This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/9554034062CB11EEA41B6D2EC4F9AE02.roa File: 9554034062CB11EEA41B6D2EC4F9AE02.roa (raw, json) Hash identifier: nbkTbykiLlARgbR0z0FxjTjNtysYoEhuBaiNBllpUH4= Subject key identifier: 91:6B:C8:C1:F3:2B:E6:0A:CF:E8:3C:C0:A0:B9:0C:45:99:86:2B:D4 Certificate issuer: /CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F Certificate serial: 351F Authority key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/9554034062CB11EEA41B6D2EC4F9AE02.roa Signing time: Thu 20 Nov 2025 15:31:07 +0000 ROA not before: Thu 20 Nov 2025 15:31:06 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 63961 IP address blocks: 103.28.120.0/22 maxlen: 24 163.47.36.0/22 maxlen: 24 203.96.188.0/22 maxlen: 24 2402:f500::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13599 (0x351f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AEFA, serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F Validity Not Before: Nov 20 15:31:06 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=691f343a-0474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bf:ea:ff:d0:16:de:ab:bb:55:c8:17:1a:db: 86:e5:aa:73:7d:e3:aa:5f:64:a4:21:8f:cd:e9:da: 25:c0:4a:74:26:cc:f2:97:96:17:20:71:e4:33:79: 1f:16:31:6f:0f:e6:55:cb:d5:4d:59:d3:2e:a1:87: 42:94:89:a3:38:13:ce:ef:a0:2f:3a:88:99:6a:01: 76:78:f6:8d:21:83:dc:7a:d9:1e:e8:c8:f2:a5:1f: 71:6e:42:45:e0:5a:29:63:b9:39:59:48:6d:c8:44: 83:1e:21:1a:ec:7e:69:31:27:b1:22:c8:69:28:83: 49:c7:88:1d:be:f9:14:6b:c7:c7:6c:f9:66:26:c0: 60:d4:8e:ad:1e:f5:ad:61:d6:e1:69:c1:e5:c2:fe: c0:f7:e3:9a:48:23:2f:1f:69:d4:9d:71:43:f5:d1: 49:fe:a1:71:95:bf:cb:ba:f4:50:ed:a1:15:d7:8c: f0:7d:21:53:b0:59:e8:c8:7c:99:cc:65:33:c3:88: ed:b1:b7:6e:e1:fd:a3:f7:d6:e1:8e:32:46:a2:75: b7:a3:16:72:fe:87:8c:78:a1:a3:b2:27:a0:2c:2b: 22:19:06:d4:c1:02:0a:4d:6a:c1:07:fa:9a:4e:dc: ec:a6:3e:aa:a5:5c:d7:18:c3:18:18:42:b9:e1:a3: d4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6B:C8:C1:F3:2B:E6:0A:CF:E8:3C:C0:A0:B9:0C:45:99:86:2B:D4 X509v3 Authority Key Identifier: keyid:8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/9554034062CB11EEA41B6D2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.28.120.0/22 163.47.36.0/22 203.96.188.0/22 IPv6: 2402:f500::/32 Signature Algorithm: sha256WithRSAEncryption 33:88:10:f1:21:e1:20:85:1e:da:30:da:a0:d4:75:26:15:e2: 41:bd:2a:40:0a:87:94:36:9a:2e:b9:a7:97:40:b4:ea:1b:fc: 60:af:80:df:5f:2e:86:e0:9a:3c:9a:33:3a:c4:38:df:a8:eb: 0a:4f:18:b5:35:89:f9:48:ce:fe:bf:75:a0:49:8b:d0:88:15: c0:37:a9:76:8a:5d:61:67:d4:15:f6:da:4a:3c:09:8b:93:32: 66:b0:bb:9c:16:e5:50:26:a2:08:05:27:70:36:0b:75:ca:da: c3:0c:7d:21:4b:a0:bb:0d:d4:08:5e:1a:01:7f:28:0f:40:44: 78:42:56:f6:57:f9:24:9c:42:17:49:32:4c:99:ba:8e:fb:d3: db:68:09:cf:8a:65:90:63:10:f2:15:6a:b3:4e:d9:d6:20:b7: 58:4e:1c:8c:de:7c:3c:b3:6e:97:2b:84:86:7b:5d:90:e4:48: e7:ef:2d:ba:af:52:ff:ff:a2:dd:7b:a0:82:c4:4d:e2:4c:e2: 8f:87:4a:90:a3:43:fb:91:2d:8f:cd:97:e5:00:87:1f:b2:d9: 97:8c:61:95:ea:fe:fa:2f:ad:83:70:c9:fc:5d:92:ae:9c:a2: cf:6f:23:97:0c:6d:73:4c:07:f7:2c:b7:3c:8e:3b:dc:41:42: fd:0f:f5:bd -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICNR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFFRkExMTAvBgNVBAUTKDhEMDk5QjE2QkU5NTc1RENCNEJCMDY4NTg3OTc5OTlG NTVFNjAzNUYwHhcNMjUxMTIwMTUzMTA2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFmMzQzYS0wNDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1r/q/9AW3qu7VcgXGtuG5apzfeOqX2SkIY/N6dolwEp0Jszyl5YXIHHkM3kf FjFvD+ZVy9VNWdMuoYdClImjOBPO76AvOoiZagF2ePaNIYPcetke6MjypR9xbkJF 4FopY7k5WUhtyESDHiEa7H5pMSexIshpKINJx4gdvvkUa8fHbPlmJsBg1I6tHvWt YdbhacHlwv7A9+OaSCMvH2nUnXFD9dFJ/qFxlb/LuvRQ7aEV14zwfSFTsFnoyHyZ zGUzw4jtsbdu4f2j99bhjjJGonW3oxZy/oeMeKGjsiegLCsiGQbUwQIKTWrBB/qa Ttzspj6qpVzXGMMYGEK54aPU7QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJFryMHz K+YKz+g8wKC5DEWZhivUMB8GA1UdIwQYMBaAFI0Jmxa+lXXctLsGhYeXmZ9V5gNf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUVGQS9DNEI1OTI2NjFE QTkxMUUyOTZCQkZFQTQwOEIwMkNEMi9qUW1iRnI2VmRkeTB1d2FGaDVlWm4xWG1B MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pRbWJGcjZWZGR5MHV3YUZoNWVabjFYbUExOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFFRkEvQzRCNTkyNjYxREE5MTFFMjk2QkJGRUE0MDhCMDJDRDIvOTU1NDAzNDA2 MkNCMTFFRUE0MUI2RDJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnHHgDBAKjLyQDBALLYLwwDQQCAAIwBwMFACQC9QAwDQYJ KoZIhvcNAQELBQADggEBADOIEPEh4SCFHtow2qDUdSYV4kG9KkAKh5Q2mi65p5dA tOob/GCvgN9fLobgmjyaMzrEON+o6wpPGLU1iflIzv6/daBJi9CIFcA3qXaKXWFn 1BX22ko8CYuTMmawu5wW5VAmoggFJ3A2C3XK2sMMfSFLoLsN1AheGgF/KA9ARHhC VvZX+SScQhdJMkyZuo7709toCc+KZZBjEPIVarNO2dYgt1hOHIzefDyzbpcrhIZ7 XZDkSOfvLbqvUv//ot17oILETeJM4o+HSpCjQ/uRLY/Nl+UAhx+y2ZeMYZXq/vov rYNwyfxdkq6cos9vI5cMbXNMB/cstzyOO9xBQv0P9b0= -----END CERTIFICATE-----Generated at Sat Dec 6 23:24:46 2025 by rpki-client