This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/972D6576112511F08AC1A549C4F9AE02.roa File: 972D6576112511F08AC1A549C4F9AE02.roa (raw, json) Hash identifier: iUN31JJZ65NVMi/nX6/HwIma9Bq/CyMVkVwHymfBoW0= Subject key identifier: DE:A2:CF:F9:72:FC:2E:4C:73:37:13:AB:04:6C:C5:E4:D7:2C:49:BB Certificate issuer: /CN=A915BE00/serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Certificate serial: 05AC Authority key identifier: 80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/972D6576112511F08AC1A549C4F9AE02.roa Signing time: Thu 04 Dec 2025 22:05:36 +0000 ROA not before: Thu 04 Dec 2025 22:05:36 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138985 IP address blocks: 103.125.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:05:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1452 (0x5ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BE00, serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Validity Not Before: Dec 4 22:05:36 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=693205b0-0240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:17:6a:09:c5:29:85:36:f7:ad:be:dc:f0:84: 6a:95:52:d8:13:78:ae:9d:fb:d7:86:66:fc:30:d8: 45:98:10:e4:07:42:be:1a:51:7b:3d:ef:1e:df:ea: b0:9d:63:32:ee:98:a8:ff:88:a4:00:47:9d:18:91: 42:e5:4d:c2:b2:16:84:d1:60:06:55:5a:24:47:4a: 07:34:8e:b2:b0:97:88:71:e7:81:fd:39:52:83:bd: a1:8d:53:e3:87:70:7d:0b:24:bd:38:42:bf:08:08: 86:56:03:6d:c6:7b:20:f1:63:7b:f4:f9:89:c9:6a: bc:6c:01:1e:32:68:b3:bb:15:a8:40:49:93:18:38: 8d:10:a0:f7:fe:2c:72:ba:f5:82:e5:0b:f5:56:f8: 95:8d:58:61:6c:38:ae:13:8c:10:ae:44:ff:ff:d3: 4d:c3:8a:63:0e:4d:7d:ee:78:48:51:cf:80:95:ac: 84:52:da:ec:17:96:58:78:75:9b:f1:ab:b7:1e:a5: 9c:92:3f:8e:1e:1d:f1:13:80:f1:25:79:7a:42:74: d6:50:85:eb:a3:d0:89:f8:00:6a:b7:25:2d:e3:67: 48:61:7d:0b:16:09:45:d8:ed:60:54:d8:e7:77:00: 23:f6:fb:39:9a:34:bf:f4:e8:bd:6b:ae:3f:de:71: 61:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A2:CF:F9:72:FC:2E:4C:73:37:13:AB:04:6C:C5:E4:D7:2C:49:BB X509v3 Authority Key Identifier: keyid:80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/972D6576112511F08AC1A549C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.125.242.0/24 Signature Algorithm: sha256WithRSAEncryption 71:e3:3b:2d:03:80:39:aa:f2:b7:da:e4:22:7e:fc:e0:d1:93: 61:61:14:c3:63:4d:d2:c4:e8:75:79:04:50:36:7f:37:1e:76: 9a:2a:5c:68:09:0b:8c:25:be:91:e7:22:dd:78:bf:7f:41:44: 32:05:56:01:f1:e7:07:67:4d:95:7c:85:18:b0:04:df:f6:16: 4f:33:da:4d:a3:62:5d:ef:be:3b:ac:18:73:1c:8d:50:89:e6: 8b:fc:ff:e9:b7:26:4b:1e:0e:6a:d1:63:6a:21:a3:91:40:b3: 8d:af:00:2d:be:19:b6:ca:ce:6d:f4:bc:35:e9:b0:a4:cd:cb: f2:b8:98:d8:c5:31:e0:9c:b0:cd:5a:5f:4e:11:ef:dc:aa:71: 31:c9:52:68:1f:7c:3a:3b:e9:7f:7e:f9:10:07:a7:38:50:90: 86:9e:0d:2e:9a:b7:a4:d7:40:01:93:f7:a7:27:72:15:e2:93: e4:cb:ca:35:89:5d:5c:e8:78:d8:54:08:2b:49:88:cf:9b:24: bd:f4:f6:cd:d7:4c:80:68:e9:cb:a4:7e:87:b6:e7:5b:80:96: dc:b7:bf:51:be:2b:79:6a:d3:18:cf:89:f8:d6:6c:e0:71:a9: 35:c3:70:57:e7:a2:70:85:e0:49:61:7f:2c:81:22:03:00:1a: db:b9:04:cf -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJFMDAxMTAvBgNVBAUTKDgwRUQyMEY3RkMwN0RFMEM5RjNDMUI4RTJBRTlDRDNG Q0U2RURCMjEwHhcNMjUxMjA0MjIwNTM2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMyMDViMC0wMjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxdqCcUphTb3rb7c8IRqlVLYE3iunfvXhmb8MNhFmBDkB0K+GlF7Pe8e3+qw nWMy7pio/4ikAEedGJFC5U3CshaE0WAGVVokR0oHNI6ysJeIceeB/TlSg72hjVPj h3B9CyS9OEK/CAiGVgNtxnsg8WN79PmJyWq8bAEeMmizuxWoQEmTGDiNEKD3/ixy uvWC5Qv1VviVjVhhbDiuE4wQrkT//9NNw4pjDk197nhIUc+AlayEUtrsF5ZYeHWb 8au3HqWckj+OHh3xE4DxJXl6QnTWUIXro9CJ+ABqtyUt42dIYX0LFglF2O1gVNjn dwAj9vs5mjS/9Oi9a64/3nFhCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFN6iz/ly /C5MczcTqwRsxeTXLEm7MB8GA1UdIwQYMBaAFIDtIPf8B94MnzwbjirpzT/Obtsh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkUwMC8zRDBCMjEyQUY0 RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNneWZQQnVPS3VuTlA4NXUy eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPMGc5X3dIM2d5ZlBCdU9LdW5OUDg1dTJ5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUJFMDAvM0QwQjIxMkFGNEZEMTFFQkE1MkNFMjExQzRGOUFFMDIvOTcyRDY1NzYx MTI1MTFGMDhBQzFBNTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnffIwDQYJKoZIhvcNAQELBQADggEBAHHjOy0DgDmq8rfa 5CJ+/ODRk2FhFMNjTdLE6HV5BFA2fzcedpoqXGgJC4wlvpHnIt14v39BRDIFVgHx 5wdnTZV8hRiwBN/2Fk8z2k2jYl3vvjusGHMcjVCJ5ov8/+m3JkseDmrRY2oho5FA s42vAC2+GbbKzm30vDXpsKTNy/K4mNjFMeCcsM1aX04R79yqcTHJUmgffDo76X9+ +RAHpzhQkIaeDS6at6TXQAGT96cnchXik+TLyjWJXVzoeNhUCCtJiM+bJL309s3X TIBo6cukfoe251uAlty3v1G+K3lq0xjPifjWbOBxqTXDcFfnonCF4ElhfyyBIgMA Gtu5BM8= -----END CERTIFICATE-----Generated at Sat Dec 6 22:07:10 2025 by rpki-client