This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/3C73210E29E711F0AB5EBA80C4F9AE02.roa File: 3C73210E29E711F0AB5EBA80C4F9AE02.roa (raw, json) Hash identifier: Y/kIeencj/taxOJRNaw/dIwoKt74Xz/Efsc6Lm3bUIc= Subject key identifier: 71:71:F0:F6:D7:D5:47:DA:D9:31:D5:36:A6:DA:A7:3F:83:64:05:90 Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Certificate serial: 083C Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/3C73210E29E711F0AB5EBA80C4F9AE02.roa Signing time: Sat 13 Dec 2025 08:54:56 +0000 ROA not before: Sat 13 Dec 2025 08:54:56 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 153038 IP address blocks: 103.214.216.0/24 maxlen: 24 103.214.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2108 (0x83c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Validity Not Before: Dec 13 08:54:56 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=693d29e0-5324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e6:c0:dc:0c:df:c9:dc:81:a4:96:83:24:a2: d3:ff:ab:1d:09:04:ea:ed:ad:b1:fe:58:63:ed:69: 90:4d:f2:3f:c2:78:ea:2d:7b:e7:4e:12:41:6b:df: 4a:aa:38:41:19:9c:94:4f:47:ca:71:fb:37:16:d2: 03:40:fb:df:c4:dd:40:dd:11:76:9d:d0:33:05:d9: d3:66:6e:86:af:3f:b8:1e:16:12:fd:07:ce:89:fd: 72:b5:1f:2d:ca:33:0e:90:e2:a0:5e:eb:a6:0c:21: 00:5f:b6:18:97:79:f1:3b:83:ae:04:33:64:14:e2: 04:f8:6e:e0:9b:e4:af:eb:a8:9e:3b:2f:d3:12:0a: 33:c9:2f:5f:6c:91:62:05:32:07:9a:1c:ca:7c:b6: 90:48:b8:8b:a0:e3:86:e5:c5:de:82:87:19:73:f1: d5:a9:95:09:c6:b0:c6:c5:9d:50:9c:37:fc:1f:b0: 94:6a:eb:24:18:3d:84:e0:b7:df:c7:82:90:4a:b4: 29:ed:c2:f2:0f:32:36:a6:5e:e8:fc:ca:c3:fa:c3: 90:a3:c3:5c:42:1e:7e:13:b6:a5:fc:62:89:3b:7b: 7b:d4:18:9c:32:d6:47:42:99:43:03:e7:09:e5:c6: 26:eb:b5:63:58:59:6c:50:80:6d:b6:c9:50:90:24: 4b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:71:F0:F6:D7:D5:47:DA:D9:31:D5:36:A6:DA:A7:3F:83:64:05:90 X509v3 Authority Key Identifier: keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/3C73210E29E711F0AB5EBA80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.214.216.0/23 Signature Algorithm: sha256WithRSAEncryption 47:68:e7:e7:64:46:c2:33:ef:5f:19:b7:c6:f4:77:97:21:bd: 8c:aa:9c:a4:cc:ea:20:d5:63:26:1e:d4:ea:6d:1b:b6:7a:fd: 6c:6b:89:50:a2:78:5a:10:90:b9:15:0a:22:1a:71:aa:41:a2: e5:9b:9a:35:45:b5:61:3a:84:0a:48:72:77:b0:28:94:fd:41: 0c:fe:70:ba:22:48:d8:18:fd:56:81:9c:69:d2:3c:19:74:22: b4:30:3e:93:fa:f6:ef:bf:fc:e6:11:68:96:d2:3a:c1:a9:3f: b9:ba:bf:18:c1:a5:b9:96:17:17:47:96:a3:ba:62:26:c2:55: 84:f0:79:a9:c8:39:b1:48:40:11:31:3e:d1:2e:99:4d:0a:f9: 34:cd:ac:f3:ee:6a:aa:c9:f1:2f:d0:92:b8:2d:ba:84:47:80: 91:f2:95:62:9a:43:57:c1:4f:d8:44:96:50:46:33:8f:40:c8: b3:04:f0:38:12:be:dc:55:cc:55:41:1e:ea:13:7d:12:24:70: 0c:cf:d8:3b:08:b4:cb:7a:d8:3e:94:b0:a4:e0:5d:d1:d5:c8: 3f:dd:b5:78:9c:e4:3f:c5:27:a1:44:1c:d6:90:d5:ae:81:d0: 34:6d:b8:17:8e:4e:95:de:36:48:44:91:09:ea:2b:a3:b9:27: e1:d9:05:1f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC RUQwQ0U3MzcwHhcNMjUxMjEzMDg1NDU2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNkMjllMC01MzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoObA3AzfydyBpJaDJKLT/6sdCQTq7a2x/lhj7WmQTfI/wnjqLXvnThJBa99K qjhBGZyUT0fKcfs3FtIDQPvfxN1A3RF2ndAzBdnTZm6Grz+4HhYS/QfOif1ytR8t yjMOkOKgXuumDCEAX7YYl3nxO4OuBDNkFOIE+G7gm+Sv66ieOy/TEgozyS9fbJFi BTIHmhzKfLaQSLiLoOOG5cXegocZc/HVqZUJxrDGxZ1QnDf8H7CUauskGD2E4Lff x4KQSrQp7cLyDzI2pl7o/MrD+sOQo8NcQh5+E7al/GKJO3t71BicMtZHQplDA+cJ 5cYm67VjWFlsUIBttslQkCRLyQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHFx8PbX 1Ufa2THVNqbapz+DZAWQMB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkNEREYvMjY2MDhENDYxMDcyMTFFQUFDMDZCMDc5QzRGOUFFMDIvM0M3MzIxMEUy OUU3MTFGMEFCNUVCQTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn1tgwDQYJKoZIhvcNAQELBQADggEBAEdo5+dkRsIz718Z t8b0d5chvYyqnKTM6iDVYyYe1OptG7Z6/WxriVCieFoQkLkVCiIacapBouWbmjVF tWE6hApIcnewKJT9QQz+cLoiSNgY/VaBnGnSPBl0IrQwPpP69u+//OYRaJbSOsGp P7m6vxjBpbmWFxdHlqO6YibCVYTweanIObFIQBExPtEumU0K+TTNrPPuaqrJ8S/Q krgtuoRHgJHylWKaQ1fBT9hEllBGM49AyLME8DgSvtxVzFVBHuoTfRIkcAzP2DsI tMt62D6UsKTgXdHVyD/dtXic5D/FJ6FEHNaQ1a6B0DRtuBeOTpXeNkhEkQnqK6O5 J+HZBR8= -----END CERTIFICATE-----Generated at Sun Dec 21 14:39:19 2025 by rpki-client