This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/1C6ADB02525311EA939E4652C4F9AE02.roa File: 1C6ADB02525311EA939E4652C4F9AE02.roa (raw, json) Hash identifier: wjt3RhVXimrUUh+BJYE4KpZEBSs9RK3ig/uaNzPfOgQ= Subject key identifier: 16:29:4C:FB:BD:87:AD:F2:77:86:7D:E7:BA:A0:D5:FE:CD:13:55:46 Certificate issuer: /CN=A9144354/serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC Certificate serial: 11CC Authority key identifier: 47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/1C6ADB02525311EA939E4652C4F9AE02.roa Signing time: Thu 04 Dec 2025 17:18:12 +0000 ROA not before: Thu 04 Dec 2025 17:18:12 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 134926 IP address blocks: 103.127.156.0/24 maxlen: 24 103.127.157.0/24 maxlen: 24 103.127.159.0/24 maxlen: 24 2404:2340::/32 maxlen: 32 2404:2340::/36 maxlen: 36 2404:2340:1000::/36 maxlen: 36 2404:2340:2000::/36 maxlen: 36 2404:2340:3000::/36 maxlen: 36 2404:2340:4000::/36 maxlen: 36 2404:2340:5000::/36 maxlen: 36 2404:2340:6000::/36 maxlen: 36 2404:2340:7000::/36 maxlen: 36 2404:2340:8000::/36 maxlen: 36 2404:2340:9000::/36 maxlen: 36 2404:2340:a000::/36 maxlen: 36 2404:2340:b000::/36 maxlen: 36 2404:2340:c000::/36 maxlen: 36 2404:2340:d000::/36 maxlen: 36 2404:2340:e000::/36 maxlen: 36 2404:2340:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4556 (0x11cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144354, serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC Validity Not Before: Dec 4 17:18:12 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6931c254-cbeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:59:1e:66:a4:9a:25:03:83:c6:87:2e:b1:53: 30:e5:cf:88:33:65:f5:78:9f:9a:fe:1d:13:56:2c: 48:59:5b:22:a1:8b:e9:db:22:6c:79:3b:cf:3d:b0: 64:3b:f5:fc:68:ec:8b:da:39:2d:39:df:68:60:36: db:46:77:8f:73:de:ab:00:6c:5f:d9:5f:52:6f:ce: 83:e5:f9:c4:73:28:57:9d:c2:3b:62:51:04:67:ee: 38:c8:24:66:b7:b1:35:aa:a9:a1:95:b4:b4:fd:4e: ff:28:dd:6b:6d:2d:ee:d3:56:4d:ee:ad:3d:1e:11: 9d:99:2b:08:1d:35:b0:7e:8c:79:33:84:09:7b:bc: 6c:9b:b2:f7:7f:78:99:83:e0:6c:c8:87:75:c9:28: 9b:ef:6b:6e:bb:76:a0:0d:34:ea:70:7d:d2:c7:fa: 04:14:c6:24:4b:32:49:62:ac:8b:ab:37:45:5b:3b: 70:0b:4d:4e:d5:cc:5b:f6:ba:bc:9c:f6:69:b8:89: d2:27:e9:7b:5d:ab:07:4b:6d:cf:ea:80:1f:d9:16: d1:d0:05:a8:79:d9:28:c3:fb:e1:2b:18:41:a2:b8: 33:fa:8f:fb:53:1e:af:ed:7c:5f:df:3e:c4:5c:52: 6f:67:d9:93:76:91:92:9e:2a:d2:41:a6:2e:ec:47: 62:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:29:4C:FB:BD:87:AD:F2:77:86:7D:E7:BA:A0:D5:FE:CD:13:55:46 X509v3 Authority Key Identifier: keyid:47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/1C6ADB02525311EA939E4652C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.156.0/23 103.127.159.0/24 IPv6: 2404:2340::/32 Signature Algorithm: sha256WithRSAEncryption 0f:34:25:9a:07:e6:3b:af:5e:5e:b9:8c:75:31:68:22:09:62: 77:e0:52:1a:e6:b2:84:a7:63:06:58:17:4a:6b:5e:3a:af:37: c9:1d:99:7d:85:20:67:9f:f4:c3:53:eb:8b:fe:f4:27:68:8a: 89:3f:dc:63:a4:4c:78:09:72:98:22:18:0e:6b:4d:17:a4:ee: e9:7b:4b:44:dc:49:a5:47:cf:f0:88:19:14:28:39:84:ba:77: 51:0c:7c:64:ad:24:26:92:74:87:f3:d7:93:0f:c1:d3:64:61: 3d:f9:8b:4c:ea:b9:f8:3b:0e:e3:33:e4:6a:97:bf:ce:60:d7: 39:3e:ca:25:67:eb:2c:b1:b9:70:dc:e2:85:98:9f:ab:01:a6: da:d4:21:f4:33:72:25:d6:9e:75:e6:0a:51:57:da:d1:71:d4: 58:39:83:58:66:37:78:0b:d2:15:14:e8:0d:34:56:f1:de:dc: e7:df:f9:79:61:78:19:93:27:73:f1:2b:1b:e7:44:95:d6:43: 40:01:38:d8:9d:1c:c1:5f:b9:a3:c1:9f:54:88:97:6a:79:d4: ba:02:27:6d:17:90:a9:af:b2:b9:b2:e0:51:bd:2f:1e:09:03: 29:1c:21:e4:8a:cb:e4:08:43:d7:f1:06:a3:ca:74:82:e0:22: 7c:c7:9f:99 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzNTQxMTAvBgNVBAUTKDQ3RDA2QkQ3RUE4REYyMTk3RjcxMjcwQjc1Qzk2NEM3 OUFCOUYwQ0MwHhcNMjUxMjA0MTcxODEyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMxYzI1NC1jYmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA41keZqSaJQODxocusVMw5c+IM2X1eJ+a/h0TVixIWVsioYvp2yJseTvPPbBk O/X8aOyL2jktOd9oYDbbRnePc96rAGxf2V9Sb86D5fnEcyhXncI7YlEEZ+44yCRm t7E1qqmhlbS0/U7/KN1rbS3u01ZN7q09HhGdmSsIHTWwfox5M4QJe7xsm7L3f3iZ g+BsyId1ySib72tuu3agDTTqcH3Sx/oEFMYkSzJJYqyLqzdFWztwC01O1cxb9rq8 nPZpuInSJ+l7XasHS23P6oAf2RbR0AWoedkow/vhKxhBorgz+o/7Ux6v7Xxf3z7E XFJvZ9mTdpGSnirSQaYu7EdiawIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBYpTPu9 h63yd4Z957qg1f7NE1VGMB8GA1UdIwQYMBaAFEfQa9fqjfIZf3EnC3XJZMeaufDM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDM1NC82MUExMjZFNDA0 RTQxMUU5OENBRkFBN0JDNEY5QUUwMi9SOUJyMS1xTjhobF9jU2NMZGNsa3g1cTU4 TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I5QnIxLXFOOGhsX2NTY0xkY2xreDVxNThNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDQzNTQvNjFBMTI2RTQwNEU0MTFFOThDQUZBQTdCQzRGOUFFMDIvMUM2QURCMDI1 MjUzMTFFQTkzOUU0NjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFnf5wDBABnf58wDQQCAAIwBwMFACQEI0AwDQYJKoZIhvcN AQELBQADggEBAA80JZoH5juvXl65jHUxaCIJYnfgUhrmsoSnYwZYF0prXjqvN8kd mX2FIGef9MNT64v+9Cdoiok/3GOkTHgJcpgiGA5rTRek7ul7S0TcSaVHz/CIGRQo OYS6d1EMfGStJCaSdIfz15MPwdNkYT35i0zqufg7DuMz5GqXv85g1zk+yiVn6yyx uXDc4oWYn6sBptrUIfQzciXWnnXmClFX2tFx1Fg5g1hmN3gL0hUU6A00VvHe3Off +XlheBmTJ3PxKxvnRJXWQ0ABONidHMFfuaPBn1SIl2p51LoCJ20XkKmvsrmy4FG9 Lx4JAykcIeSKy+QIQ9fxBqPKdILgInzHn5k= -----END CERTIFICATE-----Generated at Sun Dec 7 00:41:50 2025 by rpki-client