This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9C957EF6C91A11F0971EC673C4F9AE02.roa File: 9C957EF6C91A11F0971EC673C4F9AE02.roa (raw, json) Hash identifier: IqGGpB6gbv2zxuI13AiPWnYbFdRhvLZ7GYYUS6dO6EI= Subject key identifier: 37:2D:DC:F0:16:AB:5B:01:7B:02:D7:DC:94:05:4B:FE:3E:24:92:04 Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Certificate serial: 1A Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9C957EF6C91A11F0971EC673C4F9AE02.roa Signing time: Mon 24 Nov 2025 09:47:38 +0000 ROA not before: Mon 24 Nov 2025 09:47:38 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 132866 IP address blocks: 122.155.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Validity Not Before: Nov 24 09:47:38 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692429ba-9e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:b8:ec:50:d3:20:e1:2c:77:de:db:23:29: 0d:1e:53:37:f9:dd:3b:15:dc:02:63:6d:d1:10:7b: 01:85:38:2d:4d:57:91:7f:09:13:95:01:00:5d:37: 0c:8d:a8:25:12:27:52:2b:97:ea:c6:dc:bf:34:8f: 59:8f:c0:63:37:e5:ba:d6:4e:5d:e7:4b:4e:7b:e7: 31:80:b1:c9:52:1f:50:39:8c:37:ce:d9:7a:74:4e: 95:bc:8f:6d:bb:ab:26:e7:26:4e:4e:52:fc:25:c8: 00:55:aa:db:a0:a5:e2:64:10:26:56:12:50:66:8f: 6d:f1:07:a3:47:48:6e:19:7e:16:6c:ff:d5:a9:b7: f2:8d:fc:87:bb:49:08:19:c8:d6:22:5a:34:4e:0e: 04:5b:72:5c:1a:87:0a:c4:d2:f5:e6:09:c5:1c:f9: 84:a2:7c:ce:75:a4:50:72:36:95:2b:54:bc:a6:d5: 14:c9:aa:f0:57:03:41:03:11:8d:a1:19:51:e9:20: ed:45:21:5f:d1:f2:be:21:3a:2b:74:d9:c5:ee:24: 0b:78:ea:bc:05:94:29:4d:a1:96:8d:64:07:12:71: f3:e9:8c:da:35:cc:08:95:1b:be:2e:b6:1b:cf:3b: d5:51:a0:ba:f8:9f:ff:42:3f:42:6c:fa:f3:3c:a9: c2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2D:DC:F0:16:AB:5B:01:7B:02:D7:DC:94:05:4B:FE:3E:24:92:04 X509v3 Authority Key Identifier: keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9C957EF6C91A11F0971EC673C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.155.135.0/24 Signature Algorithm: sha256WithRSAEncryption 88:18:9c:43:7b:87:5f:6b:a3:17:e1:63:d0:c6:0f:b6:ca:5c: 23:02:c5:e8:80:c3:28:27:f9:aa:56:92:b0:30:22:1b:99:f1: e6:01:e3:e3:07:50:b8:e5:1e:cd:02:e0:c4:29:ff:4c:4c:4c: 0f:36:5c:65:fb:47:2c:d8:86:c7:52:3c:bf:56:c9:8d:54:95: 22:1b:98:c1:c2:89:d4:05:2f:f3:c4:5c:91:90:45:9d:c6:bb: 68:41:08:55:7b:61:bd:9d:1a:46:c6:88:f5:a4:88:15:aa:55: cf:10:c2:68:a2:8c:63:aa:0c:a0:3d:ef:2e:2b:35:cb:c6:f0: 33:e5:5e:9f:f1:90:a5:71:89:5c:b1:56:00:87:f2:a3:8a:9a: 53:39:2f:25:98:6f:6b:15:3c:1d:67:2c:7b:61:c8:8e:06:a2: cc:7f:86:4d:cc:33:ac:4a:19:fb:74:ac:a2:59:b0:4e:e3:88: ed:c8:e2:09:1b:fb:a9:30:94:ab:3a:a5:e1:9f:90:8d:8f:53: dd:39:eb:42:ee:90:da:da:e7:68:77:a3:f0:15:c7:5a:41:04: 29:4c:54:a8:ee:40:f1:78:43:33:a7:91:38:b8:ec:3e:93:53: 68:6c:a5:e0:93:1e:e5:71:ce:43:09:f3:bd:d0:45:df:e1:c2: c2:4a:19:0e -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoOUEzQTY3RUREQ0QwOTc3NTMzQTlBMEI4QzQ5RjRDMDEw MEM4NTM5MTAeFw0yNTExMjQwOTQ3MzhaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjQyOWJhLTllNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDwrjsUNMg4Sx33tsjKQ0eUzf53TsV3AJjbdEQewGFOC1NV5F/CROVAQBdNwyN qCUSJ1Irl+rG3L80j1mPwGM35brWTl3nS0575zGAsclSH1A5jDfO2Xp0TpW8j227 qybnJk5OUvwlyABVqtugpeJkECZWElBmj23xB6NHSG4ZfhZs/9Wpt/KN/Ie7SQgZ yNYiWjRODgRbclwahwrE0vXmCcUc+YSifM51pFByNpUrVLym1RTJqvBXA0EDEY2h GVHpIO1FIV/R8r4hOit02cXuJAt46rwFlClNoZaNZAcScfPpjNo1zAiVG74uthvP O9VRoLr4n/9CP0Js+vM8qcKnAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUNy3c8Bar WwF7AtfclAVL/j4kkgQwHwYDVR0jBBgwFoAUmjpn7dzQl3UzqaC4xJ9MAQDIU5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0I4ODUzMUNBQzhF QzExRjBBMzQ0QUI0NUM0RjlBRTAyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWpwbjdkelFsM1V6cWFDNHhKOU1BUURJVTVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9CODg1MzFDQUM4RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi85Qzk1N0VGNkM5 MUExMUYwOTcxRUM2NzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAHqbhzANBgkqhkiG9w0BAQsFAAOCAQEAiBicQ3uHX2ujF+Fj 0MYPtspcIwLF6IDDKCf5qlaSsDAiG5nx5gHj4wdQuOUezQLgxCn/TExMDzZcZftH LNiGx1I8v1bJjVSVIhuYwcKJ1AUv88RckZBFnca7aEEIVXthvZ0aRsaI9aSIFapV zxDCaKKMY6oMoD3vLis1y8bwM+Ven/GQpXGJXLFWAIfyo4qaUzkvJZhvaxU8HWcs e2HIjgaizH+GTcwzrEoZ+3SsolmwTuOI7cjiCRv7qTCUqzql4Z+QjY9T3TnrQu6Q 2trnaHej8BXHWkEEKUxUqO5A8XhDM6eROLjsPpNTaGyl4JMe5XHOQwnzvdBF3+HC wkoZDg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:52:44 2025 by rpki-client