This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/3BABBD7699E611EAB3C00943C4F9AE02.roa File: 3BABBD7699E611EAB3C00943C4F9AE02.roa (raw, json) Hash identifier: 39xXi+BE3qKyQgrVuislk1mPEFnbEpJPwLiHtitE6BQ= Subject key identifier: 29:EF:4C:6A:C1:34:1E:68:94:03:13:56:28:5A:73:3E:42:16:44:A7 Certificate issuer: /CN=A9156342/serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37 Certificate serial: 09E0 Authority key identifier: 77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/3BABBD7699E611EAB3C00943C4F9AE02.roa Signing time: Thu 18 Dec 2025 19:19:33 +0000 ROA not before: Thu 18 Dec 2025 19:19:33 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 63916 IP address blocks: 43.245.220.0/22 maxlen: 22 43.245.220.0/24 maxlen: 24 43.245.221.0/24 maxlen: 24 43.245.222.0/24 maxlen: 24 43.245.223.0/24 maxlen: 24 103.209.100.0/24 maxlen: 24 103.209.101.0/24 maxlen: 24 103.209.102.0/24 maxlen: 24 103.209.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2528 (0x9e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156342, serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37 Validity Not Before: Dec 18 19:19:33 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=694453c5-2524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:29:12:a4:44:7a:cd:30:c5:de:90:57:1b:61: fa:ad:fa:37:10:0b:8e:f9:50:0d:bb:3e:c7:e0:08: 52:60:d8:5a:83:8f:d2:8c:6f:7c:61:00:0c:cb:00: ee:9f:fd:59:cc:70:38:cf:15:e4:cc:5d:81:78:b4: 17:ef:1a:75:89:d1:9c:b9:b7:95:2e:ed:7a:5c:6d: 28:55:39:35:5b:f1:bb:ca:81:b7:55:13:ed:e2:b7: 24:19:96:a6:a1:2b:dd:29:05:5a:5c:bb:08:65:b4: 1b:21:2f:4e:18:8b:7c:c4:09:2d:58:3e:ee:a1:03: 9c:70:ff:11:a7:e1:f1:68:19:a0:b3:5a:c5:ae:68: 5f:72:5d:6d:ce:a2:72:3e:e2:79:aa:62:a3:8f:a0: 16:2a:8c:c5:0c:b9:60:5b:dd:e0:2e:31:b2:0e:f7: bc:36:65:58:b3:e3:4a:cb:cd:39:fe:2e:35:1a:a4: 97:7f:32:46:5e:bb:e9:eb:a3:dc:b6:f2:bd:04:31: e0:b4:8b:ad:ce:fc:ee:ec:5f:ac:b7:c6:1c:b3:b3: 14:8c:6f:bd:10:05:0c:43:55:49:a9:fa:7f:b1:37: 71:f8:51:f2:85:d1:65:46:ec:be:3a:c1:d0:81:f0: 07:45:07:dd:bb:cb:d5:60:6b:64:67:d4:7f:65:0a: c0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EF:4C:6A:C1:34:1E:68:94:03:13:56:28:5A:73:3E:42:16:44:A7 X509v3 Authority Key Identifier: keyid:77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/3BABBD7699E611EAB3C00943C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.220.0/22 103.209.100.0/22 Signature Algorithm: sha256WithRSAEncryption 74:63:58:30:20:7d:66:c9:72:1d:ba:1a:f5:73:b5:c6:7e:c4: ee:1f:6e:86:55:cf:ad:d0:b5:10:99:fd:63:d7:db:f1:8a:8f: e8:6f:a9:bf:b6:1e:4b:5a:b9:d5:d3:34:17:09:50:d3:cd:a4: 46:ce:a3:e6:b1:58:18:88:f0:ee:54:d7:4c:f8:2a:1b:7b:17: 6a:57:0c:e1:1c:48:a3:fd:33:4a:db:61:4a:9a:7f:15:bb:ab: 08:1a:09:d3:79:c2:ea:24:24:32:c3:0f:6e:d9:88:99:13:28: a1:4e:28:16:f9:8a:07:36:c5:28:48:6c:20:dd:17:a1:2d:60: 40:f9:9f:36:d9:a7:0d:c6:57:bc:e6:3e:5f:2a:b8:6e:fd:27: 1e:36:bd:fb:42:ff:c3:6a:d6:fa:14:0f:d1:2c:26:cf:0c:05: 25:f7:46:9b:81:17:cc:dd:1c:37:4a:0f:93:b1:05:ee:a7:94: cd:19:a3:87:0e:cd:01:0f:e6:a6:e6:e5:4e:80:11:f0:96:6f: fe:76:81:90:a2:4e:8a:e5:82:1d:bc:d4:23:74:b2:0a:bd:2d: f5:9b:f0:8c:3f:c3:91:40:84:47:df:42:d5:9a:ac:a1:06:20: 6c:84:3a:a6:9a:4b:78:01:ac:6f:0b:7f:78:1b:e1:06:77:dc: ad:62:4e:84 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYzNDIxMTAvBgNVBAUTKDc3REEyNDgwMDRFOEM1ODcyQkRGNzJCQUMxMjIyQzdD Q0I2RThFMzcwHhcNMjUxMjE4MTkxOTMzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ0NTNjNS0yNTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ykSpER6zTDF3pBXG2H6rfo3EAuO+VANuz7H4AhSYNhag4/SjG98YQAMywDu n/1ZzHA4zxXkzF2BeLQX7xp1idGcubeVLu16XG0oVTk1W/G7yoG3VRPt4rckGZam oSvdKQVaXLsIZbQbIS9OGIt8xAktWD7uoQOccP8Rp+HxaBmgs1rFrmhfcl1tzqJy PuJ5qmKjj6AWKozFDLlgW93gLjGyDve8NmVYs+NKy805/i41GqSXfzJGXrvp66Pc tvK9BDHgtIutzvzu7F+st8Ycs7MUjG+9EAUMQ1VJqfp/sTdx+FHyhdFlRuy+OsHQ gfAHRQfdu8vVYGtkZ9R/ZQrAsQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCnvTGrB NB5olAMTVihacz5CFkSnMB8GA1UdIwQYMBaAFHfaJIAE6MWHK99yusEiLHzLbo43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjM0Mi9CREY4OTA4MDk5 RTQxMUVBODlBNEMyNDBDNEY5QUUwMi9kOW9rZ0FUb3hZY3IzM0s2d1NJc2ZNdHVq amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q5b2tnQVRveFljcjMzSzZ3U0lzZk10dWpqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTYzNDIvQkRGODkwODA5OUU0MTFFQTg5QTRDMjQwQzRGOUFFMDIvM0JBQkJENzY5 OUU2MTFFQUIzQzAwOTQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr9dwDBAJn0WQwDQYJKoZIhvcNAQELBQADggEBAHRjWDAg fWbJch26GvVztcZ+xO4fboZVz63QtRCZ/WPX2/GKj+hvqb+2HktaudXTNBcJUNPN pEbOo+axWBiI8O5U10z4Kht7F2pXDOEcSKP9M0rbYUqafxW7qwgaCdN5wuokJDLD D27ZiJkTKKFOKBb5igc2xShIbCDdF6EtYED5nzbZpw3GV7zmPl8quG79Jx42vftC /8Nq1voUD9EsJs8MBSX3RpuBF8zdHDdKD5OxBe6nlM0Zo4cOzQEP5qbm5U6AEfCW b/52gZCiTorlgh281CN0sgq9LfWb8Iw/w5FAhEffQtWarKEGIGyEOqaaS3gBrG8L f3gb4QZ33K1iToQ= -----END CERTIFICATE-----Generated at Fri Dec 19 14:07:07 2025 by rpki-client