8N/MeR56f1sK98arazckT2aXZySL4WWFAylxDwFWUEoQ6nksJx8Iih nMwB3J4m7AHYJTUYZvgL1Pvy4lHv0TSiL8KDCNiMKnlhZDyIM+4frmIdH9dBHLjS Vu86Im8wgi9Vfu6V0K8IJHa1tzZi+DIXExxd8d8ZlNxi3Desbi8j/dYydilkQxqi hkY59RWIE1QJQHaYJHlLqdWVAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUucqsde0B NZr/YAz9BP8L6JjY0WEwHwYDVR0jBBgwFoAUBHSTfnmp1nM1PqvYLEuEJLbGgw0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDQzYxLzMzMUQxNDE4REEz RTExRjA4RkQxRTgzODhFRDM2NDFEL0JIU1Rmbm1wMW5NMVBxdllMRXVFSkxiR2d3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQkhTVGZubXAxbk0xUHF2WUxFdUVKTGJHZ3cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0M2MS8zMzFEMTQxOERBM0UxMUYwOEZEMUU4Mzg4RUQzNjQxRC84NkE4M0QxMERB M0UxMUYwOUIxMjI1NTc4RUQzNjQxRC5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEACviEAMEAmctQDANBgkqhkiG9w0BAQsFAAOCAQEAKgO9JoTY zVYI62k4qzWOanK/Txmd1dVZBIUg0yx0Ood3y3VCBCY4NvoPb3PnkD3qBXUBZrZV gbKj6mden5x/QE0tgauuFthsE3SkzKSD3SlvDPGlDfWW1XoMTp6hVlL2D36l+IWf v4JRG+duXotvpJ4ROYXm6iwRQCs6OoXkcbz0q16mbwvryO8pBogKH9rpzfYntJly sil0QfV8uTV+KnULRseXNBjYId56uq2JehtF4v59sIHzQKGSzEkUuHlHuI66oU5t b74r4Fh3rU2fZ6UMtNF7GhM6R0cDqbvi6OWcerQZPYDy0YLiHFAjzQzbL/Atf2wf qzudpPXWh+MWbA== -----END CERTIFICATE-----Generated at Thu Dec 18 02:09:10 2025 by rpki-client