This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89C89814D01B11F092317131C4F9AE02.roa File: 89C89814D01B11F092317131C4F9AE02.roa (raw, json) Hash identifier: CwTPr63rncfNElDnRKdIye+KJPseik3N5LNoWYargfg= Subject key identifier: 37:0F:6B:31:94:1F:93:FE:0E:34:50:56:38:59:C4:36:D5:CC:C8:97 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C96B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89C89814D01B11F092317131C4F9AE02.roa Signing time: Wed 03 Dec 2025 07:41:54 +0000 ROA not before: Wed 03 Dec 2025 07:41:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150593 IP address blocks: 103.17.12.0/23 maxlen: 24 103.85.180.0/23 maxlen: 24 103.137.48.0/22 maxlen: 24 103.157.129.0/24 maxlen: 24 103.182.113.0/24 maxlen: 24 2001:df2:7240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 12:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51563 (0xc96b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 3 07:41:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=692fe9c2-21b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1e:aa:dc:8d:94:a6:34:63:64:a7:8b:6c:41: aa:4d:d1:35:c6:a1:30:73:17:af:4f:f8:cd:7d:44: f5:e4:0e:ae:2d:8c:de:04:dc:d8:04:ea:ce:b0:f4: 6e:78:4e:50:8a:04:8e:bd:fc:f4:54:f1:6b:62:63: 75:da:65:65:ad:1a:6f:8a:85:fa:93:a2:8a:84:04: 41:bd:f8:7d:97:c4:83:49:a8:08:60:56:5c:f3:0e: 69:59:a0:db:f6:df:5d:fb:5a:76:67:af:78:05:28: 0c:df:d6:81:e9:90:db:4c:ce:7e:83:7f:88:ad:56: d4:7c:4e:7f:fb:99:9c:36:3b:06:63:7f:02:b4:d9: c3:a2:55:07:d4:d5:7c:a8:95:80:29:23:12:25:43: 0e:05:d3:de:e9:18:44:17:45:85:b1:df:9e:72:84: 84:a2:40:1f:0e:1e:24:9c:a7:31:fa:51:64:d8:e3: 87:b7:3f:cb:7c:97:e0:e6:ba:33:1e:49:58:4f:a7: 26:bc:cb:0e:ce:3e:7e:c9:bf:7f:6d:c6:f1:2b:bb: 38:22:59:5f:67:a3:5c:f2:d6:fa:1d:dd:3c:56:bf: 88:0d:5d:bd:41:cd:eb:14:3f:c7:be:85:16:45:08: 34:f0:89:40:a8:ba:97:80:15:2a:ba:4e:d2:2b:88: e2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0F:6B:31:94:1F:93:FE:0E:34:50:56:38:59:C4:36:D5:CC:C8:97 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89C89814D01B11F092317131C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.17.12.0/23 103.85.180.0/23 103.137.48.0/22 103.157.129.0/24 103.182.113.0/24 IPv6: 2001:df2:7240::/48 Signature Algorithm: sha256WithRSAEncryption 53:e4:3f:f4:c7:ec:50:d5:ef:01:c4:e1:1e:94:80:7b:da:e5: 45:6b:08:d8:c9:d1:18:97:89:9d:b5:d8:ad:0f:b8:41:79:2d: 2f:97:28:ff:68:f3:5a:62:1a:99:49:df:9a:26:fa:3c:bb:30: 5e:1a:56:e5:53:ae:8a:95:31:90:a4:7f:43:d0:c7:36:c3:09: 24:7d:bd:0d:12:1d:6f:1b:bf:69:69:3e:41:b3:21:0e:dc:a9: 4e:f6:d0:9b:d8:e9:f3:8c:26:c7:f4:13:5a:6d:ab:ae:72:7e: ae:c1:5b:ae:3d:19:85:d2:93:04:38:ed:06:ec:ee:bd:63:65: 38:3e:be:93:b1:ac:6f:e6:4b:75:f5:d4:06:7e:a8:73:a2:19: 22:46:61:b2:6e:b6:47:ab:cb:9b:d0:b2:02:54:15:98:de:11: fc:17:6e:44:79:f2:21:30:24:91:b1:2d:8a:5b:ed:64:07:9a: 99:cd:6a:92:54:71:63:7d:ce:f9:4c:c8:50:64:c7:bf:33:ef: 4b:a6:18:c8:ee:b1:9d:fe:01:4f:0c:fa:79:7a:59:e5:a2:58: b1:57:82:75:b0:11:64:76:1d:00:50:dc:09:ed:a5:2b:a7:49: ab:6b:ef:f9:06:42:2e:fb:8c:00:44:ea:da:7d:88:31:f4:9e: 03:f4:76:01 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIDAMlrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTIwMzA3NDE1NFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjkyZmU5YzItMjFiNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOUeqtyNlKY0Y2Sni2xBqk3RNcahMHMXr0/4zX1E9eQOri2M3gTc2ATqzrD0 bnhOUIoEjr389FTxa2JjddplZa0ab4qF+pOiioQEQb34fZfEg0moCGBWXPMOaVmg 2/bfXftadmeveAUoDN/WgemQ20zOfoN/iK1W1HxOf/uZnDY7BmN/ArTZw6JVB9TV fKiVgCkjEiVDDgXT3ukYRBdFhbHfnnKEhKJAHw4eJJynMfpRZNjjh7c/y3yX4Oa6 Mx5JWE+nJrzLDs4+fsm/f23G8Su7OCJZX2ejXPLW+h3dPFa/iA1dvUHN6xQ/x76F FkUINPCJQKi6l4AVKrpO0iuI4nkCAwEAAaOCAr4wggK6MB0GA1UdDgQWBBQ3D2sx lB+T/g40UFY4WcQ21czIlzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg5Qzg5ODE0 RDAxQjExRjA5MjMxNzEzMUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEgGCCsGAQUFBwEHAQH/ BDkwNzAkBAIAATAeAwQBZxEMAwQBZ1W0AwQCZ4kwAwQAZ52BAwQAZ7ZxMA8EAgAC MAkDBwAgAQ3yckAwDQYJKoZIhvcNAQELBQADggEBAFPkP/TH7FDV7wHE4R6UgHva 5UVrCNjJ0RiXiZ212K0PuEF5LS+XKP9o81piGplJ35om+jy7MF4aVuVTroqVMZCk f0PQxzbDCSR9vQ0SHW8bv2lpPkGzIQ7cqU720JvY6fOMJsf0E1ptq65yfq7BW649 GYXSkwQ47Qbs7r1jZTg+vpOxrG/mS3X11AZ+qHOiGSJGYbJutkery5vQsgJUFZje EfwXbkR58iEwJJGxLYpb7WQHmpnNapJUcWN9zvlMyFBkx78z70umGMjusZ3+AU8M +nl6WeWiWLFXgnWwEWR2HQBQ3AntpSunSatr7/kGQi77jABE6tp9iDH0ngP0dgE= -----END CERTIFICATE-----Generated at Fri Dec 5 17:19:22 2025 by rpki-client