This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/691FDAFCCAA611F08C3DB138C4F9AE02.roa File: 691FDAFCCAA611F08C3DB138C4F9AE02.roa (raw, json) Hash identifier: xO99yVEjBuD5FjXcHYzzdntNRrZEry48anAysUywTEw= Subject key identifier: D1:98:87:EE:24:23:F9:AC:45:5C:7F:68:CD:70:AF:62:8D:5B:0E:8B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C838 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/691FDAFCCAA611F08C3DB138C4F9AE02.roa Signing time: Wed 26 Nov 2025 09:00:52 +0000 ROA not before: Wed 26 Nov 2025 09:00:52 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150654 IP address blocks: 103.142.198.0/24 maxlen: 24 103.155.147.0/24 maxlen: 24 103.168.173.0/24 maxlen: 24 103.181.150.0/24 maxlen: 24 175.111.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 12:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51256 (0xc838) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 26 09:00:52 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6926c1c4-3346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c3:2b:70:ab:d4:79:05:ce:34:c5:67:01:44: 6a:c3:f1:1a:07:e3:fd:d9:93:33:45:1b:99:04:9e: da:dc:cf:61:85:bb:40:99:4f:ea:f9:2a:a0:dc:7b: 5a:c0:76:49:8f:1a:dc:80:b5:d9:72:1c:68:ec:e6: cc:62:ea:e9:4d:9f:71:ea:de:2f:f7:89:ff:0f:85: 6a:67:a4:70:9d:af:9f:05:4a:47:db:d5:9e:37:87: f0:be:db:c3:5a:26:97:25:db:3e:df:b0:86:31:21: 4f:cb:f9:36:99:17:c4:34:40:94:af:30:3a:fd:99: 11:12:83:fb:0e:f3:14:3c:0f:3d:26:d2:d0:18:75: 5a:fd:da:1f:ce:9d:01:b5:2e:e5:45:27:06:a7:1d: a3:a4:53:69:d9:d3:e9:72:35:7c:e8:b0:37:98:a5: a1:1c:55:d9:b6:80:fa:45:14:fc:85:83:c3:49:33: 0e:45:24:6b:33:bf:53:9f:94:7c:4f:90:57:6b:cf: 33:3d:cc:d8:5f:4a:b3:7c:45:d7:9c:0a:7e:f6:1a: 29:59:7a:90:66:a4:f0:50:98:14:62:97:f0:d2:c7: c4:5d:91:97:a0:dd:0c:58:68:a4:38:6b:a5:d9:16: 22:36:17:6c:e2:ff:5c:7f:7e:f6:48:8a:52:9b:09: 9d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:98:87:EE:24:23:F9:AC:45:5C:7F:68:CD:70:AF:62:8D:5B:0E:8B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/691FDAFCCAA611F08C3DB138C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.198.0/24 103.155.147.0/24 103.168.173.0/24 103.181.150.0/24 175.111.97.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:dd:e3:94:d0:ee:93:4c:8e:44:81:60:ea:6c:3c:90:13:1e: 67:d3:cf:d1:c0:7e:7d:57:4d:c0:fb:45:41:03:fc:0e:38:2b: cd:ea:6a:86:88:3d:82:c2:f8:c9:c6:23:e4:f1:64:8a:e4:34: df:86:b6:43:a0:50:ef:38:06:3b:de:ab:ba:3f:a9:4b:f6:24: 2b:93:f5:f0:5f:9d:f4:0f:33:59:62:2a:48:b8:da:dd:d4:3b: 34:b7:48:b2:1f:e2:49:00:04:82:80:2a:02:2b:2b:83:4f:65: 17:5c:d7:02:86:7d:24:0c:cf:a1:62:ad:22:ee:72:c0:8c:6a: 27:a7:a4:44:5c:89:e8:ff:c1:7a:70:e8:de:9c:49:45:d7:36: f0:80:5b:71:58:1f:a8:e9:9c:e0:e5:cf:1a:a5:2f:3f:5c:2e: 8c:b3:b4:86:a0:bc:50:19:ec:4f:cf:3d:f3:08:92:ee:17:f1: 64:b6:36:cb:5a:ee:35:90:1c:9f:21:28:05:22:e3:fd:5a:6d: ab:72:da:84:d1:a8:67:93:6d:cf:d2:79:46:8b:7d:da:1d:c8: f3:7a:ac:f4:0a:4d:a1:c3:56:24:ea:28:c6:5b:e8:fb:f8:ef: ce:e5:b3:8f:79:af:23:66:70:64:51:9c:a9:b5:37:fc:29:dc: a5:ad:9c:a4 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIDAMg4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTEyNjA5MDA1MloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjkyNmMxYzQtMzM0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALjDK3Cr1HkFzjTFZwFEasPxGgfj/dmTM0UbmQSe2tzPYYW7QJlP6vkqoNx7 WsB2SY8a3IC12XIcaOzmzGLq6U2fcereL/eJ/w+FamekcJ2vnwVKR9vVnjeH8L7b w1omlyXbPt+whjEhT8v5NpkXxDRAlK8wOv2ZERKD+w7zFDwPPSbS0Bh1Wv3aH86d AbUu5UUnBqcdo6RTadnT6XI1fOiwN5iloRxV2baA+kUU/IWDw0kzDkUkazO/U5+U fE+QV2vPMz3M2F9Ks3xF15wKfvYaKVl6kGak8FCYFGKX8NLHxF2Rl6DdDFhopDhr pdkWIjYXbOL/XH9+9kiKUpsJnasCAwEAAaOCAq0wggKpMB0GA1UdDgQWBBTRmIfu JCP5rEVcf2jNcK9ijVsOizAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzY5MUZEQUZD Q0FBNjExRjA4QzNEQjEzOEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDcGCCsGAQUFBwEHAQH/ BCgwJjAkBAIAATAeAwQAZ47GAwQAZ5uTAwQAZ6itAwQAZ7WWAwQAr29hMA0GCSqG SIb3DQEBCwUAA4IBAQAq3eOU0O6TTI5EgWDqbDyQEx5n08/RwH59V03A+0VBA/wO OCvN6mqGiD2CwvjJxiPk8WSK5DTfhrZDoFDvOAY73qu6P6lL9iQrk/XwX530DzNZ YipIuNrd1Ds0t0iyH+JJAASCgCoCKyuDT2UXXNcChn0kDM+hYq0i7nLAjGonp6RE XIno/8F6cOjenElF1zbwgFtxWB+o6Zzg5c8apS8/XC6Ms7SGoLxQGexPzz3zCJLu F/FktjbLWu41kByfISgFIuP9Wm2rctqE0ahnk23P0nlGi33aHcjzeqz0Ck2hw1Yk 6ijGW+j7+O/O5bOPea8jZnBkUZyptTf8KdylrZyk -----END CERTIFICATE-----Generated at Fri Dec 5 17:19:24 2025 by rpki-client