This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/9D0BDA0AD09111F0847B8D52C4F9AE02.roa File: 9D0BDA0AD09111F0847B8D52C4F9AE02.roa (raw, json) Hash identifier: px61yYjHZC2RsLXIpqHcIY/KJA98blTJlM1CVZOs6Jg= Subject key identifier: 98:62:F7:FB:6D:D5:7A:A6:D9:7C:BB:FA:29:FC:BE:7B:48:7A:3A:44 Certificate issuer: /CN=A915E742/serialNumber=6097B34D674013280629F885CA903FD69AB95BE3 Certificate serial: 350C Authority key identifier: 60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/9D0BDA0AD09111F0847B8D52C4F9AE02.roa Signing time: Wed 03 Dec 2025 21:47:07 +0000 ROA not before: Wed 03 Dec 2025 21:47:07 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 56089 IP address blocks: 103.24.112.0/22 maxlen: 22 114.69.176.0/20 maxlen: 20 175.158.128.0/18 maxlen: 18 202.22.128.0/19 maxlen: 19 202.166.176.0/21 maxlen: 21 203.104.48.0/20 maxlen: 20 2404:2a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13580 (0x350c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E742, serialNumber=6097B34D674013280629F885CA903FD69AB95BE3 Validity Not Before: Dec 3 21:47:07 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6930afdb-e3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:73:88:aa:24:72:25:fe:42:3c:36:31:53:10: b8:ec:a6:47:88:7a:fd:a4:7f:ab:07:f7:98:e8:67: 26:f2:b8:b1:34:e6:de:b7:20:74:6f:9d:31:93:ce: 3d:20:b8:ae:52:28:2b:a0:ed:85:83:5f:49:cb:4f: 15:fa:7e:17:89:7e:1f:2b:05:0a:cd:5c:eb:76:46: ab:a3:47:74:b6:93:64:db:e9:67:4e:e9:89:65:65: ba:94:4e:d4:fa:fa:83:1b:5f:02:19:db:83:35:06: 15:1f:c1:17:4e:7a:5f:e4:ad:57:a0:e3:bb:e4:72: 57:82:57:b8:49:9c:4f:45:93:36:1c:c9:bf:8f:37: 04:07:51:4e:4c:4a:44:be:47:d9:fa:8d:73:54:2f: 09:62:18:dd:ee:3a:37:e3:b1:84:f6:7a:95:4e:93: 5d:6a:9f:b3:9e:c6:ac:92:b3:27:82:9b:5e:8a:2c: db:f4:74:2d:87:ba:b3:98:99:2d:f4:b6:63:28:1d: 0c:2a:32:91:96:3a:64:5f:ec:5e:cc:76:41:9e:73: 13:a5:3d:33:31:92:70:75:f1:46:a1:f6:4b:94:ad: af:ae:79:e8:ad:17:b9:be:dd:82:aa:f9:24:8f:5d: dd:56:5d:fe:0f:14:08:94:b2:4d:ec:39:e8:22:10: e8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:62:F7:FB:6D:D5:7A:A6:D9:7C:BB:FA:29:FC:BE:7B:48:7A:3A:44 X509v3 Authority Key Identifier: keyid:60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/9D0BDA0AD09111F0847B8D52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.24.112.0/22 114.69.176.0/20 175.158.128.0/18 202.22.128.0/19 202.166.176.0/21 203.104.48.0/20 IPv6: 2404:2a00::/32 Signature Algorithm: sha256WithRSAEncryption 1c:77:4e:02:bd:66:ec:65:85:15:92:1c:83:3e:de:d3:3f:7f: 7c:83:d2:c0:e3:1d:f7:cd:11:99:fa:c5:6c:61:d3:42:ef:61: 01:7c:e9:e5:7f:6b:69:cb:dc:58:a0:fd:f6:04:44:60:a3:14: 89:5b:79:e9:05:c3:5c:83:d9:fe:a8:2e:84:ef:92:df:58:82: 56:7c:df:18:ea:77:36:8d:89:b8:23:3b:7b:9c:fb:f2:c9:1c: 89:73:3e:9c:ee:8f:d8:15:19:c7:8c:60:82:49:9f:fa:95:26: 7c:b9:b3:1c:55:13:99:b4:e2:e1:c7:08:a1:6f:ec:6b:b9:3b: 19:84:a6:20:0c:74:b1:44:1c:bc:44:cf:ab:2f:c1:09:55:31: 1e:3f:e4:6f:f5:86:ba:b8:85:7b:c5:ce:c4:d2:e0:67:c0:ec: de:41:bb:dd:9e:e8:3c:4b:da:a6:8b:fd:d7:77:76:e8:21:f8: 49:0c:a5:05:d3:fc:97:8d:42:7a:89:0a:a0:b5:20:90:d2:c2: 01:54:19:4b:58:7c:1c:67:4b:b9:2a:3c:cf:59:db:48:48:e9: 3f:3a:fc:10:88:cd:c6:1d:f8:28:fa:25:3f:dc:48:2b:ab:1c: ff:09:42:dd:2a:63:4a:3c:bf:8c:fe:f0:a9:af:3e:76:ef:40: 95:8a:b6:7e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICNQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU3NDIxMTAvBgNVBAUTKDYwOTdCMzRENjc0MDEzMjgwNjI5Rjg4NUNBOTAzRkQ2 OUFCOTVCRTMwHhcNMjUxMjAzMjE0NzA3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMwYWZkYi1lM2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13OIqiRyJf5CPDYxUxC47KZHiHr9pH+rB/eY6Gcm8rixNObetyB0b50xk849 ILiuUigroO2Fg19Jy08V+n4XiX4fKwUKzVzrdkaro0d0tpNk2+lnTumJZWW6lE7U +vqDG18CGduDNQYVH8EXTnpf5K1XoOO75HJXgle4SZxPRZM2HMm/jzcEB1FOTEpE vkfZ+o1zVC8JYhjd7jo347GE9nqVTpNdap+znsaskrMngpteiizb9HQth7qzmJkt 9LZjKB0MKjKRljpkX+xezHZBnnMTpT0zMZJwdfFGofZLlK2vrnnorRe5vt2Cqvkk j13dVl3+DxQIlLJN7DnoIhDogwIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFJhi9/tt 1Xqm2Xy7+in8vntIejpEMB8GA1UdIwQYMBaAFGCXs01nQBMoBin4hcqQP9aauVvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTc0Mi8yRUQwRjVGQzFE ODUxMUUyQjAzMkE5REIwOEIwMkNEMi9ZSmV6VFdkQUV5Z0dLZmlGeXBBXzFwcTVX LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKZXpUV2RBRXlnR0tmaUZ5cEFfMXBxNVctTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUU3NDIvMkVEMEY1RkMxRDg1MTFFMkIwMzJBOURCMDhCMDJDRDIvOUQwQkRBMEFE MDkxMTFGMDg0N0I4RDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E PTA7MCoEAgABMCQDBAJnGHADBARyRbADBAavnoADBAXKFoADBAPKprADBATLaDAw DQQCAAIwBwMFACQEKgAwDQYJKoZIhvcNAQELBQADggEBABx3TgK9ZuxlhRWSHIM+ 3tM/f3yD0sDjHffNEZn6xWxh00LvYQF86eV/a2nL3Fig/fYERGCjFIlbeekFw1yD 2f6oLoTvkt9YglZ83xjqdzaNibgjO3uc+/LJHIlzPpzuj9gVGceMYIJJn/qVJny5 sxxVE5m04uHHCKFv7Gu5OxmEpiAMdLFEHLxEz6svwQlVMR4/5G/1hrq4hXvFzsTS 4GfA7N5Bu92e6DxL2qaL/dd3dugh+EkMpQXT/JeNQnqJCqC1IJDSwgFUGUtYfBxn S7kqPM9Z20hI6T86/BCIzcYd+Cj6JT/cSCurHP8JQt0qY0o8v4z+8KmvPnbvQJWK tn4= -----END CERTIFICATE-----Generated at Sun Dec 7 02:05:59 2025 by rpki-client