This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/B38B0F188C8511EF8E80211BC4F9AE02.roa File: B38B0F188C8511EF8E80211BC4F9AE02.roa (raw, json) Hash identifier: PtbLVUOnJNkoi8KvQTAiyARz3OXKFtHD7Am5CVafI/U= Subject key identifier: BA:54:E7:F7:19:19:97:4B:BE:D8:96:54:B0:1B:28:10:76:2F:9E:A3 Certificate issuer: /CN=A9117257/serialNumber=E9B600C9E6DD8CEEC972195D6349C89838F745BE Certificate serial: 01DD Authority key identifier: E9:B6:00:C9:E6:DD:8C:EE:C9:72:19:5D:63:49:C8:98:38:F7:45:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bYAyebdjO7JchldY0nImDj3Rb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/B38B0F188C8511EF8E80211BC4F9AE02.roa Signing time: Wed 19 Nov 2025 01:48:43 +0000 ROA not before: Wed 19 Nov 2025 01:48:43 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 152918 IP address blocks: 103.122.244.0/24 maxlen: 24 103.122.245.0/24 maxlen: 24 103.122.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.crl rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bYAyebdjO7JchldY0nImDj3Rb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117257, serialNumber=E9B600C9E6DD8CEEC972195D6349C89838F745BE Validity Not Before: Nov 19 01:48:43 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=691d21fb-e844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:07:2f:0f:18:91:0a:44:8b:2f:d4:70:91:e0: e2:40:ca:8e:8f:43:59:81:c1:56:a1:70:2b:3e:28: 0b:95:55:ac:71:62:8e:9b:ee:54:e8:93:cd:f7:6c: f3:31:f5:bf:e5:b2:80:8f:14:fc:6e:7f:23:26:5e: 0d:05:e5:c3:59:0a:ca:f6:23:99:1b:34:a5:b9:8d: aa:b2:d1:7c:33:48:12:92:d6:16:b2:69:e5:81:d2: 31:48:ae:8f:9d:35:93:c0:df:2e:5f:ea:af:6f:b0: 2f:02:61:6d:44:28:8c:80:e4:15:f1:9d:26:a5:56: 91:69:37:fd:7c:df:ca:38:15:d0:d6:e2:be:72:82: e3:9c:fd:bf:ee:65:61:47:85:52:ec:4a:90:b9:a1: c4:3e:4f:2f:0f:32:f9:c8:ea:b4:ba:88:7e:b2:3e: 66:2b:29:e7:76:b9:d7:48:8a:03:be:4a:ea:2e:5a: 1a:7e:3b:16:c7:cc:73:4a:70:d3:23:4e:f0:d6:66: d0:29:c9:67:de:98:13:cc:e7:8f:86:94:6c:b2:2f: c7:b2:d5:6c:ef:aa:26:61:00:9b:06:c7:96:ae:1e: 2d:f6:20:df:38:64:44:0a:7a:c4:47:bb:ce:6a:f6: 9b:ed:34:be:47:70:2e:d1:6b:75:2a:44:39:bc:23: bf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:54:E7:F7:19:19:97:4B:BE:D8:96:54:B0:1B:28:10:76:2F:9E:A3 X509v3 Authority Key Identifier: keyid:E9:B6:00:C9:E6:DD:8C:EE:C9:72:19:5D:63:49:C8:98:38:F7:45:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bYAyebdjO7JchldY0nImDj3Rb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/B38B0F188C8511EF8E80211BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.122.244.0/23 103.122.247.0/24 Signature Algorithm: sha256WithRSAEncryption b4:f6:15:1e:f2:7b:d8:42:8e:aa:38:20:fd:31:8c:ec:47:65: 48:df:cd:a1:17:00:d7:0d:d6:69:01:2f:91:3a:32:ec:bc:be: 94:63:be:be:59:eb:00:d5:8c:a3:da:f6:ec:f7:7c:8f:dd:0e: 56:90:21:c3:25:99:d6:9e:26:fd:90:5a:45:d0:bd:5d:0e:29: 6a:61:4a:3b:00:6f:53:b3:f4:e3:93:f7:0b:b6:50:e4:ec:61: d2:12:87:05:8a:66:02:8f:75:72:d3:37:0d:ab:9b:93:e6:9d: d7:56:fa:3d:87:fa:9d:94:2c:f3:d5:20:f4:0c:6f:08:10:06: 39:81:7e:a7:14:8a:d7:6c:ec:e5:08:91:f1:b5:5c:1e:4c:ea: 21:2c:d7:3a:6a:a3:61:a7:4e:04:f9:4e:00:c3:ab:82:a6:78: d7:5b:f8:66:95:9f:e1:55:67:37:7f:60:93:e3:a2:48:3b:07: 63:d9:d9:cd:44:e5:1c:87:d9:3c:56:bd:09:10:4e:fb:9f:93: 89:6b:2c:24:85:07:3c:c4:93:3d:91:44:64:4e:fb:bc:07:95: 75:f1:b7:93:42:0b:a4:e6:87:7b:f4:af:85:97:93:a7:06:15: 5e:2d:09:20:5c:fd:51:3e:eb:f5:a3:03:e0:8c:41:99:98:7b: e9:27:cc:16 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTcyNTcxMTAvBgNVBAUTKEU5QjYwMEM5RTZERDhDRUVDOTcyMTk1RDYzNDlDODk4 MzhGNzQ1QkUwHhcNMjUxMTE5MDE0ODQzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFkMjFmYi1lODQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowcvDxiRCkSLL9RwkeDiQMqOj0NZgcFWoXArPigLlVWscWKOm+5U6JPN92zz MfW/5bKAjxT8bn8jJl4NBeXDWQrK9iOZGzSluY2qstF8M0gSktYWsmnlgdIxSK6P nTWTwN8uX+qvb7AvAmFtRCiMgOQV8Z0mpVaRaTf9fN/KOBXQ1uK+coLjnP2/7mVh R4VS7EqQuaHEPk8vDzL5yOq0uoh+sj5mKynndrnXSIoDvkrqLloafjsWx8xzSnDT I07w1mbQKcln3pgTzOePhpRssi/HstVs76omYQCbBseWrh4t9iDfOGRECnrER7vO avab7TS+R3Au0Wt1KkQ5vCO/cwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLpU5/cZ GZdLvtiWVLAbKBB2L56jMB8GA1UdIwQYMBaAFOm2AMnm3YzuyXIZXWNJyJg490W+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzI1Ny85NEY0OTdFRTFF ODIxMUVFOTBCNjI2M0JDNEY5QUUwMi82YllBeWViZGpPN0pjaGxkWTBuSW1EajNS YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZiWUF5ZWJkak83SmNobGRZMG5JbURqM1JiNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTcyNTcvOTRGNDk3RUUxRTgyMTFFRTkwQjYyNjNCQzRGOUFFMDIvQjM4QjBGMTg4 Qzg1MTFFRjhFODAyMTFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnevQDBABnevcwDQYJKoZIhvcNAQELBQADggEBALT2FR7y e9hCjqo4IP0xjOxHZUjfzaEXANcN1mkBL5E6Muy8vpRjvr5Z6wDVjKPa9uz3fI/d DlaQIcMlmdaeJv2QWkXQvV0OKWphSjsAb1Oz9OOT9wu2UOTsYdIShwWKZgKPdXLT Nw2rm5PmnddW+j2H+p2ULPPVIPQMbwgQBjmBfqcUitds7OUIkfG1XB5M6iEs1zpq o2GnTgT5TgDDq4KmeNdb+GaVn+FVZzd/YJPjokg7B2PZ2c1E5RyH2TxWvQkQTvuf k4lrLCSFBzzEkz2RRGRO+7wHlXXxt5NCC6Tmh3v0r4WXk6cGFV4tCSBc/VE+6/Wj A+CMQZmYe+knzBY= -----END CERTIFICATE-----Generated at Sat Dec 6 19:17:22 2025 by rpki-client