This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/4495F306772E11EEB7DE544FC4F9AE02.roa File: 4495F306772E11EEB7DE544FC4F9AE02.roa (raw, json) Hash identifier: cTob+zKp5ftZnMPxIu39FTUVOIdO3knmMZZAbwhjm6o= Subject key identifier: CC:1B:E3:05:BA:79:83:CC:3E:F2:E9:68:67:6B:61:5F:3B:9F:4C:3F Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Certificate serial: 01A2 Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/4495F306772E11EEB7DE544FC4F9AE02.roa Signing time: Sat 29 Nov 2025 01:59:20 +0000 ROA not before: Sat 29 Nov 2025 01:59:20 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 151957 IP address blocks: 202.61.82.0/24 maxlen: 24 202.61.83.0/24 maxlen: 24 2401:4460::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:41:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B17, serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Validity Not Before: Nov 29 01:59:20 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=692a5378-9b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:20:3a:eb:f9:c5:80:97:35:42:ad:ee:1a:3a: 7f:4a:da:ec:01:3a:68:b1:4b:47:02:b7:8f:0e:69: ad:f6:38:0f:9d:dc:d1:6b:9a:63:15:50:f5:13:e4: 65:4b:34:df:e5:d2:df:12:8f:1a:ee:fe:3d:ef:45: 1b:df:f5:d0:13:61:fe:85:a7:80:df:49:96:08:8b: b4:53:c4:82:12:8b:35:a9:eb:80:b2:f0:43:c8:4a: 88:89:bd:bf:9a:9c:50:48:f6:0f:65:b5:7b:34:e1: 65:32:cc:79:bc:a7:2b:e5:c0:e8:d1:18:6a:3d:de: 5e:90:16:50:ba:a4:ad:45:03:c2:45:7b:4c:cd:11: 8d:a7:d1:04:40:60:a2:09:55:7e:66:67:91:f0:7a: 68:00:49:ba:ec:40:2f:f6:e2:c5:39:91:2a:a3:bb: b0:bd:ec:b1:4d:8d:96:6e:95:d6:3b:ef:2d:1a:62: 58:f7:5c:18:84:0b:0c:5a:99:b5:a1:58:b9:00:55: 7b:b1:cb:46:ee:78:ae:d8:33:1f:a9:d1:ca:23:39: d5:56:46:52:0f:4b:b5:be:a2:e3:24:41:66:24:e7: e4:24:67:ec:ed:d3:a8:24:07:7a:53:0f:00:d1:10: 57:a8:c7:a8:80:51:0c:5b:0a:ce:5f:54:6b:de:b0: c1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1B:E3:05:BA:79:83:CC:3E:F2:E9:68:67:6B:61:5F:3B:9F:4C:3F X509v3 Authority Key Identifier: keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/4495F306772E11EEB7DE544FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.61.82.0/23 IPv6: 2401:4460::/32 Signature Algorithm: sha256WithRSAEncryption 07:92:8c:4e:59:fa:86:a8:ec:6e:1b:41:11:30:a6:78:17:5c: e5:27:8d:0a:d8:77:bf:21:1e:2c:4f:af:e9:65:5c:ce:17:61: 7b:34:04:4c:c8:c7:c2:15:c3:27:00:c1:c3:9b:7f:f6:61:d0: 2b:15:dc:3e:a8:89:7b:00:c6:1d:33:e8:a7:69:dd:66:9f:de: 3a:be:7f:50:21:88:00:ab:52:fe:a8:f9:15:af:10:d2:14:b1: 56:29:33:3e:c5:7c:a6:40:dd:13:64:5c:b1:19:ed:29:d1:4f: 79:fa:5a:27:08:6a:ab:de:6a:ee:0d:4b:c4:b6:ca:07:be:95: 04:ea:01:49:2a:c3:1d:09:b1:10:d3:5c:87:86:f1:92:1a:68: 8d:c4:08:8f:ed:63:36:e9:d1:b6:11:bd:53:3f:20:86:f8:1d: f6:8a:0b:9c:5a:9b:6c:e0:6d:10:7d:8a:87:2a:07:27:2d:74: 8b:76:5d:c2:18:3f:a6:ce:90:78:c4:15:f4:6f:ee:cf:99:4e: df:94:dd:ec:7a:e3:7a:03:0e:31:35:64:41:c9:63:fb:1a:10: 12:fc:d0:be:cd:76:1e:df:22:32:10:a9:8d:1b:39:6c:25:ef: 35:15:7b:9b:83:d7:72:c3:ef:e5:d8:75:c6:94:4a:69:57:0c: db:e7:a6:b1 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTcxMTAvBgNVBAUTKDhEOTIzMDk4Q0Q2N0Y2RDFCRjI0Q0ZCRTJDM0RDQTBC NjY1QUJCOEMwHhcNMjUxMTI5MDE1OTIwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJhNTM3OC05YjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2iA66/nFgJc1Qq3uGjp/StrsATposUtHArePDmmt9jgPndzRa5pjFVD1E+Rl SzTf5dLfEo8a7v4970Ub3/XQE2H+haeA30mWCIu0U8SCEos1qeuAsvBDyEqIib2/ mpxQSPYPZbV7NOFlMsx5vKcr5cDo0RhqPd5ekBZQuqStRQPCRXtMzRGNp9EEQGCi CVV+ZmeR8HpoAEm67EAv9uLFOZEqo7uwveyxTY2WbpXWO+8tGmJY91wYhAsMWpm1 oVi5AFV7sctG7niu2DMfqdHKIznVVkZSD0u1vqLjJEFmJOfkJGfs7dOoJAd6Uw8A 0RBXqMeogFEMWwrOX1Rr3rDBoQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMwb4wW6 eYPMPvLpaGdrYV87n0w/MB8GA1UdIwQYMBaAFI2SMJjNZ/bRvyTPviw9ygtmWruM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxNy9FQTRCMTY1RTY4 RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0R19KTS0tTEQzS0MyWmF1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paSXdtTTFuOXRHX0pNLS1MRDNLQzJaYXU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhCMTcvRUE0QjE2NUU2OEVEMTFFRUI0QjVEMzYyQzRGOUFFMDIvNDQ5NUYzMDY3 NzJFMTFFRUI3REU1NDRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAHKPVIwDQQCAAIwBwMFACQBRGAwDQYJKoZIhvcNAQELBQAD ggEBAAeSjE5Z+oao7G4bQREwpngXXOUnjQrYd78hHixPr+llXM4XYXs0BEzIx8IV wycAwcObf/Zh0CsV3D6oiXsAxh0z6Kdp3Waf3jq+f1AhiACrUv6o+RWvENIUsVYp Mz7FfKZA3RNkXLEZ7SnRT3n6WicIaqveau4NS8S2yge+lQTqAUkqwx0JsRDTXIeG 8ZIaaI3ECI/tYzbp0bYRvVM/IIb4HfaKC5xam2zgbRB9iocqByctdIt2XcIYP6bO kHjEFfRv7s+ZTt+U3ex643oDDjE1ZEHJY/saEBL80L7Ndh7fIjIQqY0bOWwl7zUV e5uD13LD7+XYdcaUSmlXDNvnprE= -----END CERTIFICATE-----Generated at Sun Dec 7 03:08:36 2025 by rpki-client