This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/D75EF2ACFB6D11EC8F56D760C4F9AE02.roa File: D75EF2ACFB6D11EC8F56D760C4F9AE02.roa (raw, json) Hash identifier: Y4IjgROza7hbC5Ch8I7v3zCuAkrKDxCGPUvc5F2ZkfI= Subject key identifier: 50:BD:8C:1A:FB:1C:92:E2:21:35:3F:FE:D8:A1:F5:B4:C8:1E:53:17 Certificate issuer: /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E Certificate serial: 0791 Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/D75EF2ACFB6D11EC8F56D760C4F9AE02.roa Signing time: Fri 14 Nov 2025 20:41:30 +0000 ROA not before: Fri 14 Nov 2025 20:41:30 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 59315 IP address blocks: 103.243.76.0/22 maxlen: 22 103.243.76.0/24 maxlen: 24 103.243.77.0/24 maxlen: 24 103.243.78.0/24 maxlen: 24 103.243.79.0/24 maxlen: 24 116.206.46.0/23 maxlen: 23 116.206.46.0/24 maxlen: 24 116.206.47.0/24 maxlen: 24 2400:4c40::/32 maxlen: 32 2400:4c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1937 (0x791) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C23C, serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E Validity Not Before: Nov 14 20:41:30 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=691793fa-e642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6c:63:23:25:ed:2d:78:de:82:25:f9:ce:06: f3:38:18:ee:9b:e0:7d:09:1b:c9:ce:58:2d:39:a3: 6d:87:11:d8:22:36:54:96:9f:d5:e4:eb:39:16:37: 48:f5:c9:13:d9:65:28:35:08:49:78:05:45:2b:9a: a4:63:50:8e:9c:65:5b:04:46:df:39:ab:b4:94:5e: c4:4d:85:f1:21:7a:21:f5:78:58:56:48:4c:ff:f6: d1:21:69:92:46:26:71:37:9c:c0:ae:3c:60:09:9e: 0a:55:ce:35:27:d6:4e:6e:f7:de:b7:bb:30:f5:06: 0f:d5:bd:05:40:bc:07:57:07:e2:5a:8c:80:09:30: 96:3b:64:4f:b0:5f:d4:f5:11:f3:1a:95:3c:45:2b: f5:da:07:7d:50:55:df:2c:ae:f6:f0:de:73:2b:89: ac:dd:22:c8:86:b5:13:71:c8:35:7e:a4:68:c0:23: 6f:67:3b:fb:83:fc:d7:a1:a1:af:cb:4b:ba:55:b3: 35:7e:80:ef:62:8b:e2:7a:db:ab:25:91:e1:ce:1d: 22:b5:d0:06:14:68:25:3e:4b:d2:53:b6:6b:01:a8: 29:4a:07:1c:cf:be:95:24:76:43:e7:b2:31:08:f9: 79:52:ac:b2:40:17:01:cd:01:f4:e7:b4:b5:d8:e8: 1a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BD:8C:1A:FB:1C:92:E2:21:35:3F:FE:D8:A1:F5:B4:C8:1E:53:17 X509v3 Authority Key Identifier: keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/D75EF2ACFB6D11EC8F56D760C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.243.76.0/22 116.206.46.0/23 IPv6: 2400:4c40::/32 Signature Algorithm: sha256WithRSAEncryption c7:fd:c7:3b:75:17:d0:8c:38:be:c6:e0:dc:57:e9:66:fa:63: 5c:66:9c:63:60:9e:61:06:61:7b:b2:81:75:96:82:59:22:91: 0d:25:51:8a:58:f0:11:fb:62:a0:9b:9b:f0:08:05:1a:76:f3: 4c:17:48:33:28:1a:bf:7e:1d:45:d4:56:e3:8e:79:0b:ef:53: 7c:d4:f3:1c:1a:8a:3c:01:6d:56:86:a7:8a:05:6a:e7:07:b6: 2e:33:25:13:3b:22:0b:81:4a:15:e2:82:e6:63:56:4f:64:de: 3f:39:c1:1c:c9:c0:ac:ef:d5:14:2b:5c:98:97:be:9b:ff:ce: c2:82:4b:ad:3d:54:39:ca:66:f7:24:76:c6:37:1f:d7:06:ac: be:db:cd:ce:8a:11:86:e9:e2:f7:1e:65:a2:98:52:a2:4e:d1: b8:ad:af:1a:67:c3:90:dd:af:53:14:01:48:96:90:d5:e7:3a: ff:e9:cd:b8:f2:c6:67:4c:60:ce:10:6e:3c:33:11:17:18:47: 7d:21:42:83:ea:dd:6d:3e:3e:c2:95:c1:19:a7:a5:06:01:4e: c4:a1:80:b4:10:f5:ab:85:3c:38:69:c6:94:fe:2f:11:50:b0: a4:e8:33:cc:f3:e7:99:82:49:a4:a5:39:9c:ee:1d:e6:45:eb: de:5f:d4:a8 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICB5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyM0MxMTAvBgNVBAUTKEFDMzJFOTlDQjA5MkU2MkUzQUNBMTg3NDYzREE5OUU3 M0Q1QUFGM0UwHhcNMjUxMTE0MjA0MTMwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE3OTNmYS1lNjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12xjIyXtLXjegiX5zgbzOBjum+B9CRvJzlgtOaNthxHYIjZUlp/V5Os5FjdI 9ckT2WUoNQhJeAVFK5qkY1COnGVbBEbfOau0lF7ETYXxIXoh9XhYVkhM//bRIWmS RiZxN5zArjxgCZ4KVc41J9ZObvfet7sw9QYP1b0FQLwHVwfiWoyACTCWO2RPsF/U 9RHzGpU8RSv12gd9UFXfLK728N5zK4ms3SLIhrUTccg1fqRowCNvZzv7g/zXoaGv y0u6VbM1foDvYovieturJZHhzh0itdAGFGglPkvSU7ZrAagpSgccz76VJHZD57Ix CPl5UqyyQBcBzQH057S12OgaewIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFFC9jBr7 HJLiITU//tih9bTIHlMXMB8GA1UdIwQYMBaAFKwy6ZywkuYuOsoYdGPamec9Wq8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzIzQy8wOTA3NDRDMjNB M0YxMUVCQjYzQjc1NTFDNEY5QUUwMi9yRExwbkxDUzVpNDZ5aGgwWTlxWjV6MWFy ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JETHBuTENTNWk0NnloaDBZOXFaNXoxYXJ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0MyM0MvMDkwNzQ0QzIzQTNGMTFFQkI2M0I3NTUxQzRGOUFFMDIvRDc1RUYyQUNG QjZEMTFFQzhGNTZENzYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJn80wDBAF0zi4wDQQCAAIwBwMFACQATEAwDQYJKoZIhvcN AQELBQADggEBAMf9xzt1F9CMOL7G4NxX6Wb6Y1xmnGNgnmEGYXuygXWWglkikQ0l UYpY8BH7YqCbm/AIBRp280wXSDMoGr9+HUXUVuOOeQvvU3zU8xwaijwBbVaGp4oF aucHti4zJRM7IguBShXiguZjVk9k3j85wRzJwKzv1RQrXJiXvpv/zsKCS609VDnK ZvckdsY3H9cGrL7bzc6KEYbp4vceZaKYUqJO0bitrxpnw5Ddr1MUAUiWkNXnOv/p zbjyxmdMYM4QbjwzERcYR30hQoPq3W0+PsKVwRmnpQYBTsShgLQQ9auFPDhpxpT+ LxFQsKToM8zz55mCSaSlOZzuHeZF695f1Kg= -----END CERTIFICATE-----Generated at Fri Dec 19 09:17:38 2025 by rpki-client