This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/43C5BAA282F411EE99AAAB12C4F9AE02.roa File: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (raw, json) Hash identifier: xgn6YFodSwG53m6eg/xtI2yxGIZ8r5pFU5yp73kfgi0= Subject key identifier: F7:5C:78:76:00:3E:D0:29:3A:9B:2D:95:73:12:91:4F:C0:3C:53:97 Certificate issuer: /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Certificate serial: 018A Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/43C5BAA282F411EE99AAAB12C4F9AE02.roa Signing time: Wed 03 Dec 2025 02:33:39 +0000 ROA not before: Wed 03 Dec 2025 02:33:39 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 152098 IP address blocks: 36.50.40.0/24 maxlen: 24 36.50.41.0/24 maxlen: 24 2001:df3:1ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 02:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BCAC, serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Validity Not Before: Dec 3 02:33:39 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=692fa182-ccad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a5:cf:75:eb:17:49:30:71:58:c1:fc:25:ba: 1b:4b:ce:66:e6:23:c1:08:5c:c3:d7:e9:f6:e9:a0: 78:19:92:a4:3c:26:7a:ab:03:4c:27:f9:93:73:7c: db:bc:2a:7d:ed:4d:0a:90:f6:1e:3b:9d:a1:b4:ff: 5a:59:2f:db:cc:4d:d3:6a:27:8f:83:a9:2d:b0:18: 0b:01:57:2e:57:59:b7:86:e0:c5:5c:cd:c5:2e:2e: 0b:ca:91:05:75:8a:51:d9:5e:ef:2c:c7:43:1c:a6: 89:19:65:c0:87:49:97:48:6b:54:4b:a4:7b:8f:af: b7:af:c9:3f:49:a7:b4:5f:7f:a1:f1:d5:d4:6f:5c: d3:77:5e:cd:f1:ce:d7:77:21:ef:01:78:37:a3:84: 04:a9:8e:e5:6d:71:25:91:a4:63:7d:e2:00:ad:f8: 30:70:c7:27:c2:96:9a:a5:6a:de:fa:8e:af:4c:01: ae:cb:be:f4:06:92:d9:e2:b1:b6:8a:7e:5a:ce:b7: 95:02:7c:13:2e:73:63:a7:72:24:b0:08:01:f1:0c: 46:c9:18:34:ea:98:f0:24:1a:0c:07:60:46:46:a9: 7d:f5:0c:28:ba:08:9d:84:9f:21:51:01:ab:8d:b0: 68:9d:c4:23:73:dd:1f:60:1c:49:7e:a8:e1:c2:82: 43:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5C:78:76:00:3E:D0:29:3A:9B:2D:95:73:12:91:4F:C0:3C:53:97 X509v3 Authority Key Identifier: keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/43C5BAA282F411EE99AAAB12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.40.0/23 IPv6: 2001:df3:1ec0::/48 Signature Algorithm: sha256WithRSAEncryption 30:87:c9:7b:9e:15:41:d3:4d:8f:f6:48:65:d4:85:14:d5:c5: 78:3a:75:c3:e1:ac:54:aa:3b:a5:4b:d6:ad:24:9f:a1:5d:1d: a1:67:72:1a:e8:db:de:6a:b0:58:27:41:d9:04:c5:f9:92:63: 8d:47:56:95:28:8d:fc:5f:8a:ac:40:ff:32:70:21:7c:4e:6f: 39:8e:f7:29:22:fb:20:ec:af:34:7a:8a:9c:d4:6c:fa:d4:01: 65:93:b7:dd:c8:c8:75:96:37:a3:8c:be:68:aa:01:82:f2:41: 7c:35:4e:1f:bb:62:1b:cd:0f:5e:b0:86:ff:fc:46:4e:a4:0b: ce:32:df:67:47:56:2b:70:a9:bb:6a:e5:18:86:3f:3b:f2:80: 54:dc:4d:af:f0:fa:06:f6:99:cc:ed:57:e2:41:62:58:ab:7d: b1:cc:fe:e7:42:c9:bb:49:05:e7:fd:1e:cb:af:de:22:86:8e: 0a:f9:ae:20:88:ab:28:db:ab:30:1b:ea:c2:51:03:a4:09:e6: 27:a4:2d:e2:fb:ce:2a:ee:21:a8:21:ef:77:d0:64:8e:73:9a: 6d:52:e3:06:91:89:03:8c:9a:93:c7:a5:e0:70:c6:47:ec:d2: 84:b2:9c:9c:21:46:e4:cd:12:ca:48:03:9e:a6:87:e2:28:2d: fe:96:d4:13 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDQUMxMTAvBgNVBAUTKDlDQkUxMEQ3QzFERDQ0QjdFNTkwQjUwNzhCRkM0Rjg2 Q0Y4REIyNUEwHhcNMjUxMjAzMDIzMzM5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmYTE4Mi1jY2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KXPdesXSTBxWMH8JbobS85m5iPBCFzD1+n26aB4GZKkPCZ6qwNMJ/mTc3zb vCp97U0KkPYeO52htP9aWS/bzE3TaiePg6ktsBgLAVcuV1m3huDFXM3FLi4LypEF dYpR2V7vLMdDHKaJGWXAh0mXSGtUS6R7j6+3r8k/Sae0X3+h8dXUb1zTd17N8c7X dyHvAXg3o4QEqY7lbXElkaRjfeIArfgwcMcnwpaapWre+o6vTAGuy770BpLZ4rG2 in5azreVAnwTLnNjp3IksAgB8QxGyRg06pjwJBoMB2BGRql99QwougidhJ8hUQGr jbBoncQjc90fYBxJfqjhwoJD5wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPdceHYA PtApOpstlXMSkU/APFOXMB8GA1UdIwQYMBaAFJy+ENfB3US35ZC1B4v8T4bPjbJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNBQy8wMTUyMjU4RTgy RjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJMZmxrTFVIaV94UGhzLU5z bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MNFExOEhkUkxmbGtMVUhpX3hQaHMtTnNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkJDQUMvMDE1MjI1OEU4MkY0MTFFRTlFRDFGNjExQzRGOUFFMDIvNDNDNUJBQTI4 MkY0MTFFRTk5QUFBQjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAEkMigwDwQCAAIwCQMHACABDfMewDANBgkqhkiG9w0BAQsF AAOCAQEAMIfJe54VQdNNj/ZIZdSFFNXFeDp1w+GsVKo7pUvWrSSfoV0doWdyGujb 3mqwWCdB2QTF+ZJjjUdWlSiN/F+KrED/MnAhfE5vOY73KSL7IOyvNHqKnNRs+tQB ZZO33cjIdZY3o4y+aKoBgvJBfDVOH7tiG80PXrCG//xGTqQLzjLfZ0dWK3Cpu2rl GIY/O/KAVNxNr/D6BvaZzO1X4kFiWKt9scz+50LJu0kF5/0ey6/eIoaOCvmuIIir KNurMBvqwlEDpAnmJ6Qt4vvOKu4hqCHvd9BkjnOabVLjBpGJA4yak8el4HDGR+zS hLKcnCFG5M0SykgDnqaH4igt/pbUEw== -----END CERTIFICATE-----Generated at Wed Dec 3 17:39:07 2025 by rpki-client