This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/2A9845DE691411EF8D868864C4F9AE02.roa File: 2A9845DE691411EF8D868864C4F9AE02.roa (raw, json) Hash identifier: 2OyyCanvq13/lef3XlgSuSBG44PottDi4GJaK+x96f4= Subject key identifier: 4F:09:E5:F1:F3:50:B4:2B:94:9E:70:73:F7:91:4C:10:E5:E2:5C:B5 Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 03D9 Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/2A9845DE691411EF8D868864C4F9AE02.roa Signing time: Tue 02 Dec 2025 23:59:06 +0000 ROA not before: Tue 02 Dec 2025 23:59:06 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 151780 IP address blocks: 202.94.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 985 (0x3d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Dec 2 23:59:06 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692f7d4a-4b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:93:8f:85:fb:2f:f2:3e:74:6d:e0:ec:aa:51: 97:ed:64:f8:d4:3c:5f:57:7d:ff:c1:92:68:27:49: b8:a9:86:4f:b2:12:7b:56:47:fd:f6:7e:03:75:c3: 0a:37:58:f7:0c:4b:0f:01:20:25:38:7f:d2:4f:91: 14:98:c9:3c:b1:f2:21:8d:ed:18:ce:c9:f5:c7:b4: 10:32:46:7f:5c:9a:57:76:60:ee:15:ad:7a:40:42: 25:b5:63:25:73:87:fc:b9:37:30:40:63:5e:08:86: 7d:ff:5e:af:8d:bb:89:ab:d0:0e:51:ca:a7:83:f5: 68:d1:33:31:09:30:cf:7f:3d:0d:aa:89:5c:35:1d: 07:70:b8:32:81:cd:57:14:91:8f:f5:3b:ba:f5:e5: fa:b1:7a:3c:15:2d:72:8f:3e:fd:59:84:a3:dd:5a: 2e:b8:3e:55:a9:10:41:7a:0b:d7:68:44:b0:cd:7e: 18:19:81:5c:ac:aa:db:a8:65:26:88:3d:3f:7a:3f: 08:70:da:82:e9:f3:7e:c6:64:aa:be:69:f5:23:78: 7a:ad:1c:73:ea:a3:d9:50:84:ba:39:9b:38:a4:f1: f5:ec:ae:9d:fe:6f:4a:f6:9d:d3:b7:26:59:11:34: 36:1e:57:26:1d:69:15:83:75:ec:7e:a0:8f:3b:61: 94:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:09:E5:F1:F3:50:B4:2B:94:9E:70:73:F7:91:4C:10:E5:E2:5C:B5 X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/2A9845DE691411EF8D868864C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.94.247.0/24 Signature Algorithm: sha256WithRSAEncryption 48:c5:d4:c3:16:fb:a8:a2:dd:4d:fd:99:e0:a0:5f:fd:53:82: 5d:76:1b:3b:99:11:e4:3d:29:1b:f7:a5:db:bc:fe:c7:80:38: 92:b5:25:b5:2b:ca:90:b1:b2:12:f2:0a:e4:34:92:c2:da:5b: ce:1d:39:90:22:87:fe:4a:04:17:2c:c4:6e:73:4e:9c:a1:5a: 44:fa:d9:ab:bd:5d:d9:90:36:f4:89:41:0f:7d:07:f6:d9:03: ec:fe:46:58:b2:15:09:f8:51:54:e3:e1:f6:a2:9e:f2:c0:cf: 32:8a:1d:bf:21:5a:ed:03:bd:82:ee:bb:c0:3d:87:4b:4f:f6: fa:84:55:5f:ed:69:2c:03:1d:99:9e:26:47:7f:fb:ee:22:c0: 68:98:9c:2f:82:bf:06:c9:b2:72:8d:c1:fe:2e:92:b6:78:08: 10:1a:12:84:70:b5:ef:41:59:e3:07:3f:a9:cc:48:3c:d3:e0: 9d:87:05:43:17:af:b1:4c:6b:b7:ef:9b:d7:54:ca:a2:b7:41: e9:17:7d:94:38:ad:d6:3d:52:6f:c5:e0:7c:87:0b:61:ed:51: 9e:24:8b:82:c0:57:b9:3d:fb:fc:d6:fe:87:cb:f9:ff:3f:31: d6:a7:d6:0e:84:92:41:9f:4f:35:bd:bb:f5:af:38:84:51:1c: 9b:f2:56:bb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjUxMjAyMjM1OTA2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmN2Q0YS00YjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35OPhfsv8j50beDsqlGX7WT41DxfV33/wZJoJ0m4qYZPshJ7Vkf99n4DdcMK N1j3DEsPASAlOH/ST5EUmMk8sfIhje0Yzsn1x7QQMkZ/XJpXdmDuFa16QEIltWMl c4f8uTcwQGNeCIZ9/16vjbuJq9AOUcqng/Vo0TMxCTDPfz0NqolcNR0HcLgygc1X FJGP9Tu69eX6sXo8FS1yjz79WYSj3VouuD5VqRBBegvXaESwzX4YGYFcrKrbqGUm iD0/ej8IcNqC6fN+xmSqvmn1I3h6rRxz6qPZUIS6OZs4pPH17K6d/m9K9p3TtyZZ ETQ2HlcmHWkVg3XsfqCPO2GURQIDAQABo4IClTCCApEwHQYDVR0OBBYEFE8J5fHz ULQrlJ5wc/eRTBDl4ly1MB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvMkE5ODQ1REU2 OTE0MTFFRjhEODY4ODY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKXvcwDQYJKoZIhvcNAQELBQADggEBAEjF1MMW+6ii3U39 meCgX/1Tgl12GzuZEeQ9KRv3pdu8/seAOJK1JbUrypCxshLyCuQ0ksLaW84dOZAi h/5KBBcsxG5zTpyhWkT62au9XdmQNvSJQQ99B/bZA+z+RliyFQn4UVTj4fainvLA zzKKHb8hWu0DvYLuu8A9h0tP9vqEVV/taSwDHZmeJkd/++4iwGiYnC+CvwbJsnKN wf4ukrZ4CBAaEoRwte9BWeMHP6nMSDzT4J2HBUMXr7FMa7fvm9dUyqK3QekXfZQ4 rdY9Um/F4HyHC2HtUZ4ki4LAV7k9+/zW/ofL+f8/Mdan1g6EkkGfTzW9u/WvOIRR HJvyVrs= -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:21 2025 by rpki-client