This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C96C54D4650E11EFAECF9A74C4F9AE02.roa File: C96C54D4650E11EFAECF9A74C4F9AE02.roa (raw, json) Hash identifier: OA92urnaccVCGYQB/o9PA1KKYsNpAhs4PC1O0HlM6KM= Subject key identifier: 51:B4:93:45:78:8F:9D:A2:42:A4:61:5E:34:8D:E4:F5:5C:7A:30:9E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C777 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C96C54D4650E11EFAECF9A74C4F9AE02.roa Signing time: Fri 14 Nov 2025 09:06:03 +0000 ROA not before: Fri 14 Nov 2025 09:06:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133706 IP address blocks: 43.228.220.0/22 maxlen: 24 45.125.60.0/22 maxlen: 24 103.47.236.0/22 maxlen: 24 103.215.248.0/22 maxlen: 24 157.119.124.0/22 maxlen: 24 2407:8ac0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 12:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51063 (0xc777) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 14 09:06:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6916f0fb-2eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:03:a6:b4:58:c2:78:60:14:67:f2:8d:1c:ce: 32:39:89:38:f9:f7:63:d5:a7:10:9e:20:a4:0d:9a: b8:38:c5:a5:eb:e2:70:98:d1:50:0a:25:66:ae:d8: 88:25:96:00:fe:03:1e:49:25:38:dc:6a:f7:17:20: 0d:0e:83:d6:cb:ec:cb:2f:8a:08:ed:69:3a:3c:e2: 2f:d7:37:38:34:4a:ef:13:44:a7:83:2c:12:1e:8e: 3a:df:97:d3:77:bc:ad:01:76:3c:05:29:bd:cb:36: 0f:b4:f8:c0:f4:f4:df:fa:87:68:7a:58:0d:03:12: 98:18:91:80:df:c1:64:34:d5:8f:c5:85:89:4a:ef: 3c:38:7f:ce:46:ba:d4:0e:8a:3b:ae:3c:47:eb:33: 29:e4:23:de:25:15:e5:48:90:ee:03:cd:4e:3a:be: e8:e2:c6:dc:ed:78:19:c5:a1:6b:e3:53:2c:fd:1b: a4:3a:15:c1:55:d8:6a:74:ca:68:8a:42:d8:86:26: bd:96:3a:02:64:f5:34:8a:27:b0:24:7e:1c:ce:84: 48:be:b0:c4:99:85:76:53:de:5c:3e:b1:c1:90:77: ac:12:cc:6c:52:d5:90:2a:88:e5:d6:54:74:8b:86: 36:b8:70:af:30:76:52:4c:6b:d1:6d:a9:90:b8:01: 1d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B4:93:45:78:8F:9D:A2:42:A4:61:5E:34:8D:E4:F5:5C:7A:30:9E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C96C54D4650E11EFAECF9A74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.228.220.0/22 45.125.60.0/22 103.47.236.0/22 103.215.248.0/22 157.119.124.0/22 IPv6: 2407:8ac0::/32 Signature Algorithm: sha256WithRSAEncryption 9d:30:f6:9d:4f:a0:46:f5:f6:bf:ed:e8:60:8a:bc:cd:de:e7: 42:a4:48:5a:8b:b1:64:de:65:de:7a:22:0b:3e:85:d1:cb:65: 89:e4:4b:ce:e6:ec:50:bf:1e:e0:4e:7a:36:ff:74:6d:db:e2: fe:d4:ba:15:fc:b7:dc:f5:92:2d:fb:20:ee:c1:d2:f3:a0:2e: 2d:38:2e:fa:11:a9:f7:2a:84:c0:6b:9c:fa:a7:72:c6:d1:26: ec:3d:67:68:52:0c:fc:0e:36:ec:7d:2b:01:58:96:4f:39:17: 93:05:1c:ee:ab:18:b1:8a:73:73:d0:06:18:c3:44:0a:84:bc: 02:76:0a:98:3d:f1:a4:92:c5:3d:f6:69:4a:62:89:75:5e:9f: 63:30:c5:af:dd:55:e6:29:a1:99:46:44:03:5d:77:54:94:5b: ca:76:b4:1c:1f:a1:90:51:02:2a:48:ab:4a:6f:5c:f4:54:a9: ec:79:cb:a0:82:55:fb:f6:01:fe:97:80:f4:7e:2d:ae:87:cb: ca:a5:80:22:41:3e:30:fd:62:11:4b:93:ae:ae:79:91:c2:35: 6f:d0:ad:ae:9f:9d:df:18:b2:85:fc:60:bd:65:4f:97:12:e3: 92:54:34:e8:81:52:39:d6:6e:81:36:cb:60:2c:64:27:bd:30: e5:4c:68:39 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgIDAMd3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTExNDA5MDYwM1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjkxNmYwZmItMmVhYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO4DprRYwnhgFGfyjRzOMjmJOPn3Y9WnEJ4gpA2auDjFpevicJjRUAolZq7Y iCWWAP4DHkklONxq9xcgDQ6D1svsyy+KCO1pOjziL9c3ODRK7xNEp4MsEh6OOt+X 03e8rQF2PAUpvcs2D7T4wPT03/qHaHpYDQMSmBiRgN/BZDTVj8WFiUrvPDh/zka6 1A6KO648R+szKeQj3iUV5UiQ7gPNTjq+6OLG3O14GcWha+NTLP0bpDoVwVXYanTK aIpC2IYmvZY6AmT1NIonsCR+HM6ESL6wxJmFdlPeXD6xwZB3rBLMbFLVkCqI5dZU dIuGNrhwrzB2Ukxr0W2pkLgBHUsCAwEAAaOCArwwggK4MB0GA1UdDgQWBBRRtJNF eI+dokKkYV40jeT1XHownjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M5NkM1NEQ0 NjUwRTExRUZBRUNGOUE3NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEYGCCsGAQUFBwEHAQH/ BDcwNTAkBAIAATAeAwQCK+TcAwQCLX08AwQCZy/sAwQCZ9f4AwQCnXd8MA0EAgAC MAcDBQAkB4rAMA0GCSqGSIb3DQEBCwUAA4IBAQCdMPadT6BG9fa/7ehgirzN3udC pEhai7Fk3mXeeiILPoXRy2WJ5EvO5uxQvx7gTno2/3Rt2+L+1LoV/Lfc9ZIt+yDu wdLzoC4tOC76Ean3KoTAa5z6p3LG0SbsPWdoUgz8DjbsfSsBWJZPOReTBRzuqxix inNz0AYYw0QKhLwCdgqYPfGkksU99mlKYol1Xp9jMMWv3VXmKaGZRkQDXXdUlFvK drQcH6GQUQIqSKtKb1z0VKnsecugglX79gH+l4D0fi2uh8vKpYAiQT4w/WIRS5Ou rnmRwjVv0K2un53fGLKF/GC9ZU+XEuOSVDTogVI51m6BNstgLGQnvTDlTGg5 -----END CERTIFICATE-----Generated at Fri Dec 5 17:15:19 2025 by rpki-client