This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/A4955B14A91B11EA924D2D7BC4F9AE02.roa File: A4955B14A91B11EA924D2D7BC4F9AE02.roa (raw, json) Hash identifier: XPO15oTs+WAIBCcM3yp4q1ewXiF0XMQ+a0rnB1pu/zg= Subject key identifier: 68:0B:8D:17:CC:95:98:8E:81:73:A3:66:D5:02:13:16:7C:D2:5E:2F Certificate issuer: /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Certificate serial: 0975 Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/A4955B14A91B11EA924D2D7BC4F9AE02.roa Signing time: Wed 31 Dec 2025 20:16:39 +0000 ROA not before: Wed 31 Dec 2025 20:16:39 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 140598 IP address blocks: 103.150.213.0/24 maxlen: 24 103.159.82.0/24 maxlen: 24 2001:df3:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2421 (0x975) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DEBE, serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Validity Not Before: Dec 31 20:16:39 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=695584a7-3b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:da:fa:57:90:b5:08:97:5a:53:86:2c:c8: 0d:24:f9:1e:1d:13:40:77:70:f9:f5:4c:88:97:d0: 9c:d9:7b:76:2c:20:0d:98:94:4b:06:74:c1:f8:37: 62:74:90:7f:51:c3:2d:ac:ff:48:5f:80:b3:09:1c: 77:ab:ab:00:f6:7e:cd:3c:26:cc:04:62:71:04:e2: df:a6:e3:ec:8a:1a:9e:59:c0:76:24:12:2f:75:f6: 93:bf:7b:dd:9d:10:17:83:a2:35:27:bf:b4:3a:32: 94:60:24:31:7c:f3:a9:f2:ce:54:2c:e4:b0:c1:f8: a8:3f:24:88:23:1f:57:32:21:87:42:df:42:58:0a: aa:ac:51:93:ba:3e:fd:b1:02:8b:81:55:a0:af:c0: d2:1f:49:7b:b7:77:ca:ff:b6:14:0a:55:53:4b:82: d4:e5:ce:0a:99:67:1f:b7:43:88:ed:b0:16:04:d3: 55:d5:43:6e:60:52:c1:74:76:65:1e:47:f9:93:20: 1a:38:de:0d:45:37:30:6c:25:f9:fd:5c:5a:3d:5e: c8:e2:3c:ed:40:8b:36:7f:e0:93:a9:44:2a:d0:fc: 45:72:e0:9a:8a:cf:c8:7c:ed:d7:96:87:67:08:d3: 08:69:36:46:f0:fb:8f:a0:59:d2:39:9e:38:b8:98: 74:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0B:8D:17:CC:95:98:8E:81:73:A3:66:D5:02:13:16:7C:D2:5E:2F X509v3 Authority Key Identifier: keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/A4955B14A91B11EA924D2D7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.150.213.0/24 103.159.82.0/24 IPv6: 2001:df3:9080::/48 Signature Algorithm: sha256WithRSAEncryption 8e:fb:f9:4d:25:9f:55:47:fb:80:e4:9e:7e:a3:a2:39:4f:ab: 1d:79:b4:f5:65:a6:a0:e4:80:9c:b7:05:87:2e:34:5f:e2:ab: 0f:ad:ad:ee:4f:fb:5e:fc:6b:ac:0c:23:1a:57:78:3b:1e:49: bd:9b:55:10:6c:fc:8c:d3:92:3e:a9:6b:d9:02:57:5c:15:31: cb:41:1f:07:85:32:ca:26:e8:08:20:63:9f:d0:81:9f:e0:41: 9e:87:e6:e6:07:3e:43:c5:ef:68:e0:86:2d:e2:b5:c8:76:9c: 01:96:ae:85:1b:94:92:bb:2c:91:d1:fe:4a:44:70:f1:23:30: a4:eb:a0:d3:58:95:67:dd:2d:0c:b8:ea:aa:bb:46:3e:11:44: c7:db:31:fa:a5:15:36:26:43:19:14:37:d7:a7:33:44:a8:f0: 3c:e2:b1:60:66:f9:75:34:df:d7:56:17:78:1a:e4:30:e6:5e: be:66:a5:0b:8d:f9:72:db:2d:71:9c:7e:9e:be:96:21:f7:c2: 34:61:0c:47:cc:df:d8:f8:90:2e:98:1d:e7:87:57:27:b4:73: 1f:1b:f0:74:68:15:46:19:aa:12:61:ee:7d:14:b8:7a:41:b1: 36:a2:52:38:db:9e:df:44:eb:61:f5:fa:69:34:e2:ba:6c:2d: 64:0d:61:18 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICCXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MURFQkUxMTAvBgNVBAUTKDBDMDE1QzA2RDFDRDIzNzg0MkI2NzA1N0MxRDU0QTIw RUYyNzJENDcwHhcNMjUxMjMxMjAxNjM5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU1ODRhNy0zYjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSja+leQtQiXWlOGLMgNJPkeHRNAd3D59UyIl9Cc2Xt2LCANmJRLBnTB+Ddi dJB/UcMtrP9IX4CzCRx3q6sA9n7NPCbMBGJxBOLfpuPsihqeWcB2JBIvdfaTv3vd nRAXg6I1J7+0OjKUYCQxfPOp8s5ULOSwwfioPySIIx9XMiGHQt9CWAqqrFGTuj79 sQKLgVWgr8DSH0l7t3fK/7YUClVTS4LU5c4KmWcft0OI7bAWBNNV1UNuYFLBdHZl Hkf5kyAaON4NRTcwbCX5/VxaPV7I4jztQIs2f+CTqUQq0PxFcuCais/IfO3Xlodn CNMIaTZG8PuPoFnSOZ44uJh05QIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFGgLjRfM lZiOgXOjZtUCExZ80l4vMB8GA1UdIwQYMBaAFAwBXAbRzSN4QrZwV8HVSiDvJy1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVCRS83OTQzM0ZDQUE5 MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkzaEN0bkJYd2RWS0lPOG5M VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBRmNCdEhOSTNoQ3RuQlh3ZFZLSU84bkxVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MURFQkUvNzk0MzNGQ0FBOTE3MTFFQTk0ODE4NjZGQzRGOUFFMDIvQTQ5NTVCMTRB OTFCMTFFQTkyNEQyRDdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnltUDBABnn1IwDwQCAAIwCQMHACABDfOQgDANBgkqhkiG 9w0BAQsFAAOCAQEAjvv5TSWfVUf7gOSefqOiOU+rHXm09WWmoOSAnLcFhy40X+Kr D62t7k/7XvxrrAwjGld4Ox5JvZtVEGz8jNOSPqlr2QJXXBUxy0EfB4UyyiboCCBj n9CBn+BBnofm5gc+Q8XvaOCGLeK1yHacAZauhRuUkrsskdH+SkRw8SMwpOug01iV Z90tDLjqqrtGPhFEx9sx+qUVNiZDGRQ316czRKjwPOKxYGb5dTTf11YXeBrkMOZe vmalC435ctstcZx+nr6WIffCNGEMR8zf2PiQLpgd54dXJ7RzHxvwdGgVRhmqEmHu fRS4ekGxNqJSONue30TrYfX6aTTiumwtZA1hGA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:43:22 2026 by rpki-client