This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/5BCC0548D99B11F09EC1D6B265D3641D.roa File: 5BCC0548D99B11F09EC1D6B265D3641D.roa (raw, json) Hash identifier: ns7eTHStxfQNLhyWTvt0z1m0cdRciLzTPm7YQhUzhwM= Subject key identifier: 81:70:B3:DD:3C:C9:AE:D4:B8:79:5A:C1:AD:25:15:6A:0A:17:F5:10 Certificate issuer: /CN=A9158E7B/serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B Certificate serial: 04 Authority key identifier: BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/5BCC0548D99B11F09EC1D6B265D3641D.roa Signing time: Mon 15 Dec 2025 09:50:20 +0000 ROA not before: Mon 15 Dec 2025 09:50:20 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152194 IP address blocks: 43.243.108.0/22 maxlen: 24 103.231.28.0/22 maxlen: 22 103.231.28.0/24 maxlen: 24 103.231.29.0/24 maxlen: 24 103.231.30.0/24 maxlen: 24 103.231.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 10:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E7B, serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B Validity Not Before: Dec 15 09:50:20 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=693fd9dc-9a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:af:03:e4:eb:41:2e:3e:bc:3d:ef:23:b9:95: fc:e5:5a:2a:35:df:b1:9b:2a:9d:86:f0:4e:a0:af: 45:5e:8f:30:b1:9a:37:de:4a:63:98:b7:d4:85:28: 10:03:38:06:86:62:42:6a:c3:ee:b2:6e:1f:d2:ee: f7:70:78:7f:59:47:68:62:fe:6a:2a:68:37:8b:df: 10:79:bf:88:ca:58:d4:95:c0:8c:94:bb:04:a1:8d: df:10:60:e0:e5:8a:22:f0:eb:18:c2:b4:96:6a:7d: 0a:07:07:3b:2b:b0:06:9a:1d:38:83:21:b8:cb:51: 98:22:dc:c0:fc:2d:ec:b7:54:32:16:29:90:ce:17: 1f:ab:4e:79:bc:3d:2f:26:fb:2c:5d:82:b6:1c:5f: 9e:a6:1e:2f:dc:b9:73:ba:3e:4a:ab:9d:95:57:b0: 38:fe:21:10:14:e4:13:3d:f9:f2:61:07:c1:1b:f3: ee:0d:95:5d:38:97:d1:7b:58:8b:39:0f:2c:89:8e: 54:50:f4:62:fb:ce:53:92:16:3d:d6:01:b6:45:59: 15:da:cd:83:8b:b0:9d:75:14:46:5b:bc:3b:96:95: 65:3a:f1:29:91:9b:72:66:5a:a3:40:5d:2e:41:f9: 33:d8:07:63:f6:14:9d:25:b2:05:9e:68:7e:fa:65: f1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:70:B3:DD:3C:C9:AE:D4:B8:79:5A:C1:AD:25:15:6A:0A:17:F5:10 X509v3 Authority Key Identifier: keyid:BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/5BCC0548D99B11F09EC1D6B265D3641D.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.108.0/22 103.231.28.0/22 Signature Algorithm: sha256WithRSAEncryption 87:d0:6a:5c:ef:6a:b9:9f:90:d6:c4:49:15:73:fc:2b:15:95: f1:46:25:0b:13:dd:5c:01:f4:e5:f1:14:a6:8d:f1:15:00:57: 78:31:92:85:be:9d:94:67:ff:fe:ef:38:f6:17:39:95:3c:57: f8:c6:8b:30:bc:f2:43:79:7f:4b:b6:3c:9c:bd:6a:15:34:86: 59:e2:0f:25:a3:fc:ce:52:fc:e7:b3:aa:c5:26:4c:67:17:34: c6:04:61:3e:b8:f4:96:a7:63:45:d0:0f:0f:b5:cf:3f:ea:31: 7a:d1:58:0b:f1:01:e6:d9:60:84:67:42:b2:4e:b9:f9:de:c6: 92:23:fe:95:c5:f8:4c:92:9b:e1:41:a5:f8:d6:ba:33:84:2d: b7:f2:d3:7d:02:b6:ae:21:65:e4:25:bd:58:36:c9:75:9d:a5: ec:2a:11:ab:ee:bf:e5:a2:5f:34:9a:80:d3:01:f5:62:b0:0a: 47:10:16:02:a2:5e:f5:16:62:8f:91:c4:6c:b4:86:b0:68:e6: 12:ee:9b:d1:8e:ae:c5:7e:f2:3b:7b:80:3c:1d:4d:82:e3:6e: d6:06:43:ed:d5:ff:e7:80:70:7a:2f:eb:7e:e7:b3:60:68:05: 40:77:48:12:49:3c:c4:02:93:29:fd:d4:5a:f8:e3:99:9e:e8: 83:fd:e6:21 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OEU3QjExMC8GA1UEBRMoQkEzOTQyNzVDNEZGOEY4RUYyMzQ3NDlBMzZGMkExOTEz OTI3OTU1QjAeFw0yNTEyMTUwOTUwMjBaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMMDTY5M2ZkOWRjLTlhM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdrwPk60EuPrw97yO5lfzlWio137GbKp2G8E6gr0VejzCxmjfeSmOYt9SFKBAD OAaGYkJqw+6ybh/S7vdweH9ZR2hi/moqaDeL3xB5v4jKWNSVwIyUuwShjd8QYODl iiLw6xjCtJZqfQoHBzsrsAaaHTiDIbjLUZgi3MD8Ley3VDIWKZDOFx+rTnm8PS8m +yxdgrYcX56mHi/cuXO6PkqrnZVXsDj+IRAU5BM9+fJhB8Eb8+4NlV04l9F7WIs5 DyyJjlRQ9GL7zlOSFj3WAbZFWRXazYOLsJ11FEZbvDuWlWU68SmRm3JmWqNAXS5B +TPYB2P2FJ0lsgWeaH76ZfFDAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUgXCz3TzJ rtS4eVrBrSUVagoX9RAwHwYDVR0jBBgwFoAUujlCdcT/j47yNHSaNvKhkTknlVsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4RTdCLzUxMUIzQjFBRDk5 QTExRjA4RDQ5MzhCMDY1RDM2NDFEL3VqbENkY1RfajQ3eU5IU2FOdktoa1RrbmxW cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWpsQ2RjVF9qNDd5TkhTYU52S2hrVGtubFZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEU3Qi81MTFCM0IxQUQ5OUExMUYwOEQ0OTM4QjA2NUQzNjQxRC81QkNDMDU0OEQ5 OUIxMUYwOUVDMUQ2QjI2NUQzNjQxRC5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAivzbAMEAmfnHDANBgkqhkiG9w0BAQsFAAOCAQEAh9BqXO9q uZ+Q1sRJFXP8KxWV8UYlCxPdXAH05fEUpo3xFQBXeDGShb6dlGf//u849hc5lTxX +MaLMLzyQ3l/S7Y8nL1qFTSGWeIPJaP8zlL857OqxSZMZxc0xgRhPrj0lqdjRdAP D7XPP+oxetFYC/EB5tlghGdCsk65+d7GkiP+lcX4TJKb4UGl+Na6M4Qtt/LTfQK2 riFl5CW9WDbJdZ2l7CoRq+6/5aJfNJqA0wH1YrAKRxAWAqJe9RZij5HEbLSGsGjm Eu6b0Y6uxX7yO3uAPB1NguNu1gZD7dX/54Bwei/rfuezYGgFQHdIEkk8xAKTKf3U WvjjmZ7og/3mIQ== -----END CERTIFICATE-----Generated at Thu Dec 18 02:09:20 2025 by rpki-client