This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/C3923CE6EFD811EEB93EE009C4F9AE02.roa File: C3923CE6EFD811EEB93EE009C4F9AE02.roa (raw, json) Hash identifier: 6JRCFCaPZxUACqobDHhjWN2Dhy2oeF6f5m6e4BwrQkw= Subject key identifier: 33:EB:AF:88:4D:B4:6B:1C:FA:2F:1F:84:68:EF:EF:FE:72:5E:16:9E Certificate issuer: /CN=A9125475/serialNumber=52FE2B6B7F497F94F1D492D1917B486478BF59D6 Certificate serial: 02AC Authority key identifier: 52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/C3923CE6EFD811EEB93EE009C4F9AE02.roa Signing time: Fri 28 Nov 2025 14:30:51 +0000 ROA not before: Fri 28 Nov 2025 14:30:51 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 4651 IP address blocks: 193.36.112.0/22 maxlen: 22 193.36.112.0/24 maxlen: 24 193.36.113.0/24 maxlen: 24 193.36.114.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 684 (0x2ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=52FE2B6B7F497F94F1D492D1917B486478BF59D6 Validity Not Before: Nov 28 14:30:51 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6929b21b-d4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:46:0c:68:dd:62:fc:18:08:fc:c9:cf:d3:db: b4:38:b3:56:84:2c:77:7c:72:b1:5b:0c:e3:25:60: 73:05:b1:31:c0:32:b1:04:32:f8:23:13:71:8e:8f: 5e:f7:e0:7c:43:ae:f4:62:6b:32:78:f0:b3:75:e5: cd:eb:fc:dd:dd:87:c0:90:51:15:8c:71:d7:9b:8e: ed:2b:fa:95:63:52:af:11:e4:33:e7:32:ae:c7:d6: 51:e8:46:95:9b:5a:d3:e6:b6:99:b7:b7:93:a9:61: 72:3f:7f:c3:6f:76:6d:9e:50:6a:34:3e:20:19:a6: 5f:37:db:4a:c7:7c:01:76:01:9b:00:77:4b:2a:7a: 39:65:d3:73:7f:81:ae:fb:89:ee:af:ee:39:4b:7a: 88:15:e4:15:75:82:50:d8:c2:e4:74:f1:76:fb:16: 6f:ca:ad:f8:26:eb:8e:29:5f:aa:83:73:af:15:f0: 3e:e9:6d:a5:8e:a3:75:27:46:82:ce:ae:ab:bd:c3: 49:5f:a0:24:e3:ff:79:a8:5e:a4:2b:f4:84:d8:46: 8f:f5:d6:34:77:4c:09:31:a8:eb:a7:8a:a8:c7:31: c3:2a:d7:cb:ba:9f:57:e0:ed:02:7f:ba:a7:04:c0: ae:17:7e:f5:60:91:e8:e5:8e:eb:96:54:e8:26:7b: 01:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EB:AF:88:4D:B4:6B:1C:FA:2F:1F:84:68:EF:EF:FE:72:5E:16:9E X509v3 Authority Key Identifier: keyid:52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/C3923CE6EFD811EEB93EE009C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 193.36.112.0/22 Signature Algorithm: sha256WithRSAEncryption a2:95:4f:70:4e:7b:c9:98:01:f9:71:4c:6c:bb:06:ff:ef:c0: 56:a1:4c:66:17:2a:13:97:a1:38:60:b0:4e:3b:f8:79:45:da: 3d:ac:a5:31:05:b6:dd:a9:26:f1:23:02:3b:8d:68:23:10:01: f2:be:5f:e5:e9:1c:df:a4:b7:79:af:88:13:c4:39:58:53:68: 6b:10:f5:48:59:d7:99:ad:1a:2f:70:82:6f:01:4b:83:e5:17: ff:37:c6:fd:47:ef:fc:4a:ef:79:f7:3c:37:89:07:cb:03:49: 64:af:9d:bc:5a:85:11:04:88:4a:19:e0:bd:05:33:c9:01:6e: b5:49:6c:c5:33:9a:c3:a8:f0:f6:50:1f:07:82:a2:a2:e9:4c: a1:db:66:90:02:60:24:c0:e5:74:77:54:54:83:5f:cc:c4:e8: d4:82:88:34:6c:f7:ff:7c:46:f4:18:5c:5f:d9:b5:a1:43:55: 79:69:13:db:08:1e:2b:a8:8c:66:b9:38:26:3a:80:a7:4d:ac: d7:b2:05:63:f0:c4:3a:fa:20:64:22:91:80:48:9c:56:18:86: c8:fa:41:64:bd:8e:6b:5e:79:74:02:26:35:ab:e5:46:6d:fc: 6a:39:d2:dc:6a:26:28:29:9f:6b:ea:3f:0c:95:dd:83:a6:00: 63:cc:d2:87 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDUyRkUyQjZCN0Y0OTdGOTRGMUQ0OTJEMTkxN0I0ODY0 NzhCRjU5RDYwHhcNMjUxMTI4MTQzMDUxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI5YjIxYi1kNGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0YMaN1i/BgI/MnP09u0OLNWhCx3fHKxWwzjJWBzBbExwDKxBDL4IxNxjo9e 9+B8Q670YmsyePCzdeXN6/zd3YfAkFEVjHHXm47tK/qVY1KvEeQz5zKux9ZR6EaV m1rT5raZt7eTqWFyP3/Db3ZtnlBqND4gGaZfN9tKx3wBdgGbAHdLKno5ZdNzf4Gu +4nur+45S3qIFeQVdYJQ2MLkdPF2+xZvyq34JuuOKV+qg3OvFfA+6W2ljqN1J0aC zq6rvcNJX6Ak4/95qF6kK/SE2EaP9dY0d0wJMajrp4qoxzHDKtfLup9X4O0Cf7qn BMCuF371YJHo5Y7rllToJnsBWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDPrr4hN tGsc+i8fhGjv7/5yXhaeMB8GA1UdIwQYMBaAFFL+K2t/SX+U8dSS0ZF7SGR4v1nW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9DMTMxMTZGMjI4 RDMxMUVEOEZCRDZENkNDNEY5QUUwMi9VdjRyYTM5SmY1VHgxSkxSa1h0SVpIaV9X ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1V2NHJhMzlKZjVUeDFKTFJrWHRJWkhpX1dkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU0NzUvQzEzMTE2RjIyOEQzMTFFRDhGQkQ2RDZDQzRGOUFFMDIvQzM5MjNDRTZF RkQ4MTFFRUI5M0VFMDA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALBJHAwDQYJKoZIhvcNAQELBQADggEBAKKVT3BOe8mYAflx TGy7Bv/vwFahTGYXKhOXoThgsE47+HlF2j2spTEFtt2pJvEjAjuNaCMQAfK+X+Xp HN+kt3mviBPEOVhTaGsQ9UhZ15mtGi9wgm8BS4PlF/83xv1H7/xK73n3PDeJB8sD SWSvnbxahREEiEoZ4L0FM8kBbrVJbMUzmsOo8PZQHweCoqLpTKHbZpACYCTA5XR3 VFSDX8zE6NSCiDRs9/98RvQYXF/ZtaFDVXlpE9sIHiuojGa5OCY6gKdNrNeyBWPw xDr6IGQikYBInFYYhsj6QWS9jmteeXQCJjWr5UZt/Go50txqJigpn2vqPwyV3YOm AGPM0oc= -----END CERTIFICATE-----Generated at Sun Dec 21 14:39:34 2025 by rpki-client