This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/205B5C0CACA511EBAE3D0B29C4F9AE02.roa File: 205B5C0CACA511EBAE3D0B29C4F9AE02.roa (raw, json) Hash identifier: yIythsz4A448IVJEFt8C4XCETm/TFkFyGWzje5YM0bw= Subject key identifier: 07:D6:23:07:14:13:97:F3:FD:CC:3F:F7:A8:93:14:E5:A5:D5:AA:88 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B503 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/205B5C0CACA511EBAE3D0B29C4F9AE02.roa Signing time: Thu 08 May 2025 16:11:21 +0000 ROA not before: Thu 08 May 2025 16:11:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138269 IP address blocks: 103.133.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 12:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46339 (0xb503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:11:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd7a9-683b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:83:91:3a:77:8b:3f:6a:c1:0f:e1:77:9c:ff: e1:e7:d3:a2:08:a9:79:17:1a:f1:ea:f5:a6:72:f1: 52:a4:5a:9b:74:c0:81:05:71:6d:5f:98:a3:13:a4: f8:a4:5c:e9:41:ad:f7:bc:98:d7:d9:83:24:35:0c: 14:65:22:b5:41:18:b8:70:91:12:b9:ef:d1:61:70: 21:cc:6a:37:56:85:e7:9b:4f:d3:3e:0a:22:74:b3: e7:c2:a4:26:05:14:45:47:9b:ea:31:f5:1a:08:35: ce:96:14:22:9f:e1:3a:ab:8f:49:96:a9:b2:d9:93: f7:4d:cb:ba:c8:73:af:89:0d:d2:40:dc:c5:05:5e: fa:84:ac:2d:6e:b6:0f:e5:d7:be:7f:05:b4:1f:d5: d1:4c:9c:8a:5f:94:cd:a8:4f:19:b8:76:27:d9:80: 66:1d:1b:1e:60:52:59:ae:47:99:0b:44:be:e7:cf: 3a:eb:38:c7:4f:d2:b4:ab:4b:dc:cf:66:2e:44:28: a0:ba:cb:d6:cf:13:46:24:98:a9:1a:76:3b:c2:7e: 9c:87:cc:60:49:ae:56:ba:c3:fb:a0:d0:2d:23:56: f5:40:8e:64:64:99:01:7c:ea:06:79:c1:54:8e:fb: 02:c8:7c:fc:55:de:10:fc:76:0d:30:48:45:7a:bf: 54:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D6:23:07:14:13:97:F3:FD:CC:3F:F7:A8:93:14:E5:A5:D5:AA:88 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/205B5C0CACA511EBAE3D0B29C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.133.168.0/22 Signature Algorithm: sha256WithRSAEncryption 55:85:19:c9:b4:69:c3:5e:a0:74:7a:ad:1e:e7:74:be:7d:5a: 46:47:19:0d:a1:e1:95:06:e5:c0:98:c7:5c:06:4f:f0:b5:2f: 28:6b:b3:72:82:16:5f:56:c8:4f:3a:44:42:f6:b8:9b:31:97: 3e:28:84:43:4b:90:42:04:b4:8e:85:1b:66:b8:a2:0e:90:3b: 32:bf:10:03:2e:b7:9b:b3:48:2a:8b:51:8c:fa:c2:21:cc:81: d2:eb:d8:66:3e:74:4a:25:88:8e:87:a5:d7:91:98:5e:51:3f: 99:d2:2e:c2:83:73:70:65:7f:35:c8:d8:ed:99:ba:51:fc:84: 87:35:5c:2d:32:e3:e2:63:a3:6c:9d:f6:ed:f6:d6:e9:c4:90: 97:38:d7:9f:d1:00:bd:e2:24:0e:6e:bd:86:c2:1e:c8:fd:09: e9:18:81:5f:9f:5a:24:77:e3:bf:bc:ed:b4:a8:23:1a:0a:d3: 6c:57:19:55:e4:98:2c:32:f9:68:fa:7d:04:ca:60:7e:54:ae: 13:11:8e:e9:a9:6c:22:fb:4f:87:a6:42:75:b2:93:f2:4e:52: d8:80:cb:0d:ae:87:11:35:24:fb:0a:33:0a:99:61:64:5c:f3: 00:8e:60:3a:fe:af:f0:20:56:54:65:26:a3:3a:c6:27:c6:1a: 67:18:ad:11 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALUDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTEyMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q3YTktNjgzYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMeDkTp3iz9qwQ/hd5z/4efTogipeRca8er1pnLxUqRam3TAgQVxbV+YoxOk +KRc6UGt97yY19mDJDUMFGUitUEYuHCRErnv0WFwIcxqN1aF55tP0z4KInSz58Kk JgUURUeb6jH1Ggg1zpYUIp/hOquPSZapstmT903Lushzr4kN0kDcxQVe+oSsLW62 D+XXvn8FtB/V0Uycil+UzahPGbh2J9mAZh0bHmBSWa5HmQtEvufPOus4x0/StKtL 3M9mLkQooLrL1s8TRiSYqRp2O8J+nIfMYEmuVrrD+6DQLSNW9UCOZGSZAXzqBnnB VI77Ash8/FXeEPx2DTBIRXq/VNMCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQH1iMH FBOX8/3MP/eokxTlpdWqiDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzIwNUI1QzBD QUNBNTExRUJBRTNEMEIyOUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ4WoMA0GCSqGSIb3DQEBCwUAA4IBAQBVhRnJtGnDXqB0 eq0e53S+fVpGRxkNoeGVBuXAmMdcBk/wtS8oa7NyghZfVshPOkRC9ribMZc+KIRD S5BCBLSOhRtmuKIOkDsyvxADLrebs0gqi1GM+sIhzIHS69hmPnRKJYiOh6XXkZhe UT+Z0i7Cg3NwZX81yNjtmbpR/ISHNVwtMuPiY6Nsnfbt9tbpxJCXONef0QC94iQO br2Gwh7I/QnpGIFfn1okd+O/vO20qCMaCtNsVxlV5JgsMvlo+n0EymB+VK4TEY7p qWwi+0+HpkJ1spPyTlLYgMsNrocRNST7CjMKmWFkXPMAjmA6/q/wIFZUZSajOsYn xhpnGK0R -----END CERTIFICATE-----Generated at Fri Dec 5 17:14:51 2025 by rpki-client