This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/BBBEDEF46C8211EE866F5A78C4F9AE02.roa File: BBBEDEF46C8211EE866F5A78C4F9AE02.roa (raw, json) Hash identifier: rX9KVe2qszOUPjT1pbGC+LrjEbspt/xxl2Uq6dePAdc= Subject key identifier: 1E:B1:7B:28:9A:CF:E0:53:42:BB:56:13:01:16:46:69:6A:54:7C:FD Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Certificate serial: 013D Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/BBBEDEF46C8211EE866F5A78C4F9AE02.roa Signing time: Thu 03 Apr 2025 04:01:32 +0000 ROA not before: Thu 03 Apr 2025 04:01:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 45671 IP address blocks: 43.239.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Validity Not Before: Apr 3 04:01:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67ee081b-af39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:56:e8:39:87:22:ef:fe:9c:5b:40:88:06:55: d2:3b:be:36:78:17:48:49:e9:f9:e9:91:80:7a:6b: 63:da:b2:08:76:64:60:12:47:89:4f:8b:09:1b:92: bb:15:44:db:b6:f2:62:45:da:ab:46:f6:6f:f5:d3: 7b:87:ca:ad:7b:6f:d5:fc:1b:98:0e:90:61:bd:b2: e1:20:9b:8b:e4:60:d7:6f:0b:ee:43:62:73:dd:4f: 52:7e:f6:37:a8:58:1c:c4:e1:4a:52:ae:27:e3:04: 7d:25:3f:5e:ea:32:66:8b:e9:98:51:f4:ec:b6:ab: 87:0c:2b:a9:25:c6:a1:a6:46:54:43:40:14:03:72: c0:44:fd:c4:50:2a:a9:9f:eb:8b:b2:aa:0b:0d:cc: 22:27:94:a2:52:0a:47:49:8b:8b:b4:f7:78:64:9f: 48:16:85:24:73:53:3a:0e:68:ed:90:4d:9c:2f:9f: d1:05:0a:91:eb:c0:86:fd:a2:08:89:a6:17:52:87: c0:ff:6a:7e:cb:89:77:fa:d4:f7:3c:cd:34:fd:44: 90:46:44:0c:ef:23:9e:7e:b6:50:0b:7c:6b:03:3f: 84:09:e8:ea:7b:41:7f:84:cf:c6:ec:e7:83:a7:14: 79:30:d5:64:92:47:eb:9b:29:1a:cc:18:59:6d:b7: 4b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B1:7B:28:9A:CF:E0:53:42:BB:56:13:01:16:46:69:6A:54:7C:FD X509v3 Authority Key Identifier: keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/BBBEDEF46C8211EE866F5A78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.99.0/24 Signature Algorithm: sha256WithRSAEncryption b0:33:f6:f0:3e:2d:c9:7e:f0:9e:f8:2c:0a:a7:cf:fc:0c:83: f2:21:5d:2e:3a:18:2d:0a:e7:42:dd:cb:99:22:82:4b:1e:18: dd:14:7a:f2:ae:55:a0:de:6e:cc:eb:1a:6e:fe:f6:70:5c:5e: 18:cd:c8:04:9d:1a:bd:18:a3:0b:cf:0b:c5:7d:01:9e:55:cb: ee:21:be:6d:40:fc:e1:08:9f:40:db:39:16:37:2d:f8:de:fa: 4a:bb:5a:6f:94:22:69:ba:d6:ea:ee:97:bf:b3:b5:ca:9d:af: eb:6e:8a:70:b2:13:9c:c5:6d:fc:aa:b4:cf:e0:30:66:dc:1c: 47:12:3a:d6:f9:55:cc:d8:d2:0a:4a:66:40:29:3a:14:92:dd: f7:54:76:47:72:8a:97:70:2e:7d:eb:11:27:80:d2:c6:14:f8: 62:a9:f1:30:f1:cd:e8:90:8f:db:61:12:cc:6e:de:a9:24:52: a6:a4:a4:2d:20:d8:b5:2e:fe:0f:84:7f:70:69:8c:e6:8f:eb: fd:30:97:95:34:0b:bd:89:84:14:f1:38:4f:14:4a:eb:7b:00: c4:30:3c:7d:2c:79:f3:e0:8a:20:36:d4:89:5b:96:8a:85:00: 34:3d:06:fa:81:4d:ab:ca:ef:98:dd:75:3b:4e:bb:9a:77:9d: d4:a8:eb:0d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2MjMxMTAvBgNVBAUTKERBNzM2OUI0OTcyMkJBMTM5QjdCNjBGMzlDODhCNDlC REJCMzVGM0QwHhcNMjUwNDAzMDQwMTMyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VlMDgxYi1hZjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlboOYci7/6cW0CIBlXSO742eBdISen56ZGAemtj2rIIdmRgEkeJT4sJG5K7 FUTbtvJiRdqrRvZv9dN7h8qte2/V/BuYDpBhvbLhIJuL5GDXbwvuQ2Jz3U9SfvY3 qFgcxOFKUq4n4wR9JT9e6jJmi+mYUfTstquHDCupJcahpkZUQ0AUA3LARP3EUCqp n+uLsqoLDcwiJ5SiUgpHSYuLtPd4ZJ9IFoUkc1M6DmjtkE2cL5/RBQqR68CG/aII iaYXUofA/2p+y4l3+tT3PM00/USQRkQM7yOefrZQC3xrAz+ECejqe0F/hM/G7OeD pxR5MNVkkkfrmykazBhZbbdLgwIDAQABo4IClTCCApEwHQYDVR0OBBYEFB6xeyia z+BTQrtWEwEWRmlqVHz9MB8GA1UdIwQYMBaAFNpzabSXIroTm3tg85yItJvbs189 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTYyMy9BMjVENDg5RTUw NDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVoT2JlMkR6bklpMG05dXpY ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJuTnB0SmNpdWhPYmUyRHpuSWkwbTl1elh6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0U2MjMvQTI1RDQ4OUU1MDQ3MTFFRUI2NzczNjVEQzRGOUFFMDIvQkJCRURFRjQ2 QzgyMTFFRTg2NkY1QTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr72MwDQYJKoZIhvcNAQELBQADggEBALAz9vA+Lcl+8J74 LAqnz/wMg/IhXS46GC0K50Ldy5kigkseGN0UevKuVaDebszrGm7+9nBcXhjNyASd Gr0YowvPC8V9AZ5Vy+4hvm1A/OEIn0DbORY3Lfje+kq7Wm+UImm61urul7+ztcqd r+tuinCyE5zFbfyqtM/gMGbcHEcSOtb5VczY0gpKZkApOhSS3fdUdkdyipdwLn3r ESeA0sYU+GKp8TDxzeiQj9thEsxu3qkkUqakpC0g2LUu/g+Ef3BpjOaP6/0wl5U0 C72JhBTxOE8USut7AMQwPH0sefPgiiA21IlbloqFADQ9BvqBTavK75jddTtOu5p3 ndSo6w0= -----END CERTIFICATE-----Generated at Fri Dec 5 18:34:55 2025 by rpki-client