This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/E99DA38ED1AF11F09C93820EC4F9AE02.roa File: E99DA38ED1AF11F09C93820EC4F9AE02.roa (raw, json) Hash identifier: sHXVVfVXGBK6lESfXtXozO54EkcIzdN0jwwGK90ydTs= Subject key identifier: F3:AD:D1:E9:8C:16:5C:67:38:6F:88:13:DE:2D:01:9F:13:A4:FD:74 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0EF6 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/E99DA38ED1AF11F09C93820EC4F9AE02.roa Signing time: Fri 05 Dec 2025 07:56:32 +0000 ROA not before: Fri 05 Dec 2025 07:56:32 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 398704 IP address blocks: 111.92.128.0/24 maxlen: 24 111.92.132.0/24 maxlen: 24 111.92.136.0/24 maxlen: 24 111.92.137.0/24 maxlen: 24 111.92.141.0/24 maxlen: 24 111.92.143.0/24 maxlen: 24 111.92.144.0/24 maxlen: 24 111.92.145.0/24 maxlen: 24 111.92.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 08:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3830 (0xef6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Dec 5 07:56:32 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69329030-463a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e1:f7:18:cf:21:20:5c:f2:13:82:0a:6a:9a: f6:70:72:57:7c:34:b4:10:4d:ae:8e:15:e7:b0:0f: 8c:91:97:60:5f:d8:fb:77:66:40:7d:e0:44:24:dc: cf:98:6d:db:4b:8f:2e:fd:15:26:f7:ae:c3:da:71: 80:f7:e3:86:a9:b0:5e:5b:4b:1b:d3:e0:e4:91:79: 22:b7:6c:7a:ff:c5:8e:52:f2:b1:d5:e1:d3:cf:c7: e7:44:ec:78:35:9d:fb:56:20:1d:4c:5f:a5:34:db: a0:57:e0:c7:80:15:7c:6b:9c:d1:4a:c6:ac:35:33: 94:bc:27:c5:6a:cd:c3:b2:26:eb:78:37:2e:fb:97: b1:ac:d5:1d:b2:d2:8b:c7:0d:da:2e:33:c0:9c:64: 68:c7:72:61:ac:4c:c0:2e:25:7e:94:b8:f0:f7:eb: 04:db:66:72:5b:a8:b8:0e:91:97:ff:a6:b8:50:75: 33:2c:63:80:f5:82:71:f2:52:d9:2c:3f:ae:c5:b7: d7:29:2b:db:bc:a5:30:8a:d0:24:c3:ff:bf:67:d5: 0a:0b:2a:8b:cc:5a:d5:cd:3d:36:7a:37:61:41:85: 6f:41:2c:7b:7a:0d:79:b0:f4:38:e9:db:02:aa:35: 9b:7b:99:62:14:21:30:aa:cf:20:cb:66:67:0d:ba: a8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AD:D1:E9:8C:16:5C:67:38:6F:88:13:DE:2D:01:9F:13:A4:FD:74 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/E99DA38ED1AF11F09C93820EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.92.128.0/24 111.92.132.0/24 111.92.136.0/23 111.92.141.0/24 111.92.143.0-111.92.146.255 Signature Algorithm: sha256WithRSAEncryption 6c:8d:7a:9d:75:31:25:93:4c:e9:67:dd:53:8f:3a:9a:15:a4: 52:93:4c:e4:97:19:18:87:2d:bb:24:48:e3:63:d0:c9:4b:c8: e4:4b:46:ff:51:6c:81:58:56:0d:36:7e:43:e1:b8:dc:89:2d: 76:f8:a1:df:87:b6:35:4b:f9:ee:3b:aa:9b:e4:b7:27:b9:c6: 8e:03:2b:d5:b3:09:bb:1f:c7:a0:4e:31:ba:aa:47:8c:ea:8c: e4:9c:0e:a3:ca:0f:19:61:16:f1:31:cc:bf:47:8e:d9:42:b9: a5:07:c9:81:1f:aa:84:53:6e:31:5d:b9:8d:1c:2d:ad:39:c9: f8:d2:c7:80:e2:b8:b0:58:40:35:c5:e4:de:77:44:34:75:57: 17:2d:23:6a:f1:78:8f:ae:ac:eb:0c:38:ba:f8:3a:e6:d0:c4: f9:2c:2e:6c:3b:af:20:ef:7a:a4:75:6d:e8:06:c2:0c:25:7f: a3:f8:4b:2b:8c:e0:2a:c0:29:97:d6:7e:43:f4:da:91:03:4e: 75:08:4d:55:a0:16:b2:1f:6f:22:8e:d5:2e:5b:c2:e5:27:19: a6:7e:2b:c4:e0:74:f0:38:3e:36:99:bc:65:4c:26:49:25:8d: a3:c0:56:cc:4f:80:e9:0c:4a:92:a6:8b:76:83:ea:1a:90:c5: 3e:21:c6:9a -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICDvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUxMjA1MDc1NjMyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMyOTAzMC00NjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5+H3GM8hIFzyE4IKapr2cHJXfDS0EE2ujhXnsA+MkZdgX9j7d2ZAfeBEJNzP mG3bS48u/RUm967D2nGA9+OGqbBeW0sb0+DkkXkit2x6/8WOUvKx1eHTz8fnROx4 NZ37ViAdTF+lNNugV+DHgBV8a5zRSsasNTOUvCfFas3DsibreDcu+5exrNUdstKL xw3aLjPAnGRox3JhrEzALiV+lLjw9+sE22ZyW6i4DpGX/6a4UHUzLGOA9YJx8lLZ LD+uxbfXKSvbvKUwitAkw/+/Z9UKCyqLzFrVzT02ejdhQYVvQSx7eg15sPQ46dsC qjWbe5liFCEwqs8gy2ZnDbqooQIDAQABo4ICtTCCArEwHQYDVR0OBBYEFPOt0emM FlxnOG+IE94tAZ8TpP10MB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvRTk5REEzOEVE MUFGMTFGMDlDOTM4MjBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMCwEAgABMCYDBABvXIADBABvXIQDBAFvXIgDBABvXI0wDAMEAG9cjwMEAG9c kjANBgkqhkiG9w0BAQsFAAOCAQEAbI16nXUxJZNM6WfdU486mhWkUpNM5JcZGIct uyRI42PQyUvI5EtG/1FsgVhWDTZ+Q+G43Iktdvih34e2NUv57juqm+S3J7nGjgMr 1bMJux/HoE4xuqpHjOqM5JwOo8oPGWEW8THMv0eO2UK5pQfJgR+qhFNuMV25jRwt rTnJ+NLHgOK4sFhANcXk3ndENHVXFy0javF4j66s6ww4uvg65tDE+SwubDuvIO96 pHVt6AbCDCV/o/hLK4zgKsApl9Z+Q/TakQNOdQhNVaAWsh9vIo7VLlvC5ScZpn4r xOB08Dg+Npm8ZUwmSSWNo8BWzE+A6QxKkqaLdoPqGpDFPiHGmg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:41:51 2025 by rpki-client