This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/B4B21A80C92411F099228126C4F9AE02.roa File: B4B21A80C92411F099228126C4F9AE02.roa (raw, json) Hash identifier: 8u4dud3avbhQgE5CopYuEjp9f5QzWDBwOaQ9kBXQeOY= Subject key identifier: D8:07:57:79:7A:04:9F:39:43:4F:FF:CD:CF:A5:6F:54:BE:3A:EF:FF Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Certificate serial: 45 Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/B4B21A80C92411F099228126C4F9AE02.roa Signing time: Mon 24 Nov 2025 10:59:54 +0000 ROA not before: Mon 24 Nov 2025 10:59:54 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 7715 IP address blocks: 61.19.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Validity Not Before: Nov 24 10:59:54 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69243aa9-6567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5b:83:27:7d:00:66:74:f8:1b:e4:c5:4c:10: 9d:46:07:50:84:14:0a:f8:fb:51:3a:eb:b7:d2:b0: b8:66:b3:cf:c4:a2:f4:c7:d5:fd:fd:5b:f9:39:8d: b2:d5:d5:bc:98:ba:bc:db:87:50:4b:71:11:81:c4: 2e:f0:b6:b9:cc:c2:ed:00:90:d8:83:83:00:a1:1f: 38:83:1a:82:b8:2b:7a:3f:b7:38:08:d9:23:03:8d: 47:9f:91:c2:8c:9a:f7:29:e9:a3:c3:b5:79:38:0b: 15:3b:69:a4:c5:4f:4a:44:89:29:45:ea:e6:8a:32: cb:5c:b5:78:6a:76:89:17:e1:7b:2b:0f:af:ad:9f: 4a:c1:46:ea:8e:5e:1a:5b:9a:c9:78:89:0d:70:c4: c7:58:dd:d0:cd:75:0f:40:e8:e9:23:13:59:55:37: b0:a0:7c:4a:80:60:35:23:30:0f:83:01:ed:0d:14: 90:77:f8:27:e2:a5:10:3c:72:3b:64:f2:02:cb:6d: 7c:e6:22:ef:fb:09:4e:12:8f:b5:c8:1d:55:9d:38: ab:40:71:84:cb:68:43:53:c6:90:1f:2e:cd:73:67: 4b:95:61:9c:8d:16:93:c6:55:52:17:0b:b6:1c:04: e6:5c:f0:39:f4:bd:c2:4c:fe:f3:4d:b5:a7:e4:e5: af:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:07:57:79:7A:04:9F:39:43:4F:FF:CD:CF:A5:6F:54:BE:3A:EF:FF X509v3 Authority Key Identifier: keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/B4B21A80C92411F099228126C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.19.222.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:6e:6b:a5:5b:83:5f:83:4f:31:f9:19:dd:8f:95:e8:69:d1: 5c:56:35:d9:c7:9e:df:f8:4b:8d:f3:b9:7b:30:c4:b3:66:0b: 52:3b:e2:b8:cd:59:74:ea:79:c6:d3:de:1c:45:24:56:2b:e1: 94:3a:17:c1:24:58:f3:bb:aa:3e:df:f9:51:e1:fe:02:54:f4: 5e:18:be:23:96:89:19:67:49:f9:54:4d:29:b4:e2:69:73:52: 86:17:c0:a6:e5:45:3e:8e:e8:e9:69:48:e4:4a:64:9c:01:c5: 94:0d:c8:14:d2:ea:15:b4:22:db:21:c2:93:61:81:0f:c7:30: eb:94:78:9f:86:e1:37:a1:bf:c6:af:28:06:bb:f4:7b:17:27: 66:9a:7d:9f:24:7d:4d:d0:f8:f8:b6:24:34:18:31:f7:8f:a4: 00:2b:54:e7:eb:7d:4a:63:54:12:5d:ad:1b:60:f8:66:7f:07: 61:b6:9d:c0:fc:a1:df:cd:c9:d5:b4:f0:95:24:4f:51:85:e5: f2:c5:c4:10:47:ef:79:1d:91:40:7a:58:f9:b2:c1:38:a3:db: 6b:da:fe:2e:df:59:e3:de:40:24:cd:9e:92:b3:8f:e0:ba:32: b4:6f:c1:15:4c:e1:68:08:82:77:f8:bc:0e:16:c1:cd:93:d9: 47:93:39:ed -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoOUEzQTY3RUREQ0QwOTc3NTMzQTlBMEI4QzQ5RjRDMDEw MEM4NTM5MTAeFw0yNTExMjQxMDU5NTRaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjQzYWE5LTY1NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfW4MnfQBmdPgb5MVMEJ1GB1CEFAr4+1E667fSsLhms8/EovTH1f39W/k5jbLV 1byYurzbh1BLcRGBxC7wtrnMwu0AkNiDgwChHziDGoK4K3o/tzgI2SMDjUefkcKM mvcp6aPDtXk4CxU7aaTFT0pEiSlF6uaKMstctXhqdokX4XsrD6+tn0rBRuqOXhpb msl4iQ1wxMdY3dDNdQ9A6OkjE1lVN7CgfEqAYDUjMA+DAe0NFJB3+CfipRA8cjtk 8gLLbXzmIu/7CU4Sj7XIHVWdOKtAcYTLaENTxpAfLs1zZ0uVYZyNFpPGVVIXC7Yc BOZc8Dn0vcJM/vNNtafk5a9TAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU2AdXeXoE nzlDT//Nz6VvVL467/8wHwYDVR0jBBgwFoAUmjpn7dzQl3UzqaC4xJ9MAQDIU5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0I4ODUzMUNBQzhF QzExRjBBMzQ0QUI0NUM0RjlBRTAyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWpwbjdkelFsM1V6cWFDNHhKOU1BUURJVTVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9CODg1MzFDQUM4RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi9CNEIyMUE4MEM5 MjQxMUYwOTkyMjgxMjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAD0T3jANBgkqhkiG9w0BAQsFAAOCAQEAbW5rpVuDX4NPMfkZ 3Y+V6GnRXFY12cee3/hLjfO5ezDEs2YLUjviuM1ZdOp5xtPeHEUkVivhlDoXwSRY 87uqPt/5UeH+AlT0Xhi+I5aJGWdJ+VRNKbTiaXNShhfApuVFPo7o6WlI5EpknAHF lA3IFNLqFbQi2yHCk2GBD8cw65R4n4bhN6G/xq8oBrv0excnZpp9nyR9TdD4+LYk NBgx94+kACtU5+t9SmNUEl2tG2D4Zn8HYbadwPyh383J1bTwlSRPUYXl8sXEEEfv eR2RQHpY+bLBOKPba9r+Lt9Z495AJM2ekrOP4LoytG/BFUzhaAiCd/i8DhbBzZPZ R5M57Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:58:44 2025 by rpki-client