This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/309260868C7311F0A82E0E57C4F9AE02.roa File: 309260868C7311F0A82E0E57C4F9AE02.roa (raw, json) Hash identifier: pmJN4rlyAjyIEwtIxMwQqfFU7tME7Agin1X2d5LeW2c= Subject key identifier: CA:6D:FE:52:41:79:D4:01:00:50:01:8D:04:05:8E:77:9E:B2:92:E1 Certificate issuer: /CN=A9120BC1/serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9 Certificate serial: 31 Authority key identifier: 04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/309260868C7311F0A82E0E57C4F9AE02.roa Signing time: Mon 01 Dec 2025 06:04:33 +0000 ROA not before: Mon 01 Dec 2025 06:04:33 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134967 IP address blocks: 103.22.244.0/22 maxlen: 22 103.22.244.0/24 maxlen: 24 103.22.245.0/24 maxlen: 24 103.22.246.0/24 maxlen: 24 103.22.247.0/24 maxlen: 24 2404:3980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120BC1, serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9 Validity Not Before: Dec 1 06:04:33 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692d2ff1-9541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:9c:e4:af:06:52:c9:33:27:ad:8d:f3:75: 66:7c:d2:95:cf:ab:71:f4:79:7c:a0:19:47:63:32: 3c:17:6b:bf:32:8d:3f:bc:f5:81:53:98:50:6a:18: f7:8c:5e:ac:61:b0:d7:86:19:e6:74:de:3a:06:41: 59:55:aa:31:34:7d:85:c1:e5:4f:45:56:b6:bd:16: 8c:d8:04:cc:7c:36:ee:46:73:65:19:a3:c2:9b:90: fc:6d:5c:19:48:8b:2e:49:81:ca:b0:73:e7:8d:ef: 93:80:c2:16:32:37:dc:f3:0b:dd:71:f3:47:91:82: c5:50:bb:92:9a:46:eb:ff:3d:56:c7:15:8f:96:c6: 00:08:8e:af:9f:42:33:ee:3d:a7:69:fb:0e:f4:34: 04:74:91:65:2c:2a:64:4e:2e:1d:1a:44:c1:1a:e3: a4:b8:e6:ca:56:34:62:bd:3f:2c:b2:ba:cd:2e:7c: bc:a4:f9:20:a7:90:e7:7b:60:19:85:20:e1:4b:25: e3:be:54:c3:f7:39:ba:f2:4f:f1:32:f4:6c:ae:c1: 2e:f9:b7:84:b3:0f:0e:9c:e3:c4:5f:cb:f8:f7:ca: ce:55:84:8a:ce:97:2a:89:76:fa:86:03:9a:f4:5c: 74:61:42:16:ce:1c:20:c6:12:66:73:20:22:ea:14: 38:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6D:FE:52:41:79:D4:01:00:50:01:8D:04:05:8E:77:9E:B2:92:E1 X509v3 Authority Key Identifier: keyid:04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/309260868C7311F0A82E0E57C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.22.244.0/22 IPv6: 2404:3980::/32 Signature Algorithm: sha256WithRSAEncryption 35:9e:7d:ec:aa:4d:f9:2e:bc:8d:36:08:48:d2:2e:8a:31:ed: 86:0b:97:be:7c:32:26:23:03:57:50:9b:97:ea:b9:d1:1f:6f: 9b:14:2a:fa:33:f6:1d:f0:c6:28:99:85:9b:a9:d0:ce:d9:6b: 08:e1:14:65:1e:07:3e:21:f2:ca:22:c2:ac:66:57:36:86:6d: 3d:4b:d0:9d:e7:bd:63:66:1d:d6:7a:d3:00:b1:35:8a:5c:29: af:92:02:0a:61:be:4e:4d:b6:fc:43:08:05:72:56:a9:3d:6d: a0:2e:14:25:1f:5f:78:15:4a:28:4d:c6:37:0e:1f:9b:16:c9: 33:3c:01:98:9a:8a:e3:ed:09:72:fd:e1:b6:70:00:72:a7:91: c3:17:b1:5a:37:a1:ab:cb:db:98:d2:eb:50:f1:8b:d8:c4:7b: 9f:de:0b:ba:9c:87:ec:7b:3c:69:9a:47:dc:ed:0e:1a:7a:8d: 92:2a:19:da:4d:be:e7:0c:dc:30:b0:e9:f6:ad:01:76:b8:14: 68:dc:b3:47:bd:9c:d7:98:28:46:a4:a5:07:20:c1:81:bf:44: 00:b3:01:97:a1:19:5b:bc:eb:5a:fb:24:67:b9:5f:0c:27:ec: 4a:e0:84:60:25:e3:df:90:90:b5:ea:d0:fe:d3:e0:63:4d:65: ce:50:60:90 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MEJDMTExMC8GA1UEBRMoMDRBOEYyOEY1MjdFMTg5MTY3QUNDOTAzMENCRURBRDhB OUM0MTdCOTAeFw0yNTEyMDEwNjA0MzNaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MmQyZmYxLTk1NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBmJzkrwZSyTMnrY3zdWZ80pXPq3H0eXygGUdjMjwXa78yjT+89YFTmFBqGPeM XqxhsNeGGeZ03joGQVlVqjE0fYXB5U9FVra9FozYBMx8Nu5Gc2UZo8KbkPxtXBlI iy5Jgcqwc+eN75OAwhYyN9zzC91x80eRgsVQu5KaRuv/PVbHFY+WxgAIjq+fQjPu Padp+w70NAR0kWUsKmROLh0aRMEa46S45spWNGK9Pyyyus0ufLyk+SCnkOd7YBmF IOFLJeO+VMP3ObryT/Ey9GyuwS75t4SzDw6c48Rfy/j3ys5VhIrOlyqJdvqGA5r0 XHRhQhbOHCDGEmZzICLqFDjxAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUym3+UkF5 1AEAUAGNBAWOd56ykuEwHwYDVR0jBBgwFoAUBKjyj1J+GJFnrMkDDL7a2KnEF7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwQkMxL0RBQzYwMzg4OEM3 MjExRjBBMkIwQUU1NkM0RjlBRTAyL0JLanlqMUotR0pGbnJNa0RETDdhMktuRUY3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQktqeWoxSi1HSkZuck1rRERMN2EyS25FRjdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEJDMS9EQUM2MDM4ODhDNzIxMUYwQTJCMEFFNTZDNEY5QUUwMi8zMDkyNjA4NjhD NzMxMUYwQTgyRTBFNTdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAmcW9DANBAIAAjAHAwUAJAQ5gDANBgkqhkiG9w0BAQsFAAOC AQEANZ597KpN+S68jTYISNIuijHthguXvnwyJiMDV1Cbl+q50R9vmxQq+jP2HfDG KJmFm6nQztlrCOEUZR4HPiHyyiLCrGZXNoZtPUvQnee9Y2Yd1nrTALE1ilwpr5IC CmG+Tk22/EMIBXJWqT1toC4UJR9feBVKKE3GNw4fmxbJMzwBmJqK4+0Jcv3htnAA cqeRwxexWjehq8vbmNLrUPGL2MR7n94LupyH7Hs8aZpH3O0OGnqNkioZ2k2+5wzc MLDp9q0BdrgUaNyzR72c15goRqSlByDBgb9EALMBl6EZW7zrWvskZ7lfDCfsSuCE YCXj35CQterQ/tPgY01lzlBgkA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:39:41 2025 by rpki-client