This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/C772BB4AF7A111ED874BEC62C4F9AE02.roa File: C772BB4AF7A111ED874BEC62C4F9AE02.roa (raw, json) Hash identifier: SG84Ql2WZU2tVPSt9acptD5MjoBt3bPngYFdIyJhUe0= Subject key identifier: 03:57:79:3A:FA:73:17:2B:8B:58:BE:5B:06:AC:6A:58:71:91:3A:00 Certificate issuer: /CN=A9154020/serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743 Certificate serial: 187C Authority key identifier: F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/C772BB4AF7A111ED874BEC62C4F9AE02.roa Signing time: Fri 14 Nov 2025 16:34:34 +0000 ROA not before: Fri 14 Nov 2025 16:34:34 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 137020 IP address blocks: 103.126.60.0/23 maxlen: 23 103.126.60.0/24 maxlen: 24 103.126.61.0/24 maxlen: 24 2404:af40::/32 maxlen: 32 2404:af40::/48 maxlen: 48 2404:af40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6268 (0x187c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154020, serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743 Validity Not Before: Nov 14 16:34:34 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69175a1a-e856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fe:e8:24:ba:b7:ae:97:f1:f8:c2:03:ac:f5: 81:d0:34:e9:d2:e5:d9:46:6c:ab:2b:79:23:af:2a: 09:19:e0:24:07:e3:78:8e:d0:64:b8:1a:01:d8:46: c2:81:97:3b:48:1e:c0:e4:bc:d6:94:5e:99:d6:cf: 88:74:57:8b:46:03:61:07:29:48:ec:e5:2c:03:a2: 7b:f7:23:c7:38:64:e3:16:23:8b:c6:4c:42:8d:4e: 08:e2:e6:b1:95:72:e3:60:ad:6a:dd:19:df:0b:54: d9:7b:b6:a1:a9:e0:43:3e:fd:2a:57:68:14:40:9f: 2c:39:35:c7:8a:a3:87:e0:a8:97:0d:dd:82:11:78: 4d:16:69:95:74:a8:a8:f8:4b:ed:dc:19:91:c0:fc: 49:fc:34:bc:a6:da:2d:12:9c:72:f0:5b:78:e2:3d: 27:f5:aa:ba:a6:44:30:e3:50:01:84:cc:e5:36:8d: 9d:6e:91:3f:b6:93:c1:db:e5:d9:4b:f3:69:5d:84: 6e:f2:8d:70:5f:b2:75:71:81:79:11:4d:07:8d:60: bc:86:68:0c:c0:98:fc:26:a8:d4:fe:6b:a9:f0:5d: a6:3b:9e:ab:9e:25:64:7c:35:3a:9c:75:5c:9f:93: ee:43:ee:8e:2b:49:f4:52:ed:1f:69:aa:63:08:4c: 00:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:57:79:3A:FA:73:17:2B:8B:58:BE:5B:06:AC:6A:58:71:91:3A:00 X509v3 Authority Key Identifier: keyid:F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/C772BB4AF7A111ED874BEC62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.60.0/23 IPv6: 2404:af40::/32 Signature Algorithm: sha256WithRSAEncryption 0b:57:0f:22:8f:07:1e:c8:a2:2a:f4:cf:1a:3f:48:72:25:98: 84:ba:3d:1a:63:69:dc:50:f4:85:0e:73:7f:97:b4:d6:fb:75: 6b:b6:fd:f1:66:df:76:f8:f9:a4:31:9a:6f:db:39:4c:90:0c: 8c:b9:a3:d1:b8:c9:fb:cc:c6:1d:fa:7c:3d:01:02:40:2f:61: 66:43:2f:92:40:98:8b:f9:06:e3:0c:59:4e:2f:95:1f:e4:ab: 6a:d3:35:fc:97:ad:77:70:f6:d7:f9:0d:f4:e0:31:b7:56:05: 47:02:38:93:c6:9b:55:82:a5:7d:73:22:f8:27:9e:39:55:f9: f7:8e:ed:8b:f1:7a:c3:ae:e6:9b:3a:bd:52:dc:a7:f7:02:2e: 92:fb:44:a9:28:50:c4:73:bb:52:74:3e:61:b3:47:44:60:37: 6d:e8:b7:8b:2b:64:58:61:51:30:b2:ef:96:f6:e6:ed:3a:c8: b4:a5:b7:0c:d8:ea:b4:ae:f9:65:27:02:77:97:68:99:ef:82: 5b:ef:b0:48:2c:23:cb:54:58:57:f6:97:a1:94:cd:9f:a7:68: 18:15:d9:15:55:90:81:43:18:b5:b9:44:5f:5d:bb:ba:54:a8: 9f:c5:59:b6:11:f2:85:cd:c7:9f:3c:df:2e:86:58:a8:9c:d4: d1:54:df:a7 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICGHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQwMjAxMTAvBgNVBAUTKEY2Njk5MjY0NDE3QzIyOEI1MUZFMTVCM0IxRUNCNzg2 N0YyQTI3NDMwHhcNMjUxMTE0MTYzNDM0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE3NWExYS1lODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1v7oJLq3rpfx+MIDrPWB0DTp0uXZRmyrK3kjryoJGeAkB+N4jtBkuBoB2EbC gZc7SB7A5LzWlF6Z1s+IdFeLRgNhBylI7OUsA6J79yPHOGTjFiOLxkxCjU4I4uax lXLjYK1q3RnfC1TZe7ahqeBDPv0qV2gUQJ8sOTXHiqOH4KiXDd2CEXhNFmmVdKio +Evt3BmRwPxJ/DS8ptotEpxy8Ft44j0n9aq6pkQw41ABhMzlNo2dbpE/tpPB2+XZ S/NpXYRu8o1wX7J1cYF5EU0HjWC8hmgMwJj8JqjU/mup8F2mO56rniVkfDU6nHVc n5PuQ+6OK0n0Uu0faapjCEwAkQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFANXeTr6 cxcri1i+WwasalhxkToAMB8GA1UdIwQYMBaAFPZpkmRBfCKLUf4Vs7Hst4Z/KidD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDAyMC9BRDFCOERFNEI0 MDQxMUU3ODlDRkE1NDFDNEY5QUUwMi85bW1TWkVGOElvdFJfaFd6c2V5M2huOHFK ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltbVNaRUY4SW90Ul9oV3pzZXkzaG44cUowTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTQwMjAvQUQxQjhERTRCNDA0MTFFNzg5Q0ZBNTQxQzRGOUFFMDIvQzc3MkJCNEFG N0ExMTFFRDg3NEJFQzYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnfjwwDQQCAAIwBwMFACQEr0AwDQYJKoZIhvcNAQELBQAD ggEBAAtXDyKPBx7Ioir0zxo/SHIlmIS6PRpjadxQ9IUOc3+XtNb7dWu2/fFm33b4 +aQxmm/bOUyQDIy5o9G4yfvMxh36fD0BAkAvYWZDL5JAmIv5BuMMWU4vlR/kq2rT NfyXrXdw9tf5DfTgMbdWBUcCOJPGm1WCpX1zIvgnnjlV+feO7YvxesOu5ps6vVLc p/cCLpL7RKkoUMRzu1J0PmGzR0RgN23ot4srZFhhUTCy75b25u06yLSltwzY6rSu +WUnAneXaJnvglvvsEgsI8tUWFf2l6GUzZ+naBgV2RVVkIFDGLW5RF9du7pUqJ/F WbYR8oXNx5883y6GWKic1NFU36c= -----END CERTIFICATE-----Generated at Sun Dec 7 03:45:27 2025 by rpki-client