This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/15B87C049DF911F085AD790CC4F9AE02.roa File: 15B87C049DF911F085AD790CC4F9AE02.roa (raw, json) Hash identifier: f7ozP310ZMgTh+DbH2cxCc+F5ij0yT7w2nX53gq8n18= Subject key identifier: 18:9D:A8:E6:FB:A3:30:A9:22:28:DD:C5:39:78:F4:9E:4D:B4:3C:67 Certificate issuer: /CN=A912F9FB/serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970 Certificate serial: 1979 Authority key identifier: BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/15B87C049DF911F085AD790CC4F9AE02.roa Signing time: Wed 03 Dec 2025 18:00:01 +0000 ROA not before: Wed 03 Dec 2025 18:00:01 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 26337 IP address blocks: 103.28.48.0/22 maxlen: 24 122.201.64.0/19 maxlen: 24 122.201.96.0/19 maxlen: 24 202.146.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6521 (0x1979) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F9FB, serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970 Validity Not Before: Dec 3 18:00:01 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69307aa1-0f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:51:1f:fb:c8:87:9a:8c:d3:d5:51:68:ba:89: 3b:bf:45:d2:7f:94:91:a3:4e:d4:d3:5e:ec:b2:2d: d6:9f:a4:3e:bb:c4:b4:ac:1b:bf:d6:0f:3d:36:0c: c6:1e:77:b8:81:7d:60:16:66:67:6c:cd:24:59:3c: b9:19:62:25:ce:2f:59:45:3e:d0:a1:9a:d1:7f:81: b1:a2:bf:89:7e:06:ab:89:a5:bc:0e:ef:1c:b0:51: 9e:be:23:06:98:2a:08:42:f8:11:38:cf:17:87:f4: 93:54:a3:02:01:4c:e3:28:17:d7:f4:e4:8d:e0:d0: a0:9e:a6:ef:e6:26:80:c3:c6:c9:17:73:4d:f2:a6: 71:b8:e9:d6:6e:8b:3f:7f:ea:36:5f:1f:cc:af:8e: c7:5e:b9:ca:90:f5:c8:58:0e:5b:a6:7b:ad:60:57: f7:d2:b2:c6:3a:f4:69:31:6d:a5:b1:93:b5:55:8b: 9c:0c:05:17:23:c9:52:97:18:57:fa:b3:f8:a5:e7: e3:70:39:5a:9c:ab:8e:60:0d:0b:2b:bd:4e:f6:dd: 15:b7:ab:cc:28:e4:6d:67:b7:83:62:f8:2b:2a:21: ce:9e:07:1d:92:25:90:4e:df:b2:2d:2c:ea:58:8f: 60:46:18:03:0f:cf:fc:1f:2b:e0:5e:1c:27:c5:a0: b3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9D:A8:E6:FB:A3:30:A9:22:28:DD:C5:39:78:F4:9E:4D:B4:3C:67 X509v3 Authority Key Identifier: keyid:BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/15B87C049DF911F085AD790CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.28.48.0/22 122.201.64.0/18 202.146.208.0/21 Signature Algorithm: sha256WithRSAEncryption 0e:b1:ca:e0:7c:6f:8a:ad:7f:a1:bb:c0:18:f9:68:2d:4b:1d: da:b8:da:3e:26:b7:66:6b:de:d4:45:9e:5a:55:32:dd:6c:eb: 8f:ec:cd:ae:0d:fc:e9:14:3d:b5:0c:26:38:97:f6:7e:7b:a4: 9e:00:f1:a7:89:16:7b:71:19:1c:4a:0e:a0:c8:da:19:5d:1e: 0e:99:0c:e8:9d:08:c8:dd:e6:b4:a5:c8:96:6e:0e:21:72:c8: 95:a6:52:70:f0:3c:1d:41:d0:fb:d9:61:25:b1:bf:37:dd:fb: 42:9d:cc:3b:36:29:55:ee:37:65:d0:d4:23:da:79:6f:d0:d6: 8a:c9:2a:66:75:d9:d0:83:ee:fd:34:72:9a:4f:88:1e:77:c4: c1:7e:6f:39:9b:54:65:6d:9e:ec:eb:ee:51:1d:27:58:8c:33: 80:3d:27:43:bd:fa:4a:32:ea:3a:1d:a2:53:94:73:2a:1a:2f: ab:bb:92:36:1f:23:97:9b:4f:a2:3b:93:c5:b5:fa:92:f5:f1: b7:a1:82:d3:5f:6c:f3:59:bf:d2:2c:86:09:4b:d0:a1:b2:56: d9:ac:b1:b1:06:59:13:89:ee:5d:68:59:c1:ff:24:98:8e:f3: bf:d1:00:a2:ef:49:32:ac:67:16:ea:95:d7:35:ff:d0:b8:4b: de:ff:85:d0 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICGXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY5RkIxMTAvBgNVBAUTKEJGRkRCN0VCRjQ1RDdDNjFCRjlEMjM5MDhBOUYzOEMz MzI5ODU5NzAwHhcNMjUxMjAzMTgwMDAxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMwN2FhMS0wZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1Ef+8iHmozT1VFouok7v0XSf5SRo07U017ssi3Wn6Q+u8S0rBu/1g89NgzG Hne4gX1gFmZnbM0kWTy5GWIlzi9ZRT7QoZrRf4Gxor+JfgariaW8Du8csFGeviMG mCoIQvgROM8Xh/STVKMCAUzjKBfX9OSN4NCgnqbv5iaAw8bJF3NN8qZxuOnWbos/ f+o2Xx/Mr47HXrnKkPXIWA5bpnutYFf30rLGOvRpMW2lsZO1VYucDAUXI8lSlxhX +rP4pefjcDlanKuOYA0LK71O9t0Vt6vMKORtZ7eDYvgrKiHOngcdkiWQTt+yLSzq WI9gRhgDD8/8HyvgXhwnxaCz8wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFBidqOb7 ozCpIijdxTl49J5NtDxnMB8GA1UdIwQYMBaAFL/9t+v0XXxhv50jkIqfOMMymFlw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjlGQi9BRjAwOThEMDg5 NkYxMUU3OEE4MUM4M0NDNEY5QUUwMi92XzIzNl9SZGZHR19uU09RaXA4NHd6S1lX WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZfMjM2X1JkZkdHX25TT1FpcDg0d3pLWVdYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkY5RkIvQUYwMDk4RDA4OTZGMTFFNzhBODFDODNDQzRGOUFFMDIvMTVCODdDMDQ5 REY5MTFGMDg1QUQ3OTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJnHDADBAZ6yUADBAPKktAwDQYJKoZIhvcNAQELBQADggEB AA6xyuB8b4qtf6G7wBj5aC1LHdq42j4mt2Zr3tRFnlpVMt1s64/sza4N/OkUPbUM JjiX9n57pJ4A8aeJFntxGRxKDqDI2hldHg6ZDOidCMjd5rSlyJZuDiFyyJWmUnDw PB1B0PvZYSWxvzfd+0KdzDs2KVXuN2XQ1CPaeW/Q1orJKmZ12dCD7v00cppPiB53 xMF+bzmbVGVtnuzr7lEdJ1iMM4A9J0O9+koy6jodolOUcyoaL6u7kjYfI5ebT6I7 k8W1+pL18behgtNfbPNZv9IshglL0KGyVtmssbEGWROJ7l1oWcH/JJiO87/RAKLv STKsZxbqldc1/9C4S97/hdA= -----END CERTIFICATE-----Generated at Sat Dec 6 21:20:44 2025 by rpki-client