This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/4B2AAC20660211EA83A76342C4F9AE02.roa File: 4B2AAC20660211EA83A76342C4F9AE02.roa (raw, json) Hash identifier: VubdDr6jpnctpYE2M5QsaGv87QGAE8y0LNTwoL81fa8= Subject key identifier: 35:AE:3C:FB:B1:88:B1:AB:C3:AC:89:30:FE:0B:A8:3E:F7:C7:55:F8 Certificate issuer: /CN=A915A821/serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9 Certificate serial: 0A2E Authority key identifier: 77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/4B2AAC20660211EA83A76342C4F9AE02.roa Signing time: Wed 12 Mar 2025 19:49:02 +0000 ROA not before: Wed 12 Mar 2025 19:49:02 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 140085 IP address blocks: 103.148.94.0/23 maxlen: 24 2001:df2:cc80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2606 (0xa2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A821, serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9 Validity Not Before: Mar 12 19:49:02 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67d1e52d-b222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:eb:93:00:76:e8:02:51:4f:19:35:63:ce: 46:ec:4f:bd:40:4b:d6:f1:ad:68:49:52:b5:65:f9: 3c:fe:7b:8c:17:2c:08:ea:67:9b:93:69:6a:58:94: 05:62:b9:7a:d6:94:db:41:68:b9:4d:74:27:1e:7c: fa:61:a2:ea:d2:c2:cf:df:b4:b9:50:2b:19:6f:13: e9:1f:09:8f:a6:fd:80:7a:18:13:0b:f2:fd:1d:cc: ee:ac:c7:5f:85:9f:8d:1d:86:b3:89:08:11:74:fc: 83:51:a4:b4:06:b9:d0:1e:b8:bf:9d:a5:16:98:f3: a0:89:8a:f9:7e:89:af:43:d8:2f:7f:fb:3f:60:a6: e8:a2:96:06:64:a9:3b:28:66:34:b2:c3:3e:0c:52: 2b:de:03:51:1f:0c:03:b3:32:b3:42:dd:a2:1f:b7: 43:65:5d:c4:64:43:86:34:5c:f0:60:b3:9b:23:1c: 9f:f8:43:56:94:08:d1:2a:12:11:6b:d7:78:73:a7: 0b:5f:ca:7e:41:04:33:ee:60:63:aa:c1:2e:e0:25: 5a:ef:91:50:0e:3e:f3:2b:4f:9c:4e:e7:2c:d4:53: 1b:81:f1:7d:e2:84:ae:1c:3c:c6:ad:53:41:bd:e5: 38:80:c5:a4:90:6f:2c:cc:f2:76:d2:12:f4:5a:6a: 08:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AE:3C:FB:B1:88:B1:AB:C3:AC:89:30:FE:0B:A8:3E:F7:C7:55:F8 X509v3 Authority Key Identifier: keyid:77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/4B2AAC20660211EA83A76342C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.94.0/23 IPv6: 2001:df2:cc80::/48 Signature Algorithm: sha256WithRSAEncryption 99:94:3c:70:4c:01:df:9b:a4:30:fe:bd:be:5b:34:36:41:d8: 16:72:4b:36:0e:a4:67:08:11:2b:a3:85:16:ee:83:5f:5e:85: c8:2f:de:88:3c:0f:b5:c9:54:96:19:18:c2:c1:96:5b:f1:6d: 4a:2c:bf:c3:01:a0:89:9f:f8:50:d1:c7:fe:cf:6f:ee:32:5c: 5a:1d:c4:24:6c:fd:26:90:f1:b9:ea:ca:33:61:1f:41:80:cc: e1:7e:64:f7:05:ae:41:80:fa:29:e2:14:a1:e0:e8:ac:db:ae: 33:cb:43:4e:44:39:55:e8:b9:d7:d0:0f:8b:6c:40:a5:37:5c: a8:0f:ab:9f:f7:0e:e6:f0:f9:c8:85:aa:84:ef:63:69:17:bc: 1a:36:78:89:9d:0e:1d:71:97:0c:17:fe:be:a0:81:cb:f6:4c: 18:bc:aa:6e:5b:20:fb:de:90:99:e2:35:47:b5:ce:57:d4:9f: 21:f2:2f:db:cf:8a:6a:7f:8b:c1:f8:45:c7:d7:28:01:5c:48: b8:b2:4f:1b:6f:00:00:64:db:f7:df:f9:4d:b1:66:f3:03:6a: 4c:6e:a4:7d:6f:c5:c2:1e:e2:ca:26:9d:0d:c6:86:7e:3b:31: 5c:46:58:4c:37:1a:91:b7:e0:8d:cc:6e:82:18:e6:76:84:c2: 27:90:ba:9d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE4MjExMTAvBgNVBAUTKDc3QTEzNERGQTdBMjM5NEVEMjQ0NzUzOUYxM0ZFNEE4 RDFFMDU2QzkwHhcNMjUwMzEyMTk0OTAyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2QxZTUyZC1iMjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDXrkwB26AJRTxk1Y85G7E+9QEvW8a1oSVK1Zfk8/nuMFywI6mebk2lqWJQF Yrl61pTbQWi5TXQnHnz6YaLq0sLP37S5UCsZbxPpHwmPpv2AehgTC/L9HczurMdf hZ+NHYaziQgRdPyDUaS0BrnQHri/naUWmPOgiYr5fomvQ9gvf/s/YKboopYGZKk7 KGY0ssM+DFIr3gNRHwwDszKzQt2iH7dDZV3EZEOGNFzwYLObIxyf+ENWlAjRKhIR a9d4c6cLX8p+QQQz7mBjqsEu4CVa75FQDj7zK0+cTucs1FMbgfF94oSuHDzGrVNB veU4gMWkkG8szPJ20hL0WmoI5wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDWuPPux iLGrw6yJMP4LqD73x1X4MB8GA1UdIwQYMBaAFHehNN+nojlO0kR1OfE/5KjR4FbJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgyMS8yMzlCRkM2NDY2 MDExMUVBQkVFQTA3NDFDNEY5QUUwMi9kNkUwMzZlaU9VN1NSSFU1OFRfa3FOSGdW c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2RTAzNmVpT1U3U1JIVTU4VF9rcU5IZ1Zzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUE4MjEvMjM5QkZDNjQ2NjAxMTFFQUJFRUEwNzQxQzRGOUFFMDIvNEIyQUFDMjA2 NjAyMTFFQTgzQTc2MzQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnlF4wDwQCAAIwCQMHACABDfLMgDANBgkqhkiG9w0BAQsF AAOCAQEAmZQ8cEwB35ukMP69vls0NkHYFnJLNg6kZwgRK6OFFu6DX16FyC/eiDwP tclUlhkYwsGWW/FtSiy/wwGgiZ/4UNHH/s9v7jJcWh3EJGz9JpDxuerKM2EfQYDM 4X5k9wWuQYD6KeIUoeDorNuuM8tDTkQ5Vei519APi2xApTdcqA+rn/cO5vD5yIWq hO9jaRe8GjZ4iZ0OHXGXDBf+vqCBy/ZMGLyqblsg+96QmeI1R7XOV9SfIfIv28+K an+LwfhFx9coAVxIuLJPG28AAGTb99/5TbFm8wNqTG6kfW/Fwh7iyiadDcaGfjsx XEZYTDcakbfgjcxughjmdoTCJ5C6nQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:45:39 2025 by rpki-client