This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/F7968CA6C01411EA912AC365C4F9AE02.roa File: F7968CA6C01411EA912AC365C4F9AE02.roa (raw, json) Hash identifier: cndw19Zty56t27dvRNtU0GtVAt1H5pGdcRIcu3Z2IPk= Subject key identifier: CB:55:94:20:78:53:DA:F9:BF:15:2C:64:A5:5F:23:1F:8B:A0:9A:0D Certificate issuer: /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Certificate serial: 090B Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/F7968CA6C01411EA912AC365C4F9AE02.roa Signing time: Wed 26 Nov 2025 12:40:02 +0000 ROA not before: Wed 26 Nov 2025 12:40:02 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 14618 IP address blocks: 45.249.54.0/24 maxlen: 24 103.16.56.0/24 maxlen: 24 103.16.59.0/24 maxlen: 24 103.16.101.0/24 maxlen: 24 150.242.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2315 (0x90b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Validity Not Before: Nov 26 12:40:02 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6926f521-26e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2d:20:d1:2c:41:55:5a:5b:89:8f:47:c6:9a: b3:5c:ab:8e:ea:b5:a6:d1:1b:34:d3:8b:4b:57:84: 61:c4:f4:67:38:c0:d7:7b:57:37:4f:67:18:71:fb: 1c:87:94:80:b9:f3:5b:0f:ef:30:6d:45:b9:96:8f: e6:53:2a:79:46:1c:dd:94:86:66:9a:d3:2f:3f:8c: 9e:b3:98:4d:86:05:da:90:f7:65:78:c3:9f:ac:02: c0:13:3d:f3:98:8d:63:f0:d4:c8:cf:13:ad:50:51: 8f:e6:c9:66:6c:06:08:71:79:d7:aa:10:f3:b9:da: 39:ee:85:19:68:12:54:42:2b:48:d5:8b:25:d7:e8: 7e:6e:09:00:b9:f6:30:a4:55:67:d7:c8:9c:ee:58: 6a:f2:39:97:9f:04:03:5b:cb:b1:fc:55:08:b3:af: f7:dc:c0:fb:01:b1:cd:1c:6f:c3:5f:8d:aa:04:19: 70:69:83:96:da:a0:12:0d:01:97:55:3c:46:a6:14: 3f:00:a3:91:ed:83:8f:8d:a8:ec:4d:49:13:b6:1d: 2a:fc:dd:51:b9:54:cd:5f:bf:e5:bc:be:96:0f:05: 4a:62:32:94:e2:ef:a1:4e:df:46:a9:cc:f6:ae:2c: ac:a3:47:e9:ac:83:e0:5f:b2:3d:b4:0b:80:b0:00: 17:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:55:94:20:78:53:DA:F9:BF:15:2C:64:A5:5F:23:1F:8B:A0:9A:0D X509v3 Authority Key Identifier: keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/F7968CA6C01411EA912AC365C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.249.54.0/24 103.16.56.0/24 103.16.59.0/24 103.16.101.0/24 150.242.68.0/24 Signature Algorithm: sha256WithRSAEncryption 77:59:17:47:f8:48:8c:a3:6d:b7:26:59:33:b7:1f:dc:60:3d: 69:2c:79:d2:fc:77:3d:d8:4c:ae:82:fc:e3:41:c8:b5:44:95: d8:8a:fb:c8:fc:3d:29:b4:c3:de:ba:31:d0:19:29:13:95:7d: 27:77:10:d7:95:2c:da:45:1f:d4:2f:73:f6:13:83:09:7a:2c: a9:c5:e3:ef:42:b3:3e:c0:bc:03:d8:74:ff:04:91:ea:60:97: 26:e0:4a:10:39:62:49:a0:12:64:ac:ab:84:47:50:a6:92:32: 99:6c:8a:ae:f3:4e:c8:e2:29:0c:f2:74:32:5a:a4:a6:90:93: 0a:6c:5b:f1:9b:c9:1b:98:5b:1a:39:76:cb:c2:08:a1:8e:28: 2f:95:be:d0:dc:68:bf:f9:d8:9e:d3:7c:da:dd:c4:57:82:0f: 64:81:3e:73:9c:9d:7c:51:9b:80:53:cf:7f:6b:f3:e1:39:42: 1c:db:0b:b1:eb:82:29:2c:a7:a6:c7:18:82:4d:81:d8:ae:23: c4:90:42:5a:08:e5:ad:8e:cc:c4:ed:21:31:51:8a:9e:16:2a: 88:82:df:43:93:06:e6:53:69:98:ff:a8:d9:9b:cf:d9:d7:7a: 1a:0c:f9:12:1e:48:56:9f:e1:7b:97:de:96:ae:22:30:3d:2f: 52:a9:89:f8 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICCQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE2NEYxMTAvBgNVBAUTKEQ0RDdERDI1QzcxM0U3QTk1NTRDRjM1MkQ5MzJCRjgw REE2NTJERTQwHhcNMjUxMTI2MTI0MDAyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI2ZjUyMS0yNmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0i0g0SxBVVpbiY9HxpqzXKuO6rWm0Rs004tLV4RhxPRnOMDXe1c3T2cYcfsc h5SAufNbD+8wbUW5lo/mUyp5RhzdlIZmmtMvP4yes5hNhgXakPdleMOfrALAEz3z mI1j8NTIzxOtUFGP5slmbAYIcXnXqhDzudo57oUZaBJUQitI1Ysl1+h+bgkAufYw pFVn18ic7lhq8jmXnwQDW8ux/FUIs6/33MD7AbHNHG/DX42qBBlwaYOW2qASDQGX VTxGphQ/AKOR7YOPjajsTUkTth0q/N1RuVTNX7/lvL6WDwVKYjKU4u+hTt9Gqcz2 riyso0fprIPgX7I9tAuAsAAXlwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFMtVlCB4 U9r5vxUsZKVfIx+LoJoNMB8GA1UdIwQYMBaAFNTX3SXHE+epVUzzUtkyv4DaZS3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTY0Ri8zQzlFMkI1Q0Mw MTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2bFZUUE5TMlRLX2dOcGxM ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFOZmRKY2NUNTZsVlRQTlMyVEtfZ05wbExlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEE2NEYvM0M5RTJCNUNDMDE0MTFFQTgxNjg5MDY1QzRGOUFFMDIvRjc5NjhDQTZD MDE0MTFFQTkxMkFDMzY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAAt+TYDBABnEDgDBABnEDsDBABnEGUDBACW8kQwDQYJKoZI hvcNAQELBQADggEBAHdZF0f4SIyjbbcmWTO3H9xgPWksedL8dz3YTK6C/ONByLVE ldiK+8j8PSm0w966MdAZKROVfSd3ENeVLNpFH9Qvc/YTgwl6LKnF4+9Csz7AvAPY dP8EkepglybgShA5YkmgEmSsq4RHUKaSMplsiq7zTsjiKQzydDJapKaQkwpsW/Gb yRuYWxo5dsvCCKGOKC+VvtDcaL/52J7TfNrdxFeCD2SBPnOcnXxRm4BTz39r8+E5 QhzbC7Hrgiksp6bHGIJNgdiuI8SQQloI5a2OzMTtITFRip4WKoiC30OTBuZTaZj/ qNmbz9nXehoM+RIeSFaf4XuX3pauIjA9L1Kpifg= -----END CERTIFICATE-----Generated at Sat Dec 6 21:02:57 2025 by rpki-client