This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/DF8912BEB1E511EB90B9DD25C4F9AE02.roa File: DF8912BEB1E511EB90B9DD25C4F9AE02.roa (raw, json) Hash identifier: w9Q4LbQBv/r1wpfWv+7crG/G/IEurEqB9yaot6eLxEo= Subject key identifier: 58:71:AD:B6:FC:2F:29:77:55:FF:FC:E1:70:49:52:37:79:7F:BF:DB Certificate issuer: /CN=A9137917/serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98 Certificate serial: 0804 Authority key identifier: F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/DF8912BEB1E511EB90B9DD25C4F9AE02.roa Signing time: Wed 31 Dec 2025 21:17:22 +0000 ROA not before: Wed 31 Dec 2025 21:17:22 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 38230 IP address blocks: 103.158.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2052 (0x804) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137917, serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98 Validity Not Before: Dec 31 21:17:22 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=695592e2-b6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b2:5a:1f:bc:3d:a3:e0:d4:29:22:2f:cc:d5: 1d:d6:92:8e:26:6b:5c:3d:19:c0:7c:92:e0:e7:11: 0b:73:bc:e5:c0:0c:65:18:4f:e8:6b:99:24:b3:fd: 0c:20:99:13:88:44:7c:04:fa:48:c9:d6:44:56:17: cb:17:56:0f:08:ce:3e:03:5a:74:2a:db:fe:44:7b: 3f:80:60:db:7a:6b:fa:12:ca:21:94:3e:f3:e4:b0: 9f:7c:29:7d:55:66:5d:3e:96:81:c2:89:13:00:9f: cb:d9:9c:89:4b:1c:16:1e:4b:86:be:9e:1e:90:8d: 2d:bf:df:75:6f:72:da:ee:e0:68:e8:eb:aa:54:ec: aa:ee:20:2e:c9:5f:94:a6:d9:ef:e9:90:e0:20:da: 43:6a:f2:8f:38:19:d9:23:fd:59:6d:84:a6:eb:da: 7a:37:6e:b6:4f:ef:73:8f:60:c3:19:2b:df:10:f2: b0:02:02:3c:f7:32:6f:1f:c5:f2:b6:5d:33:b5:23: 05:79:c0:2e:66:49:7f:bc:35:f4:41:fe:fa:40:34: 2d:7b:7d:f9:45:97:93:1b:fa:24:2c:77:cf:3b:0d: fc:df:69:3b:04:00:04:b9:d9:0e:7f:72:d6:9b:d7: 59:c5:0a:d6:e4:07:32:94:81:2f:7b:8e:1b:48:9c: 82:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:71:AD:B6:FC:2F:29:77:55:FF:FC:E1:70:49:52:37:79:7F:BF:DB X509v3 Authority Key Identifier: keyid:F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/DF8912BEB1E511EB90B9DD25C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.222.0/24 Signature Algorithm: sha256WithRSAEncryption 89:9b:88:e1:81:d0:50:c2:62:5c:c5:08:6c:73:50:88:5b:3d: cb:5a:2d:d3:57:63:13:48:c2:cb:29:3b:7e:11:eb:a3:ec:ff: f9:a3:69:47:4e:fd:f7:47:f9:8f:be:7c:98:77:22:bc:58:11: e3:64:de:75:1e:6a:a6:7f:da:ba:18:bd:a2:0d:22:22:c3:b9: 28:1a:38:d9:fb:0b:39:df:17:1a:65:ec:cc:27:e9:4a:d6:a1: 28:ae:11:59:b4:c3:e9:f9:53:40:f8:da:71:2b:38:ac:86:35: bd:ae:d9:df:87:57:50:39:4a:7c:58:df:ab:71:d4:43:b8:4c: ad:e2:8d:5e:74:9d:30:18:e7:37:41:14:3d:56:68:f7:fc:53: eb:23:83:b3:b2:11:2a:b7:6d:af:91:e4:06:84:d9:3b:44:64: 8c:ea:81:0f:07:21:44:e3:c2:01:fe:ee:5a:10:40:92:6e:8e: 09:7b:56:ee:d1:e6:c4:b4:c0:fb:16:13:9d:e3:61:7b:f0:60: 77:20:62:d3:82:b4:d8:1b:7a:46:1b:14:aa:89:bf:52:2f:94: 87:03:be:2a:04:12:29:e2:70:56:95:5e:e5:2c:60:64:05:9c: af:21:9b:27:51:f5:2f:73:c8:6d:48:8d:f8:76:5e:85:98:98: 68:5e:ba:5d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx Mzc5MTcxMTAvBgNVBAUTKEY0NTQxRkI3Nzk2NURFMTRBNTlGOUVGMjMzREUxOUY5 MjA1RjVGOTgwHhcNMjUxMjMxMjExNzIyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU1OTJlMi1iNmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrJaH7w9o+DUKSIvzNUd1pKOJmtcPRnAfJLg5xELc7zlwAxlGE/oa5kks/0M IJkTiER8BPpIydZEVhfLF1YPCM4+A1p0Ktv+RHs/gGDbemv6EsohlD7z5LCffCl9 VWZdPpaBwokTAJ/L2ZyJSxwWHkuGvp4ekI0tv991b3La7uBo6OuqVOyq7iAuyV+U ptnv6ZDgINpDavKPOBnZI/1ZbYSm69p6N262T+9zj2DDGSvfEPKwAgI89zJvH8Xy tl0ztSMFecAuZkl/vDX0Qf76QDQte335RZeTG/okLHfPOw3832k7BAAEudkOf3LW m9dZxQrW5AcylIEve44bSJyC7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFFhxrbb8 Lyl3Vf/84XBJUjd5f7/bMB8GA1UdIwQYMBaAFPRUH7d5Zd4UpZ+e8jPeGfkgX1+Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzkxNy80OTJBQjU5NDJB MDMxMUVCQTY5REREMkRDNEY5QUUwMi85RlFmdDNsbDNoU2xuNTd5TTk0Wi1TQmZY NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGUWZ0M2xsM2hTbG41N3lNOTRaLVNCZlg1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzc5MTcvNDkyQUI1OTQyQTAzMTFFQkE2OURERDJEQzRGOUFFMDIvREY4OTEyQkVC MUU1MTFFQjkwQjlERDI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnnt4wDQYJKoZIhvcNAQELBQADggEBAImbiOGB0FDCYlzF CGxzUIhbPctaLdNXYxNIwsspO34R66Ps//mjaUdO/fdH+Y++fJh3IrxYEeNk3nUe aqZ/2roYvaINIiLDuSgaONn7CznfFxpl7Mwn6UrWoSiuEVm0w+n5U0D42nErOKyG Nb2u2d+HV1A5SnxY36tx1EO4TK3ijV50nTAY5zdBFD1WaPf8U+sjg7OyESq3ba+R 5AaE2TtEZIzqgQ8HIUTjwgH+7loQQJJujgl7Vu7R5sS0wPsWE53jYXvwYHcgYtOC tNgbekYbFKqJv1IvlIcDvioEEinicFaVXuUsYGQFnK8hmydR9S9zyG1Ijfh2XoWY mGheul0= -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:48 2026 by rpki-client