This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/DEED8FA0BF0111F0A0DE3D62C4F9AE02.roa File: DEED8FA0BF0111F0A0DE3D62C4F9AE02.roa (raw, json) Hash identifier: 5yc3OYyI9+cxhlN6GhCXy6b613PoZglZSVW/o0s8JBU= Subject key identifier: AF:A5:14:4B:CF:F0:D8:D7:50:F4:5D:E8:AB:13:00:5F:B2:D6:66:A6 Certificate issuer: /CN=A911E93B/serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594 Certificate serial: 07 Authority key identifier: CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/DEED8FA0BF0111F0A0DE3D62C4F9AE02.roa Signing time: Wed 12 Nov 2025 18:05:39 +0000 ROA not before: Wed 12 Nov 2025 18:05:39 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 16524 IP address blocks: 103.177.88.0/24 maxlen: 24 103.177.89.0/24 maxlen: 24 2400:3f20::/48 maxlen: 48 2400:3f20:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Nov 2025 05:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E93B, serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594 Validity Not Before: Nov 12 18:05:39 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6914cc73-561a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ac:19:30:f2:bf:0a:45:6a:4e:07:dd:49:97: 7d:8c:b3:78:87:61:e1:77:ae:ba:52:df:4b:04:65: 0d:c7:18:36:41:f7:a6:96:40:78:8c:e7:0a:7b:87: e1:28:b1:68:fd:1e:9f:dc:bf:09:9e:84:89:c3:27: e3:ec:6a:87:20:7f:ec:bd:6b:99:53:77:67:b6:f8: 9d:a1:d1:e7:9a:61:bb:b9:f8:15:74:a5:73:9b:24: 5e:96:b2:4c:67:95:67:d5:89:f1:43:90:84:40:76: a2:a0:51:6a:10:28:75:8d:e1:be:75:76:b8:c3:89: 99:b2:c0:6e:99:0d:d9:74:01:d3:f0:07:72:3f:02: 50:5a:31:76:80:9d:f6:d7:88:9c:1d:7a:86:a0:4b: 22:c8:df:84:5f:6e:62:a9:15:19:35:72:cf:41:1f: 13:b3:11:63:48:90:c0:72:bd:4a:04:79:83:c0:00: a6:b4:73:ac:bf:66:dd:fa:e7:36:51:d1:20:61:e5: 46:84:76:9f:83:ac:29:c5:40:31:22:f5:15:05:66: ce:9b:e3:8c:e8:09:4a:8d:9b:67:a3:e1:3d:51:93: 28:17:b0:33:01:2b:20:9c:4e:b5:11:13:9e:e1:fe: 22:9b:37:e8:fd:17:03:aa:33:2e:0b:6c:58:14:5a: 7d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A5:14:4B:CF:F0:D8:D7:50:F4:5D:E8:AB:13:00:5F:B2:D6:66:A6 X509v3 Authority Key Identifier: keyid:CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/DEED8FA0BF0111F0A0DE3D62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.88.0/23 IPv6: 2400:3f20::/47 Signature Algorithm: sha256WithRSAEncryption 19:dd:aa:08:46:84:f2:c4:f4:39:a6:8f:6b:c4:76:79:99:54: df:ad:0d:cf:f0:ef:b1:ef:74:12:89:32:5f:42:d9:58:cd:29: 5b:83:90:f2:0d:ca:cf:04:4a:89:e6:b6:8b:c5:2a:cd:7d:bc: 26:30:87:f4:38:a6:c4:cd:58:11:c1:df:d4:ba:68:c8:2e:37: 46:8e:3b:b1:b7:b4:bb:f1:50:d8:c0:71:2c:cc:fa:63:d9:c4: e8:7f:e2:ee:bc:79:6f:7d:bb:b0:5f:0f:34:70:af:d7:f9:98: 94:93:89:e1:b0:06:c8:85:a6:b5:69:f6:c3:4e:a7:6d:d0:1e: 6d:e4:fe:7f:4c:cb:34:22:f9:7d:02:17:ad:06:45:b1:48:c0: e2:e2:15:bc:c4:04:05:de:93:66:95:1c:0f:cd:af:17:1d:6f: cc:fc:9f:c2:3d:1f:ca:88:2e:22:4f:98:02:11:38:92:4a:41: d5:0d:e1:9d:5f:f6:c6:95:f2:44:a8:a8:74:d0:28:9e:38:a0: a6:da:95:ad:c4:60:ae:d1:84:4b:49:b6:8c:77:6e:19:99:1e: cf:01:b2:48:3c:44:5c:c3:74:fb:b0:3a:f6:99:db:1a:47:b9: 91:33:13:cc:1c:01:df:ad:81:62:12:7f:b0:f6:4d:2f:2a:49: 4b:27:47:27 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTkzQjExMC8GA1UEBRMoQ0RGNkU1NjU0NDM1QjNDODRERkExMEI5QkM4NzEwRTlF QkIwRDU5NDAeFw0yNTExMTIxODA1MzlaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MTRjYzczLTU2MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJrBkw8r8KRWpOB91Jl32Ms3iHYeF3rrpS30sEZQ3HGDZB96aWQHiM5wp7h+Eo sWj9Hp/cvwmehInDJ+Psaocgf+y9a5lTd2e2+J2h0eeaYbu5+BV0pXObJF6Wskxn lWfVifFDkIRAdqKgUWoQKHWN4b51drjDiZmywG6ZDdl0AdPwB3I/AlBaMXaAnfbX iJwdeoagSyLI34RfbmKpFRk1cs9BHxOzEWNIkMByvUoEeYPAAKa0c6y/Zt365zZR 0SBh5UaEdp+DrCnFQDEi9RUFZs6b44zoCUqNm2ej4T1RkygXsDMBKyCcTrURE57h /iKbN+j9FwOqMy4LbFgUWn0fAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUr6UUS8/w 2NdQ9F3oqxMAX7LWZqYwHwYDVR0jBBgwFoAUzfblZUQ1s8hN+hC5vIcQ6euw1ZQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFOTNCLzdEQkFEMUVFQkYw MDExRjBCQ0MxNUQ1REM0RjlBRTAyL3pmYmxaVVExczhoTi1oQzV2SWNRNmV1dzFa US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemZibFpVUTFzOGhOLWhDNXZJY1E2ZXV3MVpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTkzQi83REJBRDFFRUJGMDAxMUYwQkNDMTVENURDNEY5QUUwMi9ERUVEOEZBMEJG MDExMUYwQTBERTNENjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWexWDAPBAIAAjAJAwcBJAA/IAAAMA0GCSqGSIb3DQEBCwUA A4IBAQAZ3aoIRoTyxPQ5po9rxHZ5mVTfrQ3P8O+x73QSiTJfQtlYzSlbg5DyDcrP BEqJ5raLxSrNfbwmMIf0OKbEzVgRwd/UumjILjdGjjuxt7S78VDYwHEszPpj2cTo f+LuvHlvfbuwXw80cK/X+ZiUk4nhsAbIhaa1afbDTqdt0B5t5P5/TMs0Ivl9Ahet BkWxSMDi4hW8xAQF3pNmlRwPza8XHW/M/J/CPR/KiC4iT5gCETiSSkHVDeGdX/bG lfJEqKh00CieOKCm2pWtxGCu0YRLSbaMd24ZmR7PAbJIPERcw3T7sDr2mdsaR7mR MxPMHAHfrYFiEn+w9k0vKklLJ0cn -----END CERTIFICATE-----Generated at Sat Nov 22 21:29:43 2025 by rpki-client