This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/CF946690E5E711EE89AF4E5AC4F9AE02.roa File: CF946690E5E711EE89AF4E5AC4F9AE02.roa (raw, json) Hash identifier: y7U7IUcCA6tESox2ZQnKwXyYuQzSkLk1/ptcpy/PoWo= Subject key identifier: D0:D1:C2:1D:4C:0C:1D:B3:2A:C1:3F:24:90:A2:5C:E1:77:BB:BE:4F Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1F07 Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/CF946690E5E711EE89AF4E5AC4F9AE02.roa Signing time: Fri 14 Nov 2025 16:03:53 +0000 ROA not before: Fri 14 Nov 2025 16:03:53 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 58659 IP address blocks: 202.179.77.0/24 maxlen: 24 202.179.78.0/24 maxlen: 24 202.179.80.0/24 maxlen: 24 202.179.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7943 (0x1f07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Validity Not Before: Nov 14 16:03:53 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691752e9-bf0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fa:f5:48:d4:00:40:a4:b2:81:dd:f8:0d:7c: df:07:f5:81:98:6e:07:96:66:34:25:1c:78:88:7a: ab:56:a0:31:72:c9:04:74:4c:7f:ad:70:6b:fb:05: 07:d4:28:a2:39:52:fd:8b:84:6c:7a:2d:8a:49:28: 4e:68:c6:e7:76:f2:14:da:38:47:a6:d0:6d:44:eb: 1e:97:4e:9f:86:98:2b:e1:bf:65:b8:0e:c3:1f:4d: 33:a3:0f:24:24:5d:3a:d1:80:35:5c:8e:f0:4a:f7: d2:0e:fd:d9:a8:cf:2b:7b:d6:b0:8a:66:0e:72:85: b7:c8:de:fa:60:0a:b7:47:13:f5:a0:47:71:76:2a: 6a:ac:d8:e0:de:55:e2:99:5c:5d:09:c2:2f:50:a3: 4e:5d:8f:f7:02:1b:17:51:f6:c6:24:2c:03:1b:f9: 5e:3c:ce:f5:5f:e0:0f:6a:57:82:b4:17:d4:fd:5d: 35:db:86:03:40:ad:26:25:5d:b7:d4:17:0b:80:9c: 6c:9a:08:55:cc:fc:eb:51:16:25:bc:15:19:14:cc: 7c:97:a9:0a:c6:fe:95:81:52:ca:c3:02:65:fc:ad: ec:3a:b4:02:89:9a:4b:f3:5e:b9:a1:cf:3a:7b:df: 3c:4f:0c:5f:e7:b8:60:63:dc:23:2a:f5:67:92:0e: ae:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D1:C2:1D:4C:0C:1D:B3:2A:C1:3F:24:90:A2:5C:E1:77:BB:BE:4F X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/CF946690E5E711EE89AF4E5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.179.77.0-202.179.78.255 202.179.80.0/24 202.179.89.0/24 Signature Algorithm: sha256WithRSAEncryption bd:2f:a2:0f:a2:32:53:ca:68:58:5e:8e:d0:0b:57:ca:9c:92: 03:f9:1e:25:90:52:52:f0:bc:a3:52:3e:5f:19:cf:05:7b:25: 51:01:8a:ad:d5:d5:dc:9b:c1:20:1a:6b:9d:f0:ca:12:5f:58: be:f4:1f:b0:fb:1c:56:1f:cf:ec:8f:a8:b4:c5:78:f5:6c:02: 0e:6f:a9:6f:89:c4:4d:5b:f0:48:eb:ec:40:63:77:ac:a8:21: dd:ae:bf:13:69:cd:78:4e:c1:93:0a:8d:b1:f5:b7:9f:d7:e7: 46:66:68:41:d3:c4:70:90:d3:32:14:03:d9:6b:64:8f:1b:d7: a4:5f:9e:7b:83:69:5a:5e:61:e0:5b:47:39:71:9b:3d:d5:cb: 79:81:2f:2d:f1:f3:78:38:77:46:97:16:87:d8:0c:b0:ec:7c: a7:82:2f:ae:2d:ee:96:9a:b8:b4:79:f6:5a:3c:36:ac:93:dd: 09:3c:53:cc:24:b5:ab:ad:a1:f6:d3:ec:e1:27:b2:0e:b6:0f: 2e:b6:17:8c:bd:64:fb:21:91:32:2d:18:32:0c:88:2f:be:b7: e2:14:30:b9:ad:38:29:74:16:99:35:ab:da:44:f5:ee:54:5e: dd:cf:33:f1:08:62:ae:19:6d:42:b2:97:83:b2:75:60:f2:0b: 6f:24:bc:68 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICHwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjUxMTE0MTYwMzUzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE3NTJlOS1iZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufr1SNQAQKSygd34DXzfB/WBmG4HlmY0JRx4iHqrVqAxcskEdEx/rXBr+wUH 1CiiOVL9i4Rsei2KSShOaMbndvIU2jhHptBtROsel06fhpgr4b9luA7DH00zow8k JF060YA1XI7wSvfSDv3ZqM8re9awimYOcoW3yN76YAq3RxP1oEdxdipqrNjg3lXi mVxdCcIvUKNOXY/3AhsXUfbGJCwDG/lePM71X+APaleCtBfU/V0124YDQK0mJV23 1BcLgJxsmghVzPzrURYlvBUZFMx8l6kKxv6VgVLKwwJl/K3sOrQCiZpL8165oc86 e988Twxf57hgY9wjKvVnkg6uOwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFNDRwh1M DB2zKsE/JJCiXOF3u75PMB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUFFNUYvOEI3OUI2Nzg4ODUxMTFFNkE2OTJERTc4QzRGOUFFMDIvQ0Y5NDY2OTBF NUU3MTFFRTg5QUY0RTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBowDAMEAMqzTQMEAMqzTgMEAMqzUAMEAMqzWTANBgkqhkiG9w0B AQsFAAOCAQEAvS+iD6IyU8poWF6O0AtXypySA/keJZBSUvC8o1I+XxnPBXslUQGK rdXV3JvBIBprnfDKEl9YvvQfsPscVh/P7I+otMV49WwCDm+pb4nETVvwSOvsQGN3 rKgh3a6/E2nNeE7BkwqNsfW3n9fnRmZoQdPEcJDTMhQD2WtkjxvXpF+ee4NpWl5h 4FtHOXGbPdXLeYEvLfHzeDh3RpcWh9gMsOx8p4Ivri3ulpq4tHn2Wjw2rJPdCTxT zCS1q62h9tPs4SeyDrYPLrYXjL1k+yGRMi0YMgyIL7634hQwua04KXQWmTWr2kT1 7lRe3c8z8QhirhltQrKXg7J1YPILbyS8aA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:17:28 2025 by rpki-client