This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/D758E96CF8FF11ED98C6D45FC4F9AE02.roa File: D758E96CF8FF11ED98C6D45FC4F9AE02.roa (raw, json) Hash identifier: OEbvp/lXJIFZKwJ6RYCbMpkBZdrcvrzjMgZm0D+27AQ= Subject key identifier: 91:AE:57:98:09:18:17:69:E9:02:38:75:3F:05:B6:D4:1E:4F:1C:A0 Certificate issuer: /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F Certificate serial: 0568 Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/D758E96CF8FF11ED98C6D45FC4F9AE02.roa Signing time: Wed 10 Dec 2025 22:17:23 +0000 ROA not before: Wed 10 Dec 2025 22:17:23 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 134711 IP address blocks: 103.12.188.0/22 maxlen: 22 103.197.144.0/22 maxlen: 22 220.158.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 22:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1384 (0x568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE13, serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F Validity Not Before: Dec 10 22:17:23 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6939f173-8a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:08:a7:6a:54:4e:62:16:a0:46:f5:80:e5:7a: 5b:91:9d:7e:da:4c:42:93:7d:c2:68:51:26:cb:0d: d2:fc:70:c5:b3:64:f4:1f:38:30:72:88:29:e9:d1: a5:94:8e:72:e2:34:91:69:5c:53:0a:cc:85:82:35: 4b:85:31:2e:f5:8c:dd:ae:9f:5a:7f:c5:65:f1:8d: 83:3a:cd:c4:5e:85:22:90:c2:9e:c1:52:33:6e:67: 8c:c6:9c:16:30:5a:14:b6:43:8f:3f:af:05:9e:45: 4e:2c:eb:b0:02:82:de:b0:c6:6e:54:56:3c:37:36: 14:13:a6:2b:b8:47:21:fe:1d:af:6f:2e:dd:fb:04: 6b:6e:4a:3b:2f:36:d8:1e:b5:cd:55:9b:ac:67:2b: 22:39:dc:78:90:5b:df:08:a6:6a:05:70:e1:2d:0d: fc:4f:73:17:23:de:db:f2:01:ce:13:80:b9:13:37: 54:20:5d:fd:6b:48:21:75:83:3b:7d:a2:9b:23:59: 13:ce:d3:9d:04:7a:f3:44:c0:f3:be:7a:ee:85:b3: e8:a3:8b:9b:70:b7:d8:3c:4e:d6:d7:62:da:34:e6: cb:a9:b1:bf:65:69:0b:8c:85:8e:cb:4b:fc:6d:b8: c8:13:d8:1d:5f:98:86:1c:23:bf:b7:62:7c:0e:8a: bd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AE:57:98:09:18:17:69:E9:02:38:75:3F:05:B6:D4:1E:4F:1C:A0 X509v3 Authority Key Identifier: keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/D758E96CF8FF11ED98C6D45FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.12.188.0/22 103.197.144.0/22 220.158.188.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:d0:f4:28:4a:fe:b1:63:af:d5:9e:5e:64:0f:83:42:2f:20: 18:be:24:0f:77:9d:f4:fb:72:91:a6:17:2e:51:4d:7f:30:af: 57:05:dd:e1:8c:f3:bf:3d:f8:8e:3a:da:de:a3:4e:cc:47:98: 24:52:8e:fd:1d:c6:5e:c7:c9:1f:6f:09:46:fc:45:4a:d9:b9: 52:a5:92:2e:ad:7c:ea:4d:f7:e6:02:bd:2e:cb:ab:da:8f:27: 32:52:d9:db:56:56:a1:72:1e:d8:09:a1:b6:fb:29:bb:fe:12: 3a:5a:4a:04:f2:2c:d8:f1:b2:24:5b:90:64:7e:af:d1:3a:13: ea:6e:99:07:7c:a0:91:15:af:5d:47:3a:d6:39:e0:5c:0f:6e: 06:f3:de:64:73:93:ca:ed:fe:90:3d:cb:e3:a9:88:3c:f9:93: 69:75:ae:cc:04:07:09:24:f4:55:e3:c5:d1:ed:e2:11:df:e5: 79:42:b6:f6:f0:4f:4c:5f:ae:75:cc:01:89:a8:2c:ea:5a:c6: d0:b1:5e:be:de:51:c2:d0:14:c0:9d:e8:52:00:31:44:1c:c8: a8:ba:4f:a1:e9:31:60:f9:be:9e:98:c8:e2:d5:d6:45:79:e4: 54:12:e5:03:b3:5b:54:05:ca:ad:fc:fd:f8:2f:6f:9d:33:83: 39:b2:1d:65 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFMTMxMTAvBgNVBAUTKDg3RDNCRDdEMEFERTA2NTA5RUI4NUFDNkJBNTk0ODlE OTU0MDFGN0YwHhcNMjUxMjEwMjIxNzIzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM5ZjE3My04YTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAinalROYhagRvWA5XpbkZ1+2kxCk33CaFEmyw3S/HDFs2T0Hzgwcogp6dGl lI5y4jSRaVxTCsyFgjVLhTEu9Yzdrp9af8Vl8Y2DOs3EXoUikMKewVIzbmeMxpwW MFoUtkOPP68FnkVOLOuwAoLesMZuVFY8NzYUE6YruEch/h2vby7d+wRrbko7LzbY HrXNVZusZysiOdx4kFvfCKZqBXDhLQ38T3MXI97b8gHOE4C5EzdUIF39a0ghdYM7 faKbI1kTztOdBHrzRMDzvnruhbPoo4ubcLfYPE7W12LaNObLqbG/ZWkLjIWOy0v8 bbjIE9gdX5iGHCO/t2J8Doq99wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFJGuV5gJ GBdp6QI4dT8FttQeTxygMB8GA1UdIwQYMBaAFIfTvX0K3gZQnrhaxrpZSJ2VQB9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUxMy84OTM2MzU3ODI2 RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFyZUJsQ2V1RnJHdWxsSW5aVkFI MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g5TzlmUXJlQmxDZXVGckd1bGxJblpWQUgzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0FFMTMvODkzNjM1NzgyNkZCMTFFQ0E3MTM1RDczQzRGOUFFMDIvRDc1OEU5NkNG OEZGMTFFRDk4QzZENDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJnDLwDBAJnxZADBALcnrwwDQYJKoZIhvcNAQELBQADggEB AI3Q9ChK/rFjr9WeXmQPg0IvIBi+JA93nfT7cpGmFy5RTX8wr1cF3eGM8789+I46 2t6jTsxHmCRSjv0dxl7HyR9vCUb8RUrZuVKlki6tfOpN9+YCvS7Lq9qPJzJS2dtW VqFyHtgJobb7Kbv+EjpaSgTyLNjxsiRbkGR+r9E6E+pumQd8oJEVr11HOtY54FwP bgbz3mRzk8rt/pA9y+OpiDz5k2l1rswEBwkk9FXjxdHt4hHf5XlCtvbwT0xfrnXM AYmoLOpaxtCxXr7eUcLQFMCd6FIAMUQcyKi6T6HpMWD5vp6YyOLV1kV55FQS5QOz W1QFyq38/fgvb50zgzmyHWU= -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:58 2025 by rpki-client