This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/C3E640EE917811ED904ACF83C4F9AE02.roa File: C3E640EE917811ED904ACF83C4F9AE02.roa (raw, json) Hash identifier: aDePEknIgdhY8grIVf2gq1/G7FHXPqP7qXCUTY/USYI= Subject key identifier: 34:4E:C6:D5:E4:FA:87:DA:46:0A:AA:4C:CE:3B:33:21:0B:0E:4C:EB Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 0256 Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/C3E640EE917811ED904ACF83C4F9AE02.roa Signing time: Sun 07 Dec 2025 00:40:04 +0000 ROA not before: Sun 07 Dec 2025 00:40:04 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133321 IP address blocks: 203.214.197.0/24 maxlen: 24 203.214.198.0/24 maxlen: 24 203.214.199.0/24 maxlen: 24 2404:c400:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 00:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 598 (0x256) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: Dec 7 00:40:04 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6934cce4-62cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d3:82:5d:d2:a2:26:30:98:4d:1c:0b:0e:da: 08:b9:c5:08:3c:50:fe:fa:dd:f8:47:8d:5f:cd:6f: dd:52:d6:ac:d3:20:22:18:10:eb:83:19:60:13:c7: 43:50:2e:02:2d:3e:c3:62:13:b3:30:c2:89:5e:4a: 64:3c:39:a5:b8:88:e7:e4:4c:e5:a4:73:43:fc:57: 3d:94:b7:c5:3c:89:08:69:b0:3e:1d:49:16:29:3a: 6f:d8:d1:91:7f:96:16:e4:f5:7f:5f:2d:cf:68:b4: 80:ab:ff:ac:a6:5b:76:20:05:9a:da:10:7b:4e:17: e6:25:1d:87:46:98:88:cd:86:75:d2:65:63:53:65: 60:45:3f:c0:8e:68:b3:0e:d6:e8:c2:7e:63:ae:9d: d6:ed:97:51:16:6e:25:2b:96:bb:99:60:55:1a:2e: 9d:d3:27:c1:d3:e6:65:4e:c6:d6:49:50:31:7f:e9: ab:76:da:60:28:77:48:6a:76:3e:3b:0f:17:4a:00: 2c:e0:65:86:ad:e2:3b:a4:2a:75:67:7e:09:18:d1: 50:96:c4:54:b3:85:56:a6:5c:7f:42:76:42:41:a6: 3e:0e:20:21:34:c6:42:0b:fd:b3:0f:55:e3:f6:3c: 2b:24:83:0c:cb:88:35:17:63:f8:68:d2:86:be:12: 50:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4E:C6:D5:E4:FA:87:DA:46:0A:AA:4C:CE:3B:33:21:0B:0E:4C:EB X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/C3E640EE917811ED904ACF83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.214.197.0-203.214.199.255 IPv6: 2404:c400:9000::/36 Signature Algorithm: sha256WithRSAEncryption 82:a8:65:fe:48:6d:ad:9f:57:b9:34:5d:09:c1:81:83:9d:5f: 1d:1e:0b:48:e9:da:8a:32:e3:f6:5c:9e:77:72:b7:26:a3:8e: 45:5f:b8:df:0f:39:72:26:1a:f0:8e:c9:50:41:51:90:b2:b9: aa:f4:b2:94:11:c3:2c:3b:b7:36:66:d0:11:f3:78:69:bc:36: ed:0e:71:80:63:93:85:68:e0:50:61:e4:a1:0d:9e:59:06:a0: 96:cb:5a:7b:5f:9f:90:91:c0:87:48:2d:99:16:53:72:f8:25: 0f:f9:01:b9:83:b9:d2:19:62:ca:0e:7c:65:78:46:7b:d3:8e: 11:64:2a:66:e4:da:ec:5f:2b:d8:db:27:33:b5:8c:e0:53:57: dd:c0:90:a1:20:df:2a:1f:9e:66:36:11:18:42:66:72:84:43: 5c:c3:00:c6:56:c0:dc:ba:dc:b5:d4:51:20:12:2d:1d:f4:6b: a5:4e:42:ad:9e:75:be:c1:aa:f2:01:95:46:1b:fd:e1:40:df: 8e:0f:88:50:45:18:2f:8b:ea:d7:2b:cb:ec:41:05:05:7f:74: fb:00:66:37:f3:99:b8:11:8b:5e:3e:66:0a:a0:2a:3d:f0:ba: 35:9f:f3:7c:b7:73:c7:0b:a3:6f:fb:b9:75:fe:05:f7:50:63: 67:c3:a6:4c -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjUxMjA3MDA0MDA0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM0Y2NlNC02MmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNOCXdKiJjCYTRwLDtoIucUIPFD++t34R41fzW/dUtas0yAiGBDrgxlgE8dD UC4CLT7DYhOzMMKJXkpkPDmluIjn5EzlpHND/Fc9lLfFPIkIabA+HUkWKTpv2NGR f5YW5PV/Xy3PaLSAq/+splt2IAWa2hB7ThfmJR2HRpiIzYZ10mVjU2VgRT/Ajmiz Dtbown5jrp3W7ZdRFm4lK5a7mWBVGi6d0yfB0+ZlTsbWSVAxf+mrdtpgKHdIanY+ Ow8XSgAs4GWGreI7pCp1Z34JGNFQlsRUs4VWplx/QnZCQaY+DiAhNMZCC/2zD1Xj 9jwrJIMMy4g1F2P4aNKGvhJQbwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFDROxtXk +ofaRgqqTM47MyELDkzrMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU5QjYvNzkxOENCMEM3RkY1MTFFRDlFRDQ2NDFEQzRGOUFFMDIvQzNFNjQwRUU5 MTc4MTFFRDkwNEFDRjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMBQEAgABMA4wDAMEAMvWxQMEA8vWwDAOBAIAAjAIAwYEJATEAJAwDQYJKoZI hvcNAQELBQADggEBAIKoZf5Iba2fV7k0XQnBgYOdXx0eC0jp2ooy4/Zcnndytyaj jkVfuN8POXImGvCOyVBBUZCyuar0spQRwyw7tzZm0BHzeGm8Nu0OcYBjk4Vo4FBh 5KENnlkGoJbLWntfn5CRwIdILZkWU3L4JQ/5AbmDudIZYsoOfGV4RnvTjhFkKmbk 2uxfK9jbJzO1jOBTV93AkKEg3yofnmY2ERhCZnKEQ1zDAMZWwNy63LXUUSASLR30 a6VOQq2edb7BqvIBlUYb/eFA344PiFBFGC+L6tcry+xBBQV/dPsAZjfzmbgRi14+ ZgqgKj3wujWf83y3c8cLo2/7uXX+BfdQY2fDpkw= -----END CERTIFICATE-----Generated at Wed Dec 10 02:32:26 2025 by rpki-client