This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/08754752218611EAA5DF883CC4F9AE02.roa File: 08754752218611EAA5DF883CC4F9AE02.roa (raw, json) Hash identifier: hA+WjNUTeG1AnXZuvAjzzld8pq8Hs2wTD6vIEKRFdS0= Subject key identifier: F4:E7:61:E8:98:16:3D:E9:BF:C2:34:A8:64:E2:02:2A:E7:90:9A:54 Certificate issuer: /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Certificate serial: 0C21 Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/08754752218611EAA5DF883CC4F9AE02.roa Signing time: Fri 28 Nov 2025 18:22:59 +0000 ROA not before: Fri 28 Nov 2025 18:22:59 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 38562 IP address blocks: 103.253.246.0/23 maxlen: 23 103.253.246.0/24 maxlen: 24 103.253.247.0/24 maxlen: 24 122.152.48.0/23 maxlen: 24 122.152.50.0/24 maxlen: 24 122.152.51.0/24 maxlen: 24 122.152.52.0/22 maxlen: 22 122.152.52.0/24 maxlen: 24 122.152.53.0/24 maxlen: 24 122.152.54.0/24 maxlen: 24 122.152.55.0/24 maxlen: 24 2405:a840::/32 maxlen: 32 2405:a840::/34 maxlen: 34 2405:a840::/36 maxlen: 36 2405:a840:1000::/36 maxlen: 36 2405:a840:2000::/36 maxlen: 36 2405:a840:3000::/36 maxlen: 36 2405:a840:4000::/34 maxlen: 34 2405:a840:4000::/36 maxlen: 36 2405:a840:5000::/36 maxlen: 36 2405:a840:6000::/36 maxlen: 36 2405:a840:7000::/36 maxlen: 36 2405:a840:8000::/34 maxlen: 34 2405:a840:8000::/36 maxlen: 36 2405:a840:9000::/36 maxlen: 36 2405:a840:a000::/36 maxlen: 36 2405:a840:b000::/36 maxlen: 36 2405:a840:c000::/36 maxlen: 36 2405:a840:d000::/36 maxlen: 36 2405:a840:e000::/36 maxlen: 36 2405:a840:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3105 (0xc21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130EA4, serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Validity Not Before: Nov 28 18:22:59 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6929e883-87e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:4f:26:ba:9d:60:bd:a2:8f:93:2f:d7:30: 54:e8:7f:19:32:b7:13:11:7c:eb:04:36:aa:50:ec: 80:b9:00:12:0c:5d:b8:80:3d:ef:74:5d:f1:96:45: 70:c1:62:75:cd:3d:b0:98:79:5a:42:ba:10:b0:cb: 6e:83:09:b8:46:3c:c7:13:0d:04:aa:da:b2:ae:29: b0:d8:0d:84:b1:d9:3d:f9:65:ca:59:6e:06:80:e8: 42:2b:fb:45:5a:40:60:dd:44:1f:ff:bc:49:a8:3e: f6:b0:ca:b8:23:75:b0:38:77:00:37:d7:3f:30:b4: 54:fc:44:c5:39:11:da:94:76:5d:80:e0:06:1b:ff: c5:e7:b2:1b:0d:5a:c2:8b:7a:ab:3d:ab:09:1a:0b: d2:da:93:e6:e0:29:30:4f:1d:5b:3c:21:fe:ca:a3: 4b:64:58:1e:5a:0b:35:ec:12:d7:be:2b:0e:43:9d: cb:a7:ec:24:96:47:e9:7c:3a:e4:55:22:3c:b1:75: e7:e5:b8:03:05:fe:e5:fa:b4:3d:2f:00:d3:09:2b: 33:b4:8a:79:3f:4e:82:18:b8:48:23:73:84:81:4d: f5:02:ac:93:62:2f:6a:41:f7:aa:ad:19:7c:36:67: 7f:5e:53:90:27:8b:a8:d6:46:8b:a1:89:1c:73:89: c4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E7:61:E8:98:16:3D:E9:BF:C2:34:A8:64:E2:02:2A:E7:90:9A:54 X509v3 Authority Key Identifier: keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/08754752218611EAA5DF883CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.253.246.0/23 122.152.48.0/21 IPv6: 2405:a840::/32 Signature Algorithm: sha256WithRSAEncryption 52:bf:9a:34:21:11:cb:ab:d3:0c:39:af:b1:ba:69:b8:38:1a: ba:ca:57:df:13:70:10:d4:99:3c:28:14:c2:a5:3b:d4:7b:c4: 28:c6:85:dd:2c:23:25:e3:a9:23:88:0c:8e:a1:0f:b7:af:5e: 47:99:31:02:31:1e:69:40:df:69:9d:0b:c6:61:1c:a2:95:28: f4:68:4e:73:b6:05:ac:89:97:31:65:af:7b:db:14:f5:26:60: eb:c4:7a:ca:b8:eb:a0:ad:8d:b9:af:2c:16:fb:90:c3:a8:1d: 18:b6:f3:81:04:f0:6a:9c:b8:13:75:e1:c6:d3:88:20:c5:71: 0d:17:b8:c6:3a:bf:54:a2:75:55:ee:f7:3c:b4:6a:f0:8a:11: 33:a8:85:20:3c:87:06:b1:b8:87:54:1e:27:cc:a3:d8:4e:2a: 94:4e:b0:98:af:dc:8b:43:77:a4:2b:4c:7f:b8:1f:60:6d:2e: 9e:ee:22:35:81:26:db:0c:aa:95:87:ba:7f:63:65:6d:73:93: d0:7b:55:3f:19:c2:b2:b2:a9:bb:33:33:33:19:0f:8c:a3:32: 02:ce:4b:95:4b:9c:0e:f5:b9:61:97:6c:56:b8:ee:86:83:52: a3:15:ac:25:82:8f:e2:d2:e0:93:b9:61:ee:78:27:f6:09:c6: 75:bc:b4:af -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBFQTQxMTAvBgNVBAUTKDZBQ0E5QjlCNzMzMDkwNzA2QUZEM0Y4NTIzQ0MwQ0Mx OENENjhFMzEwHhcNMjUxMTI4MTgyMjU5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI5ZTg4My04N2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAud1PJrqdYL2ij5Mv1zBU6H8ZMrcTEXzrBDaqUOyAuQASDF24gD3vdF3xlkVw wWJ1zT2wmHlaQroQsMtugwm4RjzHEw0Eqtqyrimw2A2Esdk9+WXKWW4GgOhCK/tF WkBg3UQf/7xJqD72sMq4I3WwOHcAN9c/MLRU/ETFORHalHZdgOAGG//F57IbDVrC i3qrPasJGgvS2pPm4CkwTx1bPCH+yqNLZFgeWgs17BLXvisOQ53Lp+wklkfpfDrk VSI8sXXn5bgDBf7l+rQ9LwDTCSsztIp5P06CGLhII3OEgU31AqyTYi9qQfeqrRl8 Nmd/XlOQJ4uo1kaLoYkcc4nEaQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPTnYeiY Fj3pv8I0qGTiAirnkJpUMB8GA1UdIwQYMBaAFGrKm5tzMJBwav0/hSPMDMGM1o4x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEVBNC9CNjJDQ0U4MDIx ODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tIQnFfVC1GSTh3TXdZeldq akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzcWJtM013a0hCcV9ULUZJOHdNd1l6V2pqRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzBFQTQvQjYyQ0NFODAyMTg0MTFFQUEyRDA0MTNBQzRGOUFFMDIvMDg3NTQ3NTIy MTg2MTFFQUE1REY4ODNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFn/fYDBAN6mDAwDQQCAAIwBwMFACQFqEAwDQYJKoZIhvcN AQELBQADggEBAFK/mjQhEcur0ww5r7G6abg4GrrKV98TcBDUmTwoFMKlO9R7xCjG hd0sIyXjqSOIDI6hD7evXkeZMQIxHmlA32mdC8ZhHKKVKPRoTnO2BayJlzFlr3vb FPUmYOvEesq466CtjbmvLBb7kMOoHRi284EE8GqcuBN14cbTiCDFcQ0XuMY6v1Si dVXu9zy0avCKETOohSA8hwaxuIdUHifMo9hOKpROsJiv3ItDd6QrTH+4H2BtLp7u IjWBJtsMqpWHun9jZW1zk9B7VT8ZwrKyqbszMzMZD4yjMgLOS5VLnA71uWGXbFa4 7oaDUqMVrCWCj+LS4JO5Ye54J/YJxnW8tK8= -----END CERTIFICATE-----Generated at Sat Dec 6 22:05:16 2025 by rpki-client