This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/BE4B3228691411EFB573C120C4F9AE02.roa File: BE4B3228691411EFB573C120C4F9AE02.roa (raw, json) Hash identifier: 5H32B3wtPXDSZssXMxHc0JZTPyABfL6/i25/U22sL/A= Subject key identifier: A1:FC:C7:25:6B:29:95:C4:30:AD:BF:32:2B:95:1D:96:0E:9A:8E:4C Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 03D8 Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/BE4B3228691411EFB573C120C4F9AE02.roa Signing time: Tue 02 Dec 2025 23:59:05 +0000 ROA not before: Tue 02 Dec 2025 23:59:05 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 150703 IP address blocks: 202.148.176.0/24 maxlen: 24 202.148.185.0/24 maxlen: 24 202.148.186.0/24 maxlen: 24 202.148.188.0/24 maxlen: 24 2400:cd00:1051::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Dec 2 23:59:05 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692f7d49-a6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6d:d1:9f:48:cd:d1:0e:21:19:df:66:f4:65: 1b:d4:b1:6a:61:a0:55:c0:36:41:95:e2:75:5a:02: 0a:4d:8c:8e:9d:6b:a5:7f:fb:fd:18:92:23:31:f1: f7:78:06:ce:d0:3c:b5:db:52:05:5f:4e:5b:e3:cd: 29:12:b2:52:8d:5f:bf:01:bc:6e:47:fd:e6:e9:e2: 31:ee:aa:8a:6f:21:57:dc:95:96:1e:f6:0f:20:5b: 3e:aa:b8:4d:1f:82:e3:c4:42:b7:59:1f:61:7d:10: 86:ab:f5:23:7b:7b:59:a7:f0:4a:43:80:f2:f1:a7: 63:1e:fb:38:60:ad:4e:5c:62:99:d1:0a:92:25:7b: 25:a2:d1:28:1a:f8:42:bf:15:74:2a:96:2b:7a:32: 54:7c:4e:0a:05:e3:cf:5f:cb:c2:64:27:a6:5c:49: 44:72:5b:48:3f:a0:79:30:fb:d8:87:30:2a:d6:7d: 3a:d5:88:29:ff:76:b4:15:e0:b7:39:89:64:3c:0b: d0:3b:1b:1d:0a:dc:07:5f:3f:66:db:4d:ed:14:91: 69:69:a9:1c:ee:4d:66:1c:9b:56:eb:83:4f:08:53: bd:c3:9c:59:ea:12:6b:62:6d:3a:84:ed:ab:0b:26: c0:45:be:90:f4:fd:d2:6a:ba:10:86:91:78:5f:96: 6d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FC:C7:25:6B:29:95:C4:30:AD:BF:32:2B:95:1D:96:0E:9A:8E:4C X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/BE4B3228691411EFB573C120C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.148.176.0/24 202.148.185.0-202.148.186.255 202.148.188.0/24 IPv6: 2400:cd00:1051::/48 Signature Algorithm: sha256WithRSAEncryption 67:13:ef:c4:28:30:f4:54:22:66:e5:f2:51:8a:09:72:ae:16: 59:33:e6:94:6c:fc:2f:13:d8:fe:3b:76:0d:f9:b0:98:ee:6f: 44:24:f0:c1:d5:d6:8f:f9:9e:ab:e9:88:4f:13:64:49:b2:98: 5e:54:83:ad:da:ef:ea:2c:74:62:7a:38:fd:eb:01:8f:62:bc: 63:6b:6c:2b:23:6f:06:fb:a7:9c:8d:bd:27:67:2e:64:5f:4b: 17:fc:41:c6:cd:89:dc:ff:a1:11:63:05:9e:78:70:dc:d7:49: 5b:92:62:60:db:79:f4:3a:ba:64:74:de:2b:c8:24:65:1d:63: 84:d1:37:5b:a8:97:f8:1a:78:7d:e6:48:a5:17:b7:51:8a:44: 3c:5d:2c:b9:72:60:26:53:db:37:a8:2b:47:ae:c2:11:1c:91: cc:9e:32:59:18:bc:3a:fe:15:8c:91:91:98:6e:a7:c6:93:b2: ab:62:3b:85:f2:4f:b9:bd:4c:1e:62:1f:4a:de:3c:4a:7d:ea: 76:a3:fb:d4:91:3f:86:47:2c:f7:c3:69:4c:c0:a1:c0:99:16: c6:c9:f6:e3:40:bf:61:53:2b:ad:c3:10:ab:cc:3b:45:3b:2f: cf:b0:09:af:b1:b4:1c:05:52:33:77:df:2f:66:1d:25:6d:ff: 86:b9:fa:d4 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjUxMjAyMjM1OTA1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmN2Q0OS1hNmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs23Rn0jN0Q4hGd9m9GUb1LFqYaBVwDZBleJ1WgIKTYyOnWulf/v9GJIjMfH3 eAbO0Dy121IFX05b480pErJSjV+/AbxuR/3m6eIx7qqKbyFX3JWWHvYPIFs+qrhN H4LjxEK3WR9hfRCGq/Uje3tZp/BKQ4Dy8adjHvs4YK1OXGKZ0QqSJXslotEoGvhC vxV0KpYrejJUfE4KBePPX8vCZCemXElEcltIP6B5MPvYhzAq1n061Ygp/3a0FeC3 OYlkPAvQOxsdCtwHXz9m203tFJFpaakc7k1mHJtW64NPCFO9w5xZ6hJrYm06hO2r CybARb6Q9P3SaroQhpF4X5ZtkwIDAQABo4ICujCCArYwHQYDVR0OBBYEFKH8xyVr KZXEMK2/MiuVHZYOmo5MMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvQkU0QjMyMjg2 OTE0MTFFRkI1NzNDMTIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRAYIKwYBBQUHAQcBAf8E NTAzMCAEAgABMBoDBADKlLAwDAMEAMqUuQMEAMqUugMEAMqUvDAPBAIAAjAJAwcA JADNABBRMA0GCSqGSIb3DQEBCwUAA4IBAQBnE+/EKDD0VCJm5fJRiglyrhZZM+aU bPwvE9j+O3YN+bCY7m9EJPDB1daP+Z6r6YhPE2RJspheVIOt2u/qLHRiejj96wGP Yrxja2wrI28G+6ecjb0nZy5kX0sX/EHGzYnc/6ERYwWeeHDc10lbkmJg23n0Orpk dN4ryCRlHWOE0TdbqJf4Gnh95kilF7dRikQ8XSy5cmAmU9s3qCtHrsIRHJHMnjJZ GLw6/hWMkZGYbqfGk7KrYjuF8k+5vUweYh9K3jxKfep2o/vUkT+GRyz3w2lMwKHA mRbGyfbjQL9hUyutwxCrzDtFOy/PsAmvsbQcBVIzd98vZh0lbf+GufrU -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:27 2025 by rpki-client