This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/78F6DFE8CB6411F0A28C973CC4F9AE02.roa File: 78F6DFE8CB6411F0A28C973CC4F9AE02.roa (raw, json) Hash identifier: 0G3q5fTwQFZqfpwdr70W2RcZ9RQYxzqD0UwSER0DP5U= Subject key identifier: A3:1C:7E:06:87:5A:4B:9C:AB:85:D8:65:D3:8C:9D:59:47:80:EC:6B Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 3568 Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/78F6DFE8CB6411F0A28C973CC4F9AE02.roa Signing time: Thu 27 Nov 2025 10:12:31 +0000 ROA not before: Thu 27 Nov 2025 10:12:31 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 17408 IP address blocks: 202.3.160.0/20 maxlen: 23 202.3.160.0/21 maxlen: 24 202.3.168.0/23 maxlen: 24 202.3.170.0/24 maxlen: 24 202.3.172.0/22 maxlen: 24 202.3.176.0/21 maxlen: 24 202.3.186.0/23 maxlen: 24 202.3.188.0/22 maxlen: 24 202.55.224.0/19 maxlen: 24 202.153.160.0/23 maxlen: 23 202.153.160.0/24 maxlen: 24 202.153.161.0/24 maxlen: 24 202.153.162.0/23 maxlen: 23 202.153.162.0/24 maxlen: 24 202.153.164.0/24 maxlen: 24 202.153.165.0/24 maxlen: 24 202.153.167.0/24 maxlen: 24 202.153.168.0/23 maxlen: 23 202.153.168.0/24 maxlen: 24 202.153.169.0/24 maxlen: 24 202.153.170.0/24 maxlen: 24 202.153.172.0/24 maxlen: 24 202.153.173.0/24 maxlen: 24 202.153.174.0/23 maxlen: 23 202.153.174.0/24 maxlen: 24 202.153.175.0/24 maxlen: 24 202.153.176.0/22 maxlen: 22 202.153.176.0/23 maxlen: 24 202.153.178.0/23 maxlen: 23 202.153.178.0/24 maxlen: 24 202.153.179.0/24 maxlen: 24 202.153.180.0/24 maxlen: 24 202.153.181.0/24 maxlen: 24 202.153.182.0/23 maxlen: 24 202.153.184.0/21 maxlen: 24 202.153.193.0/24 maxlen: 24 202.153.194.0/23 maxlen: 23 202.153.194.0/24 maxlen: 24 202.153.196.0/22 maxlen: 22 202.153.196.0/23 maxlen: 24 202.153.198.0/23 maxlen: 24 202.153.202.0/23 maxlen: 24 202.153.204.0/22 maxlen: 22 202.153.204.0/23 maxlen: 24 202.153.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13672 (0x3568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: Nov 27 10:12:31 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6928240f-c4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:22:b6:cc:d8:27:16:c8:37:b3:09:15:0c: 05:07:6a:82:da:36:e9:f6:cc:cc:3f:7a:ba:a1:3b: 5c:2f:86:5d:4b:87:d8:a8:9f:59:0f:48:2d:09:74: 9a:5b:50:68:98:8a:d9:fe:6a:37:b8:c8:19:7a:33: 11:62:9a:2c:08:19:20:95:53:89:9a:38:e3:1b:54: a6:0e:28:9f:56:1c:3a:be:c5:e1:ac:f0:b1:34:8a: b9:7d:1c:2d:a5:8f:aa:89:6a:b3:bb:2c:c9:7d:52: 73:af:f0:98:73:86:7c:25:61:fb:3b:94:3b:94:c6: 5c:b8:40:3f:eb:a5:02:62:60:27:e3:78:96:e9:85: 5f:66:19:8b:bc:4c:c9:39:c4:2b:9f:bb:21:35:dc: 33:b4:cc:ab:a5:ca:2e:b0:de:37:57:4a:80:ae:b3: 23:1d:56:1e:4e:d0:7e:32:87:6c:5a:10:01:56:18: 02:88:23:dc:71:fc:89:91:f6:2a:75:4e:eb:ef:dc: 18:0b:e2:a7:0c:d6:0a:10:cc:4c:82:e2:96:de:5d: 5c:93:92:97:38:0b:2a:dc:8d:97:7a:b3:5f:5a:03: 13:4d:fe:41:a6:f9:80:ad:21:98:cd:8d:20:65:6a: d0:ab:5a:0d:f4:14:8e:95:6d:62:c4:b0:f5:63:8f: c0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1C:7E:06:87:5A:4B:9C:AB:85:D8:65:D3:8C:9D:59:47:80:EC:6B X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/78F6DFE8CB6411F0A28C973CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.3.160.0-202.3.183.255 202.3.186.0-202.3.191.255 202.55.224.0/19 202.153.160.0-202.153.165.255 202.153.167.0-202.153.170.255 202.153.172.0-202.153.191.255 202.153.193.0-202.153.199.255 202.153.202.0-202.153.207.255 Signature Algorithm: sha256WithRSAEncryption 1e:09:e5:c5:c9:bd:51:fc:10:3e:db:3b:fb:04:7a:37:7e:55: cc:b7:18:f6:c1:e1:a8:5f:de:4b:01:2a:8e:77:24:e2:85:e4: ef:b6:14:c1:3e:68:56:b8:58:f3:20:b0:d3:44:80:7e:50:0e: 91:7d:61:24:cb:3e:55:ef:c6:eb:aa:dc:f0:79:56:da:9a:e3: 91:88:72:f6:80:36:f1:58:d5:7a:ce:da:bd:d8:ef:31:2b:42: 6a:b0:17:c1:74:4c:a4:c3:98:8d:0b:5b:1d:e0:e4:e4:d5:c3: b3:5f:23:8e:f7:04:27:b9:3e:0a:98:27:42:1b:98:f4:53:ab: 03:f9:82:c5:2d:0d:5d:fe:20:8b:79:9a:2b:73:a3:ef:b1:2d: 76:4e:8c:53:e4:a0:a8:99:fa:fb:a2:b9:bb:6d:59:59:40:5d: 8d:6f:8e:f1:af:2c:99:89:0c:13:ea:1e:19:98:de:3c:2d:90: 5a:81:87:e3:31:c2:e3:65:71:03:e5:5f:0c:4d:9f:79:e7:11: b9:37:01:ce:3c:91:16:78:af:8b:bf:c4:a4:1a:da:da:b5:5c: fe:47:a3:41:99:80:17:a8:27:93:44:34:79:af:3a:2a:cb:53: 20:bb:73:eb:cd:4c:6a:39:f7:53:c5:19:e1:3d:8f:bc:db:e3: e0:f2:ea:34 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgICNWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjUxMTI3MTAxMjMxWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI4MjQwZi1jNGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWgitszYJxbIN7MJFQwFB2qC2jbp9szMP3q6oTtcL4ZdS4fYqJ9ZD0gtCXSa W1BomIrZ/mo3uMgZejMRYposCBkglVOJmjjjG1SmDiifVhw6vsXhrPCxNIq5fRwt pY+qiWqzuyzJfVJzr/CYc4Z8JWH7O5Q7lMZcuEA/66UCYmAn43iW6YVfZhmLvEzJ OcQrn7shNdwztMyrpcousN43V0qArrMjHVYeTtB+ModsWhABVhgCiCPccfyJkfYq dU7r79wYC+KnDNYKEMxMguKW3l1ck5KXOAsq3I2XerNfWgMTTf5BpvmArSGYzY0g ZWrQq1oN9BSOlW1ixLD1Y4/AfwIDAQABo4IC+DCCAvQwHQYDVR0OBBYEFKMcfgaH Wkucq4XYZdOMnVlHgOxrMB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjlFM0EvMTk3RUMwQjYxRDg2MTFFMkFCRUYyMkREMDhCMDJDRDIvNzhGNkRGRThD QjY0MTFGMEEyOEM5NzNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYEGCCsGAQUFBwEHAQH/ BHIwcDBuBAIAATBoMAwDBAXKA6ADBAPKA7AwDAMEAcoDugMEBsoDgAMEBco34DAM AwQFypmgAwQBypmkMAwDBADKmacDBADKmaowDAMEAsqZrAMEBsqZgDAMAwQAypnB AwQDypnAMAwDBAHKmcoDBATKmcAwDQYJKoZIhvcNAQELBQADggEBAB4J5cXJvVH8 ED7bO/sEejd+Vcy3GPbB4ahf3ksBKo53JOKF5O+2FME+aFa4WPMgsNNEgH5QDpF9 YSTLPlXvxuuq3PB5Vtqa45GIcvaANvFY1XrO2r3Y7zErQmqwF8F0TKTDmI0LWx3g 5OTVw7NfI473BCe5PgqYJ0IbmPRTqwP5gsUtDV3+IIt5mitzo++xLXZOjFPkoKiZ +vuiubttWVlAXY1vjvGvLJmJDBPqHhmY3jwtkFqBh+MxwuNlcQPlXwxNn3nnEbk3 Ac48kRZ4r4u/xKQa2tq1XP5Ho0GZgBeoJ5NENHmvOirLUyC7c+vNTGo591PFGeE9 j7zb4+Dy6jQ= -----END CERTIFICATE-----Generated at Sat Dec 6 18:22:26 2025 by rpki-client