This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/D8D63660B9A811ECB7EE5A71C4F9AE02.roa File: D8D63660B9A811ECB7EE5A71C4F9AE02.roa (raw, json) Hash identifier: sN73Ezcu1eoLAl+NMiAOmnx3f2fjnvy9L05CSNXiNqk= Subject key identifier: B8:B4:CD:05:83:3B:B7:72:A7:EB:1F:09:20:A8:84:F0:5D:3D:F8:D7 Certificate issuer: /CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A Certificate serial: 11F2 Authority key identifier: 11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/D8D63660B9A811ECB7EE5A71C4F9AE02.roa Signing time: Thu 20 Nov 2025 17:06:14 +0000 ROA not before: Thu 20 Nov 2025 17:06:14 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 4837 IP address blocks: 103.123.4.0/23 maxlen: 23 103.123.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4594 (0x11f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120CDE, serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A Validity Not Before: Nov 20 17:06:14 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=691f4a85-a9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4a:6f:c4:4e:1a:7e:3f:e8:b5:f8:f7:77:06: c8:fa:bc:c5:8d:00:9c:bb:52:39:a9:9f:5c:26:18: 87:36:d4:e1:ea:0c:e3:80:a3:f4:35:65:3f:f9:ad: e0:07:b1:cf:cf:c5:31:18:1d:a0:57:86:32:5b:2b: ee:d6:cd:c1:e8:df:ad:fe:a1:8e:33:e0:2d:fe:5e: 81:d6:9d:b9:1e:bd:c8:44:ac:70:11:99:22:2a:f1: 6c:35:cb:b4:8c:d9:b9:fd:73:2a:2f:ac:84:5d:95: 38:fa:a9:f4:28:12:52:21:11:dc:0a:26:c4:86:bf: 1c:be:11:a5:ba:9c:d9:80:08:17:a0:b2:02:f8:bb: 3d:8b:f0:96:ed:1a:f4:e3:6b:48:18:3d:24:dd:51: a2:a8:18:6d:ec:5a:2a:86:7c:17:be:66:77:59:86: 35:e1:0a:f7:5b:12:2e:76:b5:be:08:1b:62:14:13: 6b:6a:cd:90:60:f7:6d:fa:0e:91:e0:5f:51:e9:57: 69:35:52:d4:a5:ec:e9:55:7f:cf:f2:86:ed:86:51: f6:7f:7b:69:e6:65:6c:a3:fa:6d:eb:ea:ca:da:0f: 01:6f:b5:a4:19:f5:b9:5e:9a:b3:76:c2:2d:3a:1c: 8d:6f:b0:78:33:76:f0:12:10:91:ab:6c:a7:ce:65: 0b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B4:CD:05:83:3B:B7:72:A7:EB:1F:09:20:A8:84:F0:5D:3D:F8:D7 X509v3 Authority Key Identifier: keyid:11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/D8D63660B9A811ECB7EE5A71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.4.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:10:db:71:23:1d:ea:35:ae:81:0f:6e:cb:7b:ee:9a:31:2d: 06:08:11:a8:a1:97:52:4b:c1:15:28:f6:0a:32:b3:5a:bb:ce: 97:3d:27:41:5e:e7:08:22:c0:1b:23:40:68:b8:89:3b:2f:87: 5c:81:92:46:4c:c3:bd:93:bd:7f:e9:b9:c7:cb:55:1f:a0:b8: 95:f7:0b:6b:df:63:34:ae:63:ff:f8:2c:a9:27:8a:df:68:78: 5e:c1:70:f0:1b:19:fb:86:7e:09:ef:69:bf:81:42:fc:00:af: 31:33:21:a5:3a:fa:fe:2b:a8:5e:50:f7:40:94:75:9b:c9:b3: 6d:a2:79:1f:16:55:d6:e4:8c:29:24:ed:f7:fd:21:3f:d0:2f: 10:cd:7f:dd:99:ac:07:14:8b:21:3b:dd:57:dd:9d:54:82:41: 5c:31:eb:79:2d:3e:3d:58:c5:60:d6:01:b3:a5:9f:8d:0b:2f: 12:5e:1b:63:e6:fa:c5:73:db:b1:17:7b:41:7b:83:95:7c:7a: 34:55:da:02:34:51:df:db:77:c5:ce:dd:3a:7d:28:5d:e3:b1: 40:1c:15:c6:26:24:e9:6f:69:b4:fb:cc:2e:36:03:aa:27:c3: 8b:e0:38:21:07:8c:20:0b:d1:52:7e:a9:73:9c:76:08:8a:a3: 1c:d0:14:78 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBDREUxMTAvBgNVBAUTKDExNkY5MjBGODczMDY2NzQ3QThDRUREQUZGRTg0QkNG QkRCMDM1MUEwHhcNMjUxMTIwMTcwNjE0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFmNGE4NS1hOWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7kpvxE4afj/otfj3dwbI+rzFjQCcu1I5qZ9cJhiHNtTh6gzjgKP0NWU/+a3g B7HPz8UxGB2gV4YyWyvu1s3B6N+t/qGOM+At/l6B1p25Hr3IRKxwEZkiKvFsNcu0 jNm5/XMqL6yEXZU4+qn0KBJSIRHcCibEhr8cvhGlupzZgAgXoLIC+Ls9i/CW7Rr0 42tIGD0k3VGiqBht7FoqhnwXvmZ3WYY14Qr3WxIudrW+CBtiFBNras2QYPdt+g6R 4F9R6VdpNVLUpezpVX/P8obthlH2f3tp5mVso/pt6+rK2g8Bb7WkGfW5XpqzdsIt OhyNb7B4M3bwEhCRq2ynzmULsQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLi0zQWD O7dyp+sfCSCohPBdPfjXMB8GA1UdIwQYMBaAFBFvkg+HMGZ0eozt2v/oS8+9sDUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMENERS8yM0Q4NTY2RUZC REIxMUU4OTIwQ0IwNDRDNEY5QUUwMi9FVy1TRDRjd1puUjZqTzNhXy1oTHo3MndO Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VXLVNENGN3Wm5SNmpPM2FfLWhMejcyd05Sby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjBDREUvMjNEODU2NkVGQkRCMTFFODkyMENCMDQ0QzRGOUFFMDIvRDhENjM2NjBC OUE4MTFFQ0I3RUU1QTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnewQwDQYJKoZIhvcNAQELBQADggEBAA0Q23EjHeo1roEP bst77poxLQYIEaihl1JLwRUo9goys1q7zpc9J0Fe5wgiwBsjQGi4iTsvh1yBkkZM w72TvX/pucfLVR+guJX3C2vfYzSuY//4LKknit9oeF7BcPAbGfuGfgnvab+BQvwA rzEzIaU6+v4rqF5Q90CUdZvJs22ieR8WVdbkjCkk7ff9IT/QLxDNf92ZrAcUiyE7 3VfdnVSCQVwx63ktPj1YxWDWAbOln40LLxJeG2Pm+sVz27EXe0F7g5V8ejRV2gI0 Ud/bd8XO3Tp9KF3jsUAcFcYmJOlvabT7zC42A6onw4vgOCEHjCAL0VJ+qXOcdgiK oxzQFHg= -----END CERTIFICATE-----Generated at Sun Dec 7 00:17:14 2025 by rpki-client