This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2477CC70BEC111F0A2F3276AC4F9AE02.roa File: 2477CC70BEC111F0A2F3276AC4F9AE02.roa (raw, json) Hash identifier: 70HpovIWk0JUITbddO4ba0PfkqHAma928m1KaeZ6308= Subject key identifier: 12:E9:B8:0E:0D:76:D4:3D:FD:07:E6:1D:38:73:FB:B9:83:43:8A:B1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C738 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2477CC70BEC111F0A2F3276AC4F9AE02.roa Signing time: Tue 11 Nov 2025 06:21:42 +0000 ROA not before: Tue 11 Nov 2025 06:21:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133297 IP address blocks: 43.251.80.0/22 maxlen: 22 43.251.80.0/24 maxlen: 24 43.251.81.0/24 maxlen: 24 43.251.82.0/24 maxlen: 24 43.251.83.0/24 maxlen: 24 103.254.128.0/22 maxlen: 22 103.254.128.0/24 maxlen: 24 103.254.129.0/24 maxlen: 24 103.254.130.0/24 maxlen: 24 103.254.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 12:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51000 (0xc738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 11 06:21:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6912d5f6-4bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:55:9f:af:c0:e9:96:ae:d5:59:3e:c5:be:b6: f3:3f:5e:53:8f:49:9c:ba:0e:e0:94:48:3a:79:dc: 2a:3e:44:b3:0e:92:f3:a5:f2:d6:22:f3:2e:60:51: 62:db:44:21:35:a3:ce:80:60:4c:f2:45:07:97:5d: df:ef:7b:2f:48:2a:d8:c5:9c:84:92:60:54:50:21: 5e:42:05:d8:08:52:ee:4d:bd:1f:52:19:61:bc:2b: a1:f1:51:11:88:7e:eb:85:76:89:6c:6c:b7:92:7b: ef:8a:23:84:ca:c0:af:3c:a5:5d:08:b6:76:88:0b: 54:d4:b1:7a:31:d5:11:a7:fe:73:9c:54:67:99:ff: 16:18:b5:83:78:ed:ae:17:71:64:d6:43:84:6c:bc: 04:b5:3c:7a:8c:80:b7:b2:e2:a7:8f:b7:a0:db:be: 84:1d:2f:ed:0e:7d:23:ad:18:bf:57:2a:28:85:d7: b1:b2:43:1a:0c:14:4f:14:4d:40:71:f1:e8:5b:be: 1c:97:e1:2a:f6:26:e9:36:29:80:82:c9:13:d1:d6: 69:88:4a:e3:38:2c:11:73:1c:e0:d7:7a:03:b7:74: 0c:6d:bb:a8:71:cf:1f:92:89:4b:39:af:44:36:eb: 9f:ce:d2:f4:1f:5a:ae:15:73:44:4a:59:1c:bb:6e: 9b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E9:B8:0E:0D:76:D4:3D:FD:07:E6:1D:38:73:FB:B9:83:43:8A:B1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2477CC70BEC111F0A2F3276AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.251.80.0/22 103.254.128.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:e8:19:b0:21:23:05:91:86:e7:6e:81:25:8d:b2:ae:44:3a: ec:1f:05:cc:fd:c4:54:04:04:f0:e8:63:88:e5:d7:de:a8:eb: 3a:65:e5:56:f9:0b:b6:f4:25:84:c5:54:79:0c:4a:2e:e6:a0: 01:7a:46:07:7f:f0:f5:58:07:64:09:ec:7c:c7:30:dd:65:1e: 7f:f1:54:26:d3:7d:cd:f9:08:1d:ce:15:c4:d6:9f:ab:f3:4c: 4c:54:92:3c:0e:01:f6:70:04:6a:fa:04:dd:d9:5a:84:2d:43: dd:d8:5b:e4:c5:83:7c:3d:75:8f:f6:e2:aa:1a:92:15:cf:64: aa:ab:7e:25:a4:96:44:ee:15:49:aa:b4:48:72:19:f1:b9:cb: 68:9f:bc:f2:e4:9d:a3:25:ce:c9:53:22:1e:1b:92:ad:bb:9e: a5:55:77:4a:ab:32:20:31:36:78:a2:a3:c4:c4:40:7e:3d:50: 59:8d:a4:79:52:8e:55:b4:71:7f:8c:3d:e5:c3:9f:ee:6b:88: 06:cb:ca:ae:69:3e:99:c3:c5:3a:24:01:c9:43:59:a3:ff:30: 22:54:67:bd:4c:83:a6:0a:6c:ba:bf:11:fd:bf:26:35:a6:75: 52:ff:e6:f5:0e:48:ac:61:9d:fa:e1:cc:ec:65:a5:0a:3d:88: 5c:14:9c:1d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDAMc4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTExMTA2MjE0MloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjkxMmQ1ZjYtNGJjYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFVn6/A6Zau1Vk+xb628z9eU49JnLoO4JRIOnncKj5Esw6S86Xy1iLzLmBR YttEITWjzoBgTPJFB5dd3+97L0gq2MWchJJgVFAhXkIF2AhS7k29H1IZYbwrofFR EYh+64V2iWxst5J774ojhMrArzylXQi2dogLVNSxejHVEaf+c5xUZ5n/Fhi1g3jt rhdxZNZDhGy8BLU8eoyAt7Lip4+3oNu+hB0v7Q59I60Yv1cqKIXXsbJDGgwUTxRN QHHx6Fu+HJfhKvYm6TYpgILJE9HWaYhK4zgsEXMc4Nd6A7d0DG27qHHPH5KJSzmv RDbrn87S9B9arhVzREpZHLtum0ECAwEAAaOCApswggKXMB0GA1UdDgQWBBQS6bgO DXbUPf0H5h04c/u5g0OKsTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI0NzdDQzcw QkVDMTExRjBBMkYzMjc2QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQCK/tQAwQCZ/6AMA0GCSqGSIb3DQEBCwUAA4IBAQBq6Bmw ISMFkYbnboEljbKuRDrsHwXM/cRUBATw6GOI5dfeqOs6ZeVW+Qu29CWExVR5DEou 5qABekYHf/D1WAdkCex8xzDdZR5/8VQm033N+QgdzhXE1p+r80xMVJI8DgH2cARq +gTd2VqELUPd2FvkxYN8PXWP9uKqGpIVz2Sqq34lpJZE7hVJqrRIchnxucton7zy 5J2jJc7JUyIeG5Ktu56lVXdKqzIgMTZ4oqPExEB+PVBZjaR5Uo5VtHF/jD3lw5/u a4gGy8quaT6Zw8U6JAHJQ1mj/zAiVGe9TIOmCmy6vxH9vyY1pnVS/+b1DkisYZ36 4czsZaUKPYhcFJwd -----END CERTIFICATE-----Generated at Fri Dec 5 17:19:23 2025 by rpki-client