This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa File: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (raw, json) Hash identifier: 10NBPSybJ1d+q+ni3VVF3MNFnJGqTgzoq8TVIRJgedI= Subject key identifier: 16:66:8D:67:53:15:4B:A3:E6:3A:0A:76:DB:49:EC:6E:AF:3E:3A:5D Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 03E0 Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa Signing time: Tue 02 Dec 2025 23:59:15 +0000 ROA not before: Tue 02 Dec 2025 23:59:15 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 45248 IP address blocks: 116.193.150.0/23 maxlen: 24 117.121.212.0/24 maxlen: 24 117.121.213.0/24 maxlen: 24 119.63.64.0/24 maxlen: 24 119.63.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 992 (0x3e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Dec 2 23:59:15 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692f7d52-a82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c8:f9:4e:d6:65:0e:c7:e5:93:79:d9:ea:f3: a4:d0:57:3e:a0:95:86:e7:b0:18:72:ee:f7:81:25: 96:e0:c3:a2:84:ae:e8:98:a7:be:42:21:70:a8:df: 86:91:ca:36:bf:de:7c:bf:f5:58:8d:bf:97:58:4a: 52:5e:79:f3:5c:37:1d:89:ca:02:b9:41:94:ec:e9: 58:9a:bc:27:8e:a9:32:08:7b:b1:19:94:30:b5:97: 23:87:48:62:69:37:b9:9a:e4:e8:f5:e5:f2:8d:f8: e8:14:e9:85:20:35:27:7a:4a:c7:7c:8a:c0:d4:08: c0:c9:19:f1:a4:b6:32:4d:7d:76:03:4c:33:cb:34: e8:7b:7f:a1:a9:5d:3e:fa:57:5c:fb:05:4c:cb:87: f9:8c:4f:8f:99:94:74:f7:d4:1f:b9:93:50:24:a5: f5:77:9f:fb:8a:19:7b:a4:c5:0c:22:d4:ec:95:25: f8:9e:8b:6b:65:42:35:7b:b7:1a:e8:10:78:4f:21: 31:fb:81:cd:7a:af:f6:83:58:a9:89:09:1e:d2:27: d3:5d:97:e5:6c:40:10:5b:99:bc:6f:ff:57:31:59: 17:99:d0:21:0d:66:84:72:4f:e5:ad:39:0b:c6:c9: 35:d1:16:85:7c:89:c5:28:8b:28:fd:a3:84:6e:b1: 86:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:66:8D:67:53:15:4B:A3:E6:3A:0A:76:DB:49:EC:6E:AF:3E:3A:5D X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.193.150.0/23 117.121.212.0/23 119.63.64.0/24 119.63.71.0/24 Signature Algorithm: sha256WithRSAEncryption 93:59:83:45:68:cd:48:2f:e6:32:06:54:c6:77:88:c4:40:13: d6:d2:be:59:2b:ef:1a:27:22:42:d5:2d:a6:3b:c2:69:60:f4: 00:f7:07:fe:21:59:0d:07:15:4e:bb:56:01:3c:55:73:75:8a: f1:66:fd:ce:52:ee:3d:cd:27:d4:fb:0b:ae:fb:30:a1:ff:fc: f7:54:21:bf:25:74:7f:f4:3f:fa:ff:32:0b:04:a3:48:ea:c6: 78:f9:56:86:d3:b2:26:36:2b:c2:d4:a7:25:ff:69:24:d6:44: d6:9a:14:4e:ba:76:9e:dd:91:b4:10:a4:48:f2:3b:9f:2c:f9: 15:43:e3:84:10:53:aa:0c:0b:20:e8:34:7f:f7:4e:29:bd:5a: 87:db:a1:6e:95:0c:ef:76:ec:32:7d:02:cb:a0:0c:47:dc:b8: 1c:61:c7:8a:98:54:44:e1:33:ba:1c:d8:00:3b:98:05:2f:19: 22:24:50:01:d4:1d:a0:c9:f2:48:b8:34:0d:ce:d8:84:b3:10: 4f:ce:56:d6:9a:03:a6:a5:34:a8:f8:30:bc:4d:dc:5f:9f:4b: 20:0a:6b:2e:64:e6:9c:ca:42:cc:f3:b1:b0:54:15:87:54:91: d5:25:96:5c:bc:b9:fa:61:4f:1d:02:53:6f:51:25:e5:12:78: c8:81:36:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjUxMjAyMjM1OTE1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmN2Q1Mi1hODJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8j5TtZlDsflk3nZ6vOk0Fc+oJWG57AYcu73gSWW4MOihK7omKe+QiFwqN+G kco2v958v/VYjb+XWEpSXnnzXDcdicoCuUGU7OlYmrwnjqkyCHuxGZQwtZcjh0hi aTe5muTo9eXyjfjoFOmFIDUnekrHfIrA1AjAyRnxpLYyTX12A0wzyzToe3+hqV0+ +ldc+wVMy4f5jE+PmZR099QfuZNQJKX1d5/7ihl7pMUMItTslSX4notrZUI1e7ca 6BB4TyEx+4HNeq/2g1ipiQke0ifTXZflbEAQW5m8b/9XMVkXmdAhDWaEck/lrTkL xsk10RaFfInFKIso/aOEbrGGzQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFBZmjWdT FUuj5joKdttJ7G6vPjpdMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvREZCN0ExRkU2 OEZBMTFFRkIyQ0I2RTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAF0wZYDBAF1edQDBAB3P0ADBAB3P0cwDQYJKoZIhvcNAQEL BQADggEBAJNZg0VozUgv5jIGVMZ3iMRAE9bSvlkr7xonIkLVLaY7wmlg9AD3B/4h WQ0HFU67VgE8VXN1ivFm/c5S7j3NJ9T7C677MKH//PdUIb8ldH/0P/r/MgsEo0jq xnj5VobTsiY2K8LUpyX/aSTWRNaaFE66dp7dkbQQpEjyO58s+RVD44QQU6oMCyDo NH/3Tim9WofboW6VDO927DJ9AsugDEfcuBxhx4qYVEThM7oc2AA7mAUvGSIkUAHU HaDJ8ki4NA3O2ISzEE/OVtaaA6alNKj4MLxN3F+fSyAKay5k5pzKQszzsbBUFYdU kdUllly8ufphTx0CU29RJeUSeMiBNvs= -----END CERTIFICATE-----Generated at Sun Dec 7 02:02:02 2025 by rpki-client