This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/8FF3B806B0D411F0955C2A4DC4F9AE02.roa File: 8FF3B806B0D411F0955C2A4DC4F9AE02.roa (raw, json) Hash identifier: LZ0pNikl+GOc3SHl1zJlXg3qSuepoZ3LIiuO7cdJ5ss= Subject key identifier: E9:7A:DB:C1:3D:DD:6C:07:20:14:B8:BD:1B:6C:17:AC:EB:09:1B:B3 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0EE8 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/8FF3B806B0D411F0955C2A4DC4F9AE02.roa Signing time: Mon 01 Dec 2025 11:00:38 +0000 ROA not before: Mon 01 Dec 2025 11:00:38 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 131275 IP address blocks: 111.92.141.0/24 maxlen: 24 111.92.142.0/24 maxlen: 24 111.92.143.0/24 maxlen: 24 111.92.144.0/24 maxlen: 24 111.92.151.0/24 maxlen: 24 111.92.152.0/24 maxlen: 24 111.92.153.0/24 maxlen: 24 111.92.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 08:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3816 (0xee8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Dec 1 11:00:38 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=692d7556-0ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4a:6d:bd:45:55:27:94:a5:8a:30:ae:49:9a: 40:09:8c:47:f5:1a:4b:2c:70:d8:46:7d:8b:86:c1: 2e:37:a4:95:64:aa:db:72:78:ac:5f:03:83:05:93: e2:96:12:62:5e:25:3d:8e:54:89:2b:68:54:61:ac: c4:8a:97:a2:f0:98:2d:ed:9d:36:46:d7:8f:32:11: 93:f6:c1:ec:41:f1:57:dd:df:53:ee:ce:4c:15:0c: 48:19:f6:83:54:79:6d:cd:6e:c1:19:2e:15:53:87: 47:db:31:18:42:c6:4e:0d:4b:92:d2:d3:c1:90:75: ad:57:1f:c5:26:47:bd:07:48:1e:7f:13:49:a6:39: 37:a7:0a:6d:42:b1:cc:4f:d4:df:47:29:99:52:3e: c4:8f:d1:43:85:e8:4a:9e:08:aa:ca:c0:67:1f:3f: b6:68:a7:5c:6b:e6:42:ab:ca:38:83:73:e2:11:91: 9b:3c:f8:79:03:3a:70:28:2c:44:54:fe:c7:da:d6: 6f:4b:73:b8:f8:c4:63:1c:ab:31:1c:a2:1c:a7:f1: d7:45:d5:05:87:88:09:9f:49:85:68:fb:3a:95:65: 88:d4:61:8f:87:34:28:7d:86:b1:fd:67:d0:83:b0: 7d:fb:d2:18:1b:30:34:2a:48:0c:23:bf:69:20:ac: 23:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7A:DB:C1:3D:DD:6C:07:20:14:B8:BD:1B:6C:17:AC:EB:09:1B:B3 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/8FF3B806B0D411F0955C2A4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.92.141.0-111.92.144.255 111.92.151.0-111.92.154.255 Signature Algorithm: sha256WithRSAEncryption af:e9:1b:ab:f7:0e:41:6d:64:21:f8:29:7e:02:44:8b:87:52: 8c:de:77:53:be:c8:c0:b8:1e:3b:68:80:6a:0e:8a:79:e0:c4: 57:f8:33:3e:d3:ab:de:57:09:a0:db:1a:48:d9:19:a3:47:57: 20:73:48:61:c0:a8:72:47:4b:a3:e9:5e:b9:51:ce:51:fd:25: d3:cc:3b:c0:58:7c:4c:62:3f:17:82:9a:9c:cf:df:9c:80:72: 7c:ec:c0:4a:68:f5:13:b9:f1:7e:79:80:62:c7:30:af:e7:ed: ae:4b:11:cd:8f:05:44:77:f6:21:ba:fa:c8:5e:18:c0:c8:82: f1:36:87:b3:7c:61:57:28:45:e9:6f:1e:b7:81:92:3c:80:85: ce:c3:46:7f:c0:e6:8a:a0:28:d6:15:41:ef:f0:90:c0:34:64: d8:4d:42:6b:62:eb:6c:38:3b:d8:1f:9d:45:fb:58:a0:c1:cc: 22:87:94:e5:be:a3:55:a1:97:57:41:4c:b1:7c:19:a9:99:be: e7:82:22:fa:72:2d:a5:f7:b8:4a:9f:b4:9b:01:3b:30:38:c6: 5a:16:c5:e9:aa:5d:7d:76:25:fa:2c:75:e1:41:bd:d4:74:87: 76:c0:de:63:8c:c4:63:fe:b2:7f:55:66:36:ef:30:e0:df:58: a8:45:7a:fb -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICDugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUxMjAxMTEwMDM4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJkNzU1Ni0wYWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4UptvUVVJ5SlijCuSZpACYxH9RpLLHDYRn2LhsEuN6SVZKrbcnisXwODBZPi lhJiXiU9jlSJK2hUYazEipei8Jgt7Z02RtePMhGT9sHsQfFX3d9T7s5MFQxIGfaD VHltzW7BGS4VU4dH2zEYQsZODUuS0tPBkHWtVx/FJke9B0gefxNJpjk3pwptQrHM T9TfRymZUj7Ej9FDhehKngiqysBnHz+2aKdca+ZCq8o4g3PiEZGbPPh5AzpwKCxE VP7H2tZvS3O4+MRjHKsxHKIcp/HXRdUFh4gJn0mFaPs6lWWI1GGPhzQofYax/WfQ g7B9+9IYGzA0KkgMI79pIKwjFQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFOl628E9 3WwHIBS4vRtsF6zrCRuzMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvOEZGM0I4MDZC MEQ0MTFGMDk1NUMyQTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMCIEAgABMBwwDAMEAG9cjQMEAG9ckDAMAwQAb1yXAwQAb1yaMA0GCSqGSIb3 DQEBCwUAA4IBAQCv6Rur9w5BbWQh+Cl+AkSLh1KM3ndTvsjAuB47aIBqDop54MRX +DM+06veVwmg2xpI2RmjR1cgc0hhwKhyR0uj6V65Uc5R/SXTzDvAWHxMYj8Xgpqc z9+cgHJ87MBKaPUTufF+eYBixzCv5+2uSxHNjwVEd/YhuvrIXhjAyILxNoezfGFX KEXpbx63gZI8gIXOw0Z/wOaKoCjWFUHv8JDANGTYTUJrYutsODvYH51F+1igwcwi h5TlvqNVoZdXQUyxfBmpmb7ngiL6ci2l97hKn7SbATswOMZaFsXpql19diX6LHXh Qb3UdId2wN5jjMRj/rJ/VWY27zDg31ioRXr7 -----END CERTIFICATE-----Generated at Sat Dec 6 19:58:59 2025 by rpki-client