This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/869FE0CC69B311EF9E81312BC4F9AE02.roa File: 869FE0CC69B311EF9E81312BC4F9AE02.roa (raw, json) Hash identifier: aOIDROQi6GkPOjEwda+oZgehrmBXac6uf9Rdo2Bd6r4= Subject key identifier: 77:67:23:8E:5D:02:1F:51:EE:7D:94:5F:30:EF:22:10:11:53:25:FC Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 03DD Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/869FE0CC69B311EF9E81312BC4F9AE02.roa Signing time: Tue 02 Dec 2025 23:59:11 +0000 ROA not before: Tue 02 Dec 2025 23:59:11 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 23892 IP address blocks: 119.63.67.0/24 maxlen: 24 119.63.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 989 (0x3dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Dec 2 23:59:11 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692f7d4e-5253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:d5:fd:3b:90:a8:8c:2d:f6:34:41:ae:47: c1:5b:b8:58:4c:1d:c1:7c:17:23:d4:d7:c6:7c:71: db:f3:b0:67:d4:47:ee:d4:49:ea:83:29:26:ed:ad: 7c:6b:e3:72:00:0b:5c:54:83:19:52:99:60:95:4f: fe:8c:81:2a:99:a0:05:d0:08:98:61:75:1e:ba:f8: 75:bc:4f:07:db:d5:96:33:7b:b6:06:52:14:7b:59: 46:ee:e0:90:e3:bd:4c:91:04:84:c8:93:e8:c5:24: c0:06:73:2d:cd:95:42:74:9e:1d:04:c9:f3:43:9e: 4a:cf:b1:f1:1d:20:c7:da:0f:a6:a5:fa:de:26:53: b9:f1:c3:a9:02:3c:e8:c5:32:de:f6:e6:1f:45:66: 55:ca:70:2e:87:5d:e4:7d:d4:80:0c:04:7a:f6:19: 70:54:af:64:fb:06:4a:eb:69:a5:5f:2a:fd:fb:7e: 88:2b:ad:86:3b:09:0e:15:2a:9e:8f:eb:21:a1:08: 9f:67:5d:0b:b0:02:37:61:c3:51:05:13:5e:c3:c6: 83:cd:31:34:46:c7:de:bc:d6:d2:06:53:b3:ac:c6: 58:06:9a:90:79:1e:79:ef:ca:fc:c2:ce:ba:db:b9: 2c:1e:e5:c0:27:7b:36:29:c3:94:fe:f9:9b:cf:43: 20:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:67:23:8E:5D:02:1F:51:EE:7D:94:5F:30:EF:22:10:11:53:25:FC X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/869FE0CC69B311EF9E81312BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.63.67.0/24 119.63.69.0/24 Signature Algorithm: sha256WithRSAEncryption 15:aa:d1:cd:8b:58:07:9e:9f:e1:a8:25:88:bc:a5:f0:fe:1d: 7d:e3:cb:f3:14:11:83:7b:f0:a6:05:11:2a:5e:e0:8e:0a:c2: a8:5f:77:66:ca:78:a5:4e:e7:16:ff:11:8e:5d:d8:2d:99:bb: 74:38:3a:2d:a8:10:9d:8c:8d:0e:d7:07:6c:e6:59:ee:c8:b9: 4d:bb:8b:ad:cc:f4:32:b5:92:0e:12:11:ad:e1:f5:69:5d:26: 03:7c:0a:4c:46:25:96:03:80:6d:58:1c:ca:bc:f1:69:be:4b: 98:78:02:68:9a:bb:6e:d4:a4:b7:75:8c:25:90:7d:73:f3:e5: 6d:5f:b1:e9:61:8d:b2:2a:10:79:9a:cf:56:c6:c0:47:dd:c4: c4:d0:80:8c:be:45:49:78:f7:e4:d1:41:74:1f:55:0b:43:0a: 7d:1b:10:85:24:6c:ca:72:33:b4:85:a4:63:44:fa:7a:83:53: b9:1c:63:fd:46:7b:e3:9c:5c:c4:f2:3a:fa:40:ea:e6:55:6f: 99:dd:07:14:34:9a:80:6e:22:99:4a:2c:cd:d8:41:97:d0:4c: fe:69:f0:28:13:64:6c:7d:25:c0:d7:9f:64:7d:92:af:3d:08: 50:e6:aa:5d:c3:7a:a8:32:67:6d:c6:d2:b0:75:f6:b6:ad:88: 5f:22:ac:07 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjUxMjAyMjM1OTExWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmN2Q0ZS01MjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscDV/TuQqIwt9jRBrkfBW7hYTB3BfBcj1NfGfHHb87Bn1Efu1Enqgykm7a18 a+NyAAtcVIMZUplglU/+jIEqmaAF0AiYYXUeuvh1vE8H29WWM3u2BlIUe1lG7uCQ 471MkQSEyJPoxSTABnMtzZVCdJ4dBMnzQ55Kz7HxHSDH2g+mpfreJlO58cOpAjzo xTLe9uYfRWZVynAuh13kfdSADAR69hlwVK9k+wZK62mlXyr9+36IK62GOwkOFSqe j+shoQifZ10LsAI3YcNRBRNew8aDzTE0RsfevNbSBlOzrMZYBpqQeR5578r8ws66 27ksHuXAJ3s2KcOU/vmbz0MgfwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHdnI45d Ah9R7n2UXzDvIhARUyX8MB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvODY5RkUwQ0M2 OUIzMTFFRjlFODEzMTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAB3P0MDBAB3P0UwDQYJKoZIhvcNAQELBQADggEBABWq0c2L WAeen+GoJYi8pfD+HX3jy/MUEYN78KYFESpe4I4Kwqhfd2bKeKVO5xb/EY5d2C2Z u3Q4Oi2oEJ2MjQ7XB2zmWe7IuU27i63M9DK1kg4SEa3h9WldJgN8CkxGJZYDgG1Y HMq88Wm+S5h4Amiau27UpLd1jCWQfXPz5W1fselhjbIqEHmaz1bGwEfdxMTQgIy+ RUl49+TRQXQfVQtDCn0bEIUkbMpyM7SFpGNE+nqDU7kcY/1Ge+OcXMTyOvpA6uZV b5ndBxQ0moBuIplKLM3YQZfQTP5p8CgTZGx9JcDXn2R9kq89CFDmql3DeqgyZ23G 0rB19ratiF8irAc= -----END CERTIFICATE-----Generated at Sat Dec 6 20:08:19 2025 by rpki-client