This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/0357A064679D11EABD681D0FC4F9AE02.roa File: 0357A064679D11EABD681D0FC4F9AE02.roa (raw, json) Hash identifier: mb1FJ1ZS6esstfDqUEL1wYQIE+BKhyKC1hq9B43udJY= Subject key identifier: 27:C9:A9:17:FA:04:CA:89:3B:B5:40:A6:93:A6:FF:20:FA:E2:2B:16 Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Certificate serial: 0AAA Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/0357A064679D11EABD681D0FC4F9AE02.roa Signing time: Sun 16 Nov 2025 19:09:11 +0000 ROA not before: Sun 16 Nov 2025 19:09:11 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 136014 IP address blocks: 103.80.0.0/22 maxlen: 24 2400:47c0::/32 maxlen: 32 2400:47c0::/48 maxlen: 48 2400:47c0:1100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2730 (0xaaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149DF2, serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Validity Not Before: Nov 16 19:09:11 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691a2157-798e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:b3:e4:df:4c:97:e9:92:f0:e0:60:49:c1: 74:60:b4:93:f9:25:ab:d4:7e:f7:e2:31:7d:5f:8d: bc:13:31:78:65:76:93:1a:ce:22:81:90:89:1f:7c: 96:f8:9b:64:27:bb:47:16:ac:18:3b:77:1d:a1:fb: 43:13:1d:ce:6d:86:2f:e7:a4:d9:3c:34:31:f4:e3: 4d:c5:c4:75:15:8a:9b:30:65:6f:15:61:dc:50:45: 5c:ea:34:7c:e6:f0:87:5b:2c:ef:f4:ce:cb:4d:e7: 29:ef:3e:6b:63:00:ec:32:bf:cb:58:2d:c5:98:76: fe:cf:31:33:a6:c7:a8:22:56:a4:96:05:95:5f:51: 69:5f:53:98:d7:62:63:40:ae:d9:37:f8:84:39:60: 58:c4:1c:13:3a:7f:81:8f:a3:12:0b:e6:dc:28:c7: da:c5:d5:42:15:49:1b:df:6c:0f:59:cd:57:dc:32: e6:38:97:f2:cf:6f:a6:c8:1e:b1:5e:65:8e:88:27: b4:18:67:03:39:92:e7:cd:e7:eb:5e:c9:70:f9:a0: 08:19:cf:20:ff:d9:cb:85:8b:cf:c1:9a:6f:98:43: f0:ef:42:a7:8b:4c:b4:5f:ab:2b:99:41:af:03:c4: 72:b0:da:c7:dd:63:bc:ec:fb:89:30:0f:bd:b8:ab: f3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C9:A9:17:FA:04:CA:89:3B:B5:40:A6:93:A6:FF:20:FA:E2:2B:16 X509v3 Authority Key Identifier: keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/0357A064679D11EABD681D0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.80.0.0/22 IPv6: 2400:47c0::/32 Signature Algorithm: sha256WithRSAEncryption 77:9b:eb:8b:00:d5:61:6e:e2:88:ca:85:d0:33:1c:3e:a9:d9: 75:94:f4:95:df:e2:1f:d6:42:51:ba:d5:1f:1e:1f:1d:f9:c5: 35:c8:9d:1a:9b:9c:06:7f:47:00:1a:71:c5:07:48:c0:45:51: 1f:72:1e:44:a2:8f:6c:06:60:0e:d8:3d:99:92:e0:3f:54:ce: d2:17:66:e9:e6:4c:e2:c9:78:85:c1:4e:e7:dd:a7:d8:b6:a3: d1:9e:95:4c:75:f9:87:a6:29:93:09:48:cb:37:39:1c:85:da: c3:ef:63:d6:84:9f:68:61:f8:ff:15:cb:f8:12:81:19:73:2b: aa:3f:9b:89:91:1e:dc:74:48:e2:7b:eb:c3:07:83:e9:de:37: 8a:4b:11:5f:ef:e0:76:f0:cb:52:3c:a8:9b:80:02:b9:0b:68: ef:e7:14:e4:10:17:ba:8f:bd:19:44:50:b7:fe:93:c3:ff:37: e5:a6:e6:79:62:6a:26:30:18:7e:2e:4c:ae:08:b8:8d:35:17: 83:00:d9:33:bf:59:53:19:6a:03:19:ce:3c:85:73:c3:6b:25: f8:65:bd:fb:b0:5b:b3:51:2b:00:eb:f9:20:b1:1e:a0:ee:5e: 9a:14:d0:d4:7d:60:a2:a7:d2:2b:57:ae:31:0a:76:11:e4:b9: 92:8a:b2:a2 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlERjIxMTAvBgNVBAUTKDUwRUZFMURGNzI5MTVFRDMzNjFEQjU1OUI1QjZCODNF QUUzRUYzQzAwHhcNMjUxMTE2MTkwOTExWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFhMjE1Ny03OThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhaz5N9Ml+mS8OBgScF0YLST+SWr1H734jF9X428EzF4ZXaTGs4igZCJH3yW +JtkJ7tHFqwYO3cdoftDEx3ObYYv56TZPDQx9ONNxcR1FYqbMGVvFWHcUEVc6jR8 5vCHWyzv9M7LTecp7z5rYwDsMr/LWC3FmHb+zzEzpseoIlaklgWVX1FpX1OY12Jj QK7ZN/iEOWBYxBwTOn+Bj6MSC+bcKMfaxdVCFUkb32wPWc1X3DLmOJfyz2+myB6x XmWOiCe0GGcDOZLnzefrXslw+aAIGc8g/9nLhYvPwZpvmEPw70Kni0y0X6srmUGv A8RysNrH3WO87PuJMA+9uKvzawIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCfJqRf6 BMqJO7VAppOm/yD64isWMB8GA1UdIwQYMBaAFFDv4d9ykV7TNh21WbW2uD6uPvPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OURGMi85OTk4RjFDNDY3 OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0TTJIYlZadGJhNFBxNC04 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPX2gzM0tSWHRNMkhiVlp0YmE0UHE0LTg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlERjIvOTk5OEYxQzQ2NzlCMTFFQTk5QUE0MjBBQzRGOUFFMDIvMDM1N0EwNjQ2 NzlEMTFFQUJENjgxRDBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnUAAwDQQCAAIwBwMFACQAR8AwDQYJKoZIhvcNAQELBQAD ggEBAHeb64sA1WFu4ojKhdAzHD6p2XWU9JXf4h/WQlG61R8eHx35xTXInRqbnAZ/ RwAaccUHSMBFUR9yHkSij2wGYA7YPZmS4D9UztIXZunmTOLJeIXBTufdp9i2o9Ge lUx1+YemKZMJSMs3ORyF2sPvY9aEn2hh+P8Vy/gSgRlzK6o/m4mRHtx0SOJ768MH g+neN4pLEV/v4Hbwy1I8qJuAArkLaO/nFOQQF7qPvRlEULf+k8P/N+Wm5nliaiYw GH4uTK4IuI01F4MA2TO/WVMZagMZzjyFc8NrJfhlvfuwW7NRKwDr+SCxHqDuXpoU 0NR9YKKn0itXrjEKdhHkuZKKsqI= -----END CERTIFICATE-----Generated at Sun Dec 7 07:04:32 2025 by rpki-client