This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/AA4C4484A9EC11EE800F7626C4F9AE02.roa File: AA4C4484A9EC11EE800F7626C4F9AE02.roa (raw, json) Hash identifier: xw1jxxQf5K+8yqPQHHQW9Ez9CpRZwMvJIq7BVR/kDks= Subject key identifier: 35:0B:25:A8:5D:11:3A:13:A8:BD:70:BA:C0:45:11:C2:5D:1C:DF:92 Certificate issuer: /CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Certificate serial: 0104 Authority key identifier: 7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/AA4C4484A9EC11EE800F7626C4F9AE02.roa Signing time: Mon 28 Apr 2025 22:32:15 +0000 ROA not before: Mon 28 Apr 2025 22:32:15 +0000 ROA not after: Thu 28 Aug 2025 00:00:00 +0000 asID: 136257 IP address blocks: 103.85.112.0/23 maxlen: 23 103.85.112.0/24 maxlen: 24 103.85.113.0/24 maxlen: 24 103.85.115.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8E2, serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Validity Not Before: Apr 28 22:32:15 2025 GMT Not After : Aug 28 00:00:00 2025 GMT Subject: CN=681001ee-68b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:db:00:57:25:47:49:17:bc:67:a8:a6:04:20: 4f:c1:30:34:09:17:a8:d0:83:72:7d:a7:81:be:75: e8:52:20:f8:9d:a8:8d:24:23:30:a7:2a:83:b7:ef: 22:aa:23:0b:e1:c0:54:13:c5:ae:09:d4:af:20:ed: 11:c9:aa:f0:30:59:36:69:5e:40:be:fa:4a:72:7c: 4d:0c:9c:6d:3d:57:45:f4:4f:e1:dc:c4:64:5d:8d: c0:a9:af:d0:91:53:40:3f:58:f2:43:e4:04:d9:69: b7:c9:c6:54:a5:89:5d:e9:cc:e6:84:18:d7:49:6c: 0f:d7:db:16:b8:79:5c:84:c7:bd:ea:2a:0e:fb:bc: af:d6:30:0e:fe:01:30:95:3a:2c:ce:9f:c4:20:75: 4b:5a:b0:67:1b:c3:ce:a7:72:c5:8a:c3:2b:a1:d4: 51:ab:4b:80:d0:f5:cb:6f:28:00:f6:e1:36:ff:4d: 7c:da:4f:07:4d:2b:6f:4f:f7:1c:c1:5d:66:7b:9c: 06:51:3b:e2:45:0e:a3:ee:df:85:22:5b:f8:f0:81: 0b:cf:09:ec:31:68:75:d7:f5:25:5d:e4:d4:d5:dc: 96:c4:15:ea:56:6b:82:c8:92:30:e9:d2:88:31:2c: 3a:50:ca:25:5d:60:1f:8a:7e:6c:73:1d:d1:2e:94: 91:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0B:25:A8:5D:11:3A:13:A8:BD:70:BA:C0:45:11:C2:5D:1C:DF:92 X509v3 Authority Key Identifier: keyid:7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/AA4C4484A9EC11EE800F7626C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.85.112.0/23 103.85.115.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:a9:af:12:c5:ee:b8:93:16:fa:63:39:22:12:a7:e0:13:3a: 4a:85:e8:92:17:12:cc:c3:aa:50:e3:df:5c:d6:bc:26:7b:a1: b3:4e:c8:f8:b7:b0:d2:ed:b4:1c:21:7b:0e:f6:ee:7d:2b:af: ac:bb:61:cf:84:ac:46:5d:10:28:b6:d0:2b:76:9a:02:d1:0c: b2:43:e1:3b:c0:14:6e:08:2e:76:97:1c:92:2a:c1:fd:24:a5: bd:f0:6e:4c:7e:53:7e:9e:03:01:54:76:51:93:83:92:72:14: e0:3f:1a:35:c9:fc:51:4e:3a:70:c9:69:57:e0:9c:17:9c:b0: d5:c4:11:87:d9:ef:c1:a2:f6:90:7c:d7:c7:0e:da:d5:48:13: e9:b5:8d:7f:84:04:55:10:2e:b2:57:ba:7f:48:9d:42:78:4d: ed:b3:f2:93:d5:f6:cd:0f:4e:23:27:68:35:61:c0:00:7a:35: 29:89:cf:dc:26:ed:8a:af:bc:4d:ee:4b:29:58:b8:c9:e9:f5: 10:a0:40:c3:a0:4c:c5:19:6c:eb:b7:5e:06:35:6d:ab:48:0c: 71:68:dc:04:0a:bd:76:5e:86:c7:21:a7:91:a3:16:45:04:24: 04:c6:fc:43:ce:65:20:62:1a:02:a1:b1:03:d7:00:72:10:09: 26:a0:51:c0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RTIxMTAvBgNVBAUTKDdEMDYyQzcyREM1RUYxMkYwNUM0MTY3OUZDNkZFMjU1 MkI0RUEwMjAwHhcNMjUwNDI4MjIzMjE1WhcNMjUwODI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODEwMDFlZS02OGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNsAVyVHSRe8Z6imBCBPwTA0CReo0INyfaeBvnXoUiD4naiNJCMwpyqDt+8i qiML4cBUE8WuCdSvIO0RyarwMFk2aV5AvvpKcnxNDJxtPVdF9E/h3MRkXY3Aqa/Q kVNAP1jyQ+QE2Wm3ycZUpYld6czmhBjXSWwP19sWuHlchMe96ioO+7yv1jAO/gEw lToszp/EIHVLWrBnG8POp3LFisMrodRRq0uA0PXLbygA9uE2/0182k8HTStvT/cc wV1me5wGUTviRQ6j7t+FIlv48IELzwnsMWh11/UlXeTU1dyWxBXqVmuCyJIw6dKI MSw6UMolXWAfin5scx3RLpSRiQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDULJahd EToTqL1wusBFEcJdHN+SMB8GA1UdIwQYMBaAFH0GLHLcXvEvBcQWefxv4lUrTqAg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhFMi9DMDkyQjEwNjFE RUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThTOEZ4Qlo1X0dfaVZTdE9v Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZRWXNjdHhlOFM4RnhCWjVfR19pVlN0T29DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQ4RTIvQzA5MkIxMDYxREVGMTFFQjgzNUUxNTdBQzRGOUFFMDIvQUE0QzQ0ODRB OUVDMTFFRTgwMEY3NjI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnVXADBABnVXMwDQYJKoZIhvcNAQELBQADggEBAI+prxLF 7riTFvpjOSISp+ATOkqF6JIXEszDqlDj31zWvCZ7obNOyPi3sNLttBwhew727n0r r6y7Yc+ErEZdECi20Ct2mgLRDLJD4TvAFG4ILnaXHJIqwf0kpb3wbkx+U36eAwFU dlGTg5JyFOA/GjXJ/FFOOnDJaVfgnBecsNXEEYfZ78Gi9pB818cO2tVIE+m1jX+E BFUQLrJXun9InUJ4Te2z8pPV9s0PTiMnaDVhwAB6NSmJz9wm7YqvvE3uSylYuMnp 9RCgQMOgTMUZbOu3XgY1batIDHFo3AQKvXZehschp5GjFkUEJATG/EPOZSBiGgKh sQPXAHIQCSagUcA= -----END CERTIFICATE-----Generated at Mon Dec 22 00:52:39 2025 by rpki-client