This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/4A7E1926947511EC9795DF56C4F9AE02.roa File: 4A7E1926947511EC9795DF56C4F9AE02.roa (raw, json) Hash identifier: XGuuKVGIEltroOkaLIfkXvo4+Qd8e1UxzERGE1Xa7EM= Subject key identifier: 81:54:BF:BE:78:FA:F7:7F:99:F5:CC:D6:F3:5B:E1:AE:83:B3:10:19 Certificate issuer: /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Certificate serial: 041F Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/4A7E1926947511EC9795DF56C4F9AE02.roa Signing time: Mon 24 Nov 2025 23:15:53 +0000 ROA not before: Mon 24 Nov 2025 23:15:53 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139852 IP address blocks: 103.146.59.0/24 maxlen: 24 202.0.116.0/24 maxlen: 24 2001:df2:4d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1055 (0x41f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Validity Not Before: Nov 24 23:15:53 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6924e729-0d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ed:05:9a:44:4a:84:4e:bc:50:10:8a:91:62: 81:dc:1c:d5:48:e3:21:0e:86:a0:24:d7:9f:ac:29: 11:74:78:68:30:de:7d:44:2a:17:12:5d:1b:fb:a0: 03:a8:5a:64:f7:6d:34:bf:dd:e7:30:00:91:2d:44: 17:41:4f:20:ec:ca:09:a6:21:e2:29:a7:2a:fb:f0: e2:6f:5a:c7:bf:58:9d:e1:43:bd:b8:39:c5:a7:7d: db:0a:4b:75:a6:4b:03:ed:5b:bc:ba:b9:d1:49:5a: ce:50:c1:fd:23:24:da:7c:46:be:8e:d0:c6:38:89: dd:3f:22:53:04:64:23:b0:b5:c9:e6:ed:83:0c:aa: 6d:c8:93:ad:06:7e:37:94:51:dc:43:1e:ca:3c:9a: 74:ba:de:78:8c:b4:14:4a:22:82:83:20:bb:eb:69: 27:25:e0:ce:ca:d4:2b:dd:55:e9:83:8a:72:31:34: 17:a7:a5:3a:8e:17:fe:2e:fa:21:71:7e:35:a4:7c: a5:9c:1c:96:58:0e:1d:37:ce:fd:92:ed:5a:91:e9: 4c:ca:2c:12:d4:bf:1f:fa:09:6c:f9:fd:e6:99:40: db:b2:52:46:4b:55:7b:36:24:17:ed:89:b2:34:e6: 89:7e:f7:22:5a:85:2e:08:00:21:fe:02:33:90:6d: df:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:54:BF:BE:78:FA:F7:7F:99:F5:CC:D6:F3:5B:E1:AE:83:B3:10:19 X509v3 Authority Key Identifier: keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/4A7E1926947511EC9795DF56C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.59.0/24 202.0.116.0/24 IPv6: 2001:df2:4d80::/48 Signature Algorithm: sha256WithRSAEncryption 32:99:c9:06:b4:8e:f2:00:e6:c3:d8:9e:7f:a3:f8:53:0c:b5: eb:f7:5f:2a:ef:4a:8e:a4:4c:d6:78:2f:f2:42:09:bb:2c:44: 3f:f5:5c:9f:83:2d:27:fd:be:17:a3:27:9d:6f:66:08:f2:f9: 3d:99:5a:66:d1:51:11:a3:80:59:94:56:76:74:1c:8d:88:4c: 5f:10:a2:de:65:99:4c:8c:2e:7a:d8:c3:b7:b0:33:e2:93:57: de:a0:e2:06:98:78:7c:bc:b2:6b:46:2b:3b:35:d3:fd:fc:eb: d1:cd:6c:a4:3e:13:03:17:68:7c:6d:d0:db:a8:5b:41:e3:09: 33:c5:bd:70:8b:c1:c1:7b:12:92:25:1d:27:72:2b:bf:d8:f3: 8e:84:79:18:c2:27:87:54:b2:9c:85:a7:e0:d2:96:c8:ee:af: 56:2d:43:2d:b7:73:a5:4f:84:fa:59:99:58:39:3d:98:aa:ea: 07:9f:c9:f2:67:51:be:e6:6e:e9:40:f3:1f:5e:62:38:59:46: e2:be:a9:9a:83:47:5d:57:23:fe:0e:c2:84:62:bf:0b:e9:cc: 0d:e2:ea:f2:7f:89:74:71:9f:12:62:b0:8b:ae:b0:0b:2b:61: cc:88:58:8c:a0:33:b4:94:14:21:85:d3:dd:5e:4b:f6:db:f7: 15:0e:bc:1f -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMjAxMTAvBgNVBAUTKEI2MzIxM0Q4RTY2MkY0NTRCRUFFRUM3RjNDNDJFM0FG NkY4OTVGQjIwHhcNMjUxMTI0MjMxNTUzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI0ZTcyOS0wZDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqO0FmkRKhE68UBCKkWKB3BzVSOMhDoagJNefrCkRdHhoMN59RCoXEl0b+6AD qFpk9200v93nMACRLUQXQU8g7MoJpiHiKacq+/Dib1rHv1id4UO9uDnFp33bCkt1 pksD7Vu8urnRSVrOUMH9IyTafEa+jtDGOIndPyJTBGQjsLXJ5u2DDKptyJOtBn43 lFHcQx7KPJp0ut54jLQUSiKCgyC762knJeDOytQr3VXpg4pyMTQXp6U6jhf+Lvoh cX41pHylnByWWA4dN879ku1akelMyiwS1L8f+gls+f3mmUDbslJGS1V7NiQX7Ymy NOaJfvciWoUuCAAh/gIzkG3f7QIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFIFUv754 +vd/mfXM1vNb4a6DsxAZMB8GA1UdIwQYMBaAFLYyE9jmYvRUvq7sfzxC469viV+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAyMC9CRTFFRTUwNDk0 NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlGUy1ydXhfUEVManIyLUpY N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqSVQyT1ppOUZTLXJ1eF9QRUxqcjItSlg3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzUwMjAvQkUxRUU1MDQ5NDcwMTFFQzkxQjQ2QzREQzRGOUFFMDIvNEE3RTE5MjY5 NDc1MTFFQzk3OTVERjU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnkjsDBADKAHQwDwQCAAIwCQMHACABDfJNgDANBgkqhkiG 9w0BAQsFAAOCAQEAMpnJBrSO8gDmw9ief6P4Uwy16/dfKu9KjqRM1ngv8kIJuyxE P/Vcn4MtJ/2+F6MnnW9mCPL5PZlaZtFREaOAWZRWdnQcjYhMXxCi3mWZTIwuetjD t7Az4pNX3qDiBph4fLyya0YrOzXT/fzr0c1spD4TAxdofG3Q26hbQeMJM8W9cIvB wXsSkiUdJ3Irv9jzjoR5GMInh1SynIWn4NKWyO6vVi1DLbdzpU+E+lmZWDk9mKrq B5/J8mdRvuZu6UDzH15iOFlG4r6pmoNHXVcj/g7ChGK/C+nMDeLq8n+JdHGfEmKw i66wCythzIhYjKAztJQUIYXT3V5L9tv3FQ68Hw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:59:00 2025 by rpki-client