This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/F11BA4EA75B811EDA34F9687C4F9AE02.roa File: F11BA4EA75B811EDA34F9687C4F9AE02.roa (raw, json) Hash identifier: Dx7BujyDWBTPK8FDZBcp5GgmogMZnafYGexXcGahR58= Subject key identifier: C3:EC:56:CE:01:4F:E1:BE:FE:34:5D:40:9A:E4:A2:81:EC:23:95:44 Certificate issuer: /CN=A91E8CB0/serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Certificate serial: 0248 Authority key identifier: AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/F11BA4EA75B811EDA34F9687C4F9AE02.roa Signing time: Sun 21 Dec 2025 01:22:22 +0000 ROA not before: Sun 21 Dec 2025 01:22:22 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 133876 IP address blocks: 103.44.148.0/24 maxlen: 24 203.16.200.0/24 maxlen: 24 203.16.201.0/24 maxlen: 24 203.16.202.0/24 maxlen: 24 203.16.203.0/24 maxlen: 24 2400:bf20::/36 maxlen: 36 2400:bf20:1000::/36 maxlen: 36 2400:bf20:2000::/36 maxlen: 36 2400:bf20:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8CB0, serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Validity Not Before: Dec 21 01:22:22 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69474bce-cf6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:03:3b:5a:90:0e:7e:67:40:16:41:6f:a8:4a: 72:38:f1:49:31:49:66:99:90:de:e0:77:91:f4:ab: c3:7a:e9:c8:0a:fa:1d:80:18:b3:19:1a:7e:75:f1: 93:aa:c8:d9:c3:12:16:ec:35:51:60:0e:3c:88:4d: eb:b7:64:ec:48:30:b0:83:43:a4:47:04:9c:00:59: d1:30:af:ed:88:87:9b:28:ab:30:65:4d:4b:eb:82: 70:c7:14:9f:07:ee:14:3e:24:63:e3:92:48:a4:3a: 38:dd:88:94:50:f6:ee:ad:e9:dc:e0:7e:32:48:a9: fb:3a:92:b6:d2:f0:6d:ba:35:32:34:f0:fa:c3:ea: 78:fc:b4:b9:04:2c:3e:ef:e8:20:fd:dc:a4:e5:0f: 1d:ff:f7:05:58:6c:48:60:ea:95:a5:86:0c:74:93: 4c:3f:b8:7e:2b:0b:81:fd:a1:20:4b:4c:6b:4e:c7: a9:74:a2:f2:fa:10:de:e4:aa:52:c7:d9:a4:25:c6: 18:b1:78:77:c3:5a:99:3d:c2:3a:8e:72:59:71:13: 60:72:3f:f6:a7:90:29:b4:78:c2:94:a4:f6:b5:88: dc:db:05:0e:63:8c:5f:6b:74:9e:96:bd:53:88:f8: 42:90:2c:db:a7:f5:24:66:a1:88:cf:ce:c4:09:ba: 47:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EC:56:CE:01:4F:E1:BE:FE:34:5D:40:9A:E4:A2:81:EC:23:95:44 X509v3 Authority Key Identifier: keyid:AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/F11BA4EA75B811EDA34F9687C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.44.148.0/24 203.16.200.0/22 IPv6: 2400:bf20::/34 Signature Algorithm: sha256WithRSAEncryption 70:8e:46:ef:5b:0f:59:94:08:67:82:15:14:1e:7d:49:b9:f9: 90:0d:40:3e:4e:9c:98:4b:39:9a:3f:cf:cf:a4:94:da:67:9b: 7a:d1:72:8b:ef:8b:d0:8d:00:2a:92:32:67:2d:21:a0:4d:ed: fc:78:67:fc:55:8e:4a:cb:d4:d6:3f:2e:f8:e7:fb:e2:ed:65: f3:00:a0:8e:4b:af:21:c8:93:ea:a8:14:5f:d0:51:a6:25:89: 6a:80:4e:f6:8a:57:0f:02:e8:62:ec:3f:61:58:41:b5:5e:76: 96:b2:c8:9c:da:3a:4f:55:b5:cc:59:1e:5d:c6:74:06:43:6f: 9a:16:d5:c2:56:7b:54:1c:ea:c6:aa:b6:4e:cd:95:2e:5b:ba: ce:c3:58:80:d7:51:d9:4c:49:7b:40:41:70:ff:d7:4f:be:8a: 05:94:29:19:0d:f3:bb:56:09:b3:01:9a:29:f4:3c:1d:93:95: 6f:58:54:04:58:b1:51:5b:b0:81:1e:bf:4e:fd:8e:df:b6:a4: 5c:14:6d:85:d2:49:f3:7b:f6:d9:39:28:da:2c:73:d1:47:31: 12:72:8b:22:fe:19:c8:d7:8f:2d:96:63:8c:58:22:e8:47:d1: bf:7c:a8:db:02:7d:66:ad:11:1b:74:8c:8d:35:06:3b:d2:d8: 91:cb:ec:9e -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RThDQjAxMTAvBgNVBAUTKEFGQTZEN0JEQzM3QjY0QzhGMTQ2RUVBNjE3MzZEM0Q0 NTE3OEZCMzcwHhcNMjUxMjIxMDEyMjIyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ3NGJjZS1jZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AM7WpAOfmdAFkFvqEpyOPFJMUlmmZDe4HeR9KvDeunICvodgBizGRp+dfGT qsjZwxIW7DVRYA48iE3rt2TsSDCwg0OkRwScAFnRMK/tiIebKKswZU1L64JwxxSf B+4UPiRj45JIpDo43YiUUPburenc4H4ySKn7OpK20vBtujUyNPD6w+p4/LS5BCw+ 7+gg/dyk5Q8d//cFWGxIYOqVpYYMdJNMP7h+KwuB/aEgS0xrTsepdKLy+hDe5KpS x9mkJcYYsXh3w1qZPcI6jnJZcRNgcj/2p5AptHjClKT2tYjc2wUOY4xfa3Selr1T iPhCkCzbp/UkZqGIz87ECbpHWwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFMPsVs4B T+G+/jRdQJrkooHsI5VEMB8GA1UdIwQYMBaAFK+m173De2TI8Ubuphc209RRePs3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOENCMC8zNzcwMTI0RTZC QzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pNanhSdTZtRnpiVDFGRjQt emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I2Ylh2Y043Wk1qeFJ1Nm1GemJUMUZGNC16Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThDQjAvMzc3MDEyNEU2QkM1MTFFRDg2NkE3RDVFQzRGOUFFMDIvRjExQkE0RUE3 NUI4MTFFREEzNEY5Njg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMBIEAgABMAwDBABnLJQDBALLEMgwDgQCAAIwCAMGBiQAvyAAMA0GCSqGSIb3 DQEBCwUAA4IBAQBwjkbvWw9ZlAhnghUUHn1JufmQDUA+TpyYSzmaP8/PpJTaZ5t6 0XKL74vQjQAqkjJnLSGgTe38eGf8VY5Ky9TWPy745/vi7WXzAKCOS68hyJPqqBRf 0FGmJYlqgE72ilcPAuhi7D9hWEG1XnaWssic2jpPVbXMWR5dxnQGQ2+aFtXCVntU HOrGqrZOzZUuW7rOw1iA11HZTEl7QEFw/9dPvooFlCkZDfO7VgmzAZop9Dwdk5Vv WFQEWLFRW7CBHr9O/Y7ftqRcFG2F0knze/bZOSjaLHPRRzEScosi/hnI148tlmOM WCLoR9G/fKjbAn1mrREbdIyNNQY70tiRy+ye -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:53 2025 by rpki-client