This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/42D4C3BC0D0611EFA3ECB057C4F9AE02.roa File: 42D4C3BC0D0611EFA3ECB057C4F9AE02.roa (raw, json) Hash identifier: BaadRVMd203ZlkXjv1gzJD81QItI8JySCJYtPr9WisE= Subject key identifier: 3B:8D:24:D8:01:00:26:55:E5:91:46:01:36:A2:02:B1:5E:95:7B:E3 Certificate issuer: /CN=A9161099/serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045 Certificate serial: 0145 Authority key identifier: 03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/42D4C3BC0D0611EFA3ECB057C4F9AE02.roa Signing time: Mon 10 Nov 2025 02:50:16 +0000 ROA not before: Mon 10 Nov 2025 02:50:16 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 121.127.32.0/24 maxlen: 24 202.157.180.0/23 maxlen: 24 2401:cb60::/48 maxlen: 48 2401:cb60:1::/48 maxlen: 48 2401:cb60:2::/48 maxlen: 48 2401:cb60:3::/48 maxlen: 48 2401:cb60:4::/48 maxlen: 48 2401:cb60:5::/48 maxlen: 48 2401:cb60:6::/48 maxlen: 48 2401:cb60:7::/48 maxlen: 48 2401:cb60:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161099, serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045 Validity Not Before: Nov 10 02:50:16 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=691152e8-b986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:10:a0:54:57:53:2e:d2:72:00:90:a7:cb:8f: 82:a1:61:b2:98:db:ff:a6:fc:88:fb:07:57:c1:06: 0b:37:d8:29:94:47:a2:b2:5c:32:35:0c:ab:95:2a: ab:1d:f3:56:28:93:9a:18:4a:89:5f:72:d4:d2:07: 65:2e:75:57:e1:c9:02:fc:cd:13:cd:53:63:60:91: db:b1:54:af:f8:d3:b6:04:ba:d0:78:66:a2:08:c8: f7:d0:49:65:3c:8b:d3:9f:d9:b2:ac:f2:53:20:af: 3b:31:fb:ac:fc:5f:80:d2:0b:44:75:b8:8f:d3:c8: 1e:60:12:82:b8:31:2e:99:ab:fd:ee:1b:69:80:2b: 2d:8e:ea:68:b5:ca:d6:aa:4b:03:96:8c:31:05:55: 0a:72:24:10:0d:a1:39:01:e9:a2:04:b1:9f:a0:c3: 70:73:18:5a:43:b8:f8:b2:0d:ac:f0:63:91:63:90: 24:f8:fc:bd:b6:5d:b7:26:d4:6a:1b:d4:0d:45:28: 7b:00:86:f9:e6:7a:14:23:68:d3:b2:69:0c:86:92: 96:a3:45:28:c7:42:c2:5d:3e:74:d9:bb:6c:48:b9: a2:5d:43:2d:8c:a8:a0:08:39:85:aa:11:50:47:b7: 18:2c:7c:a2:b4:db:73:35:52:c7:90:1c:f2:dc:5c: 95:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8D:24:D8:01:00:26:55:E5:91:46:01:36:A2:02:B1:5E:95:7B:E3 X509v3 Authority Key Identifier: keyid:03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/42D4C3BC0D0611EFA3ECB057C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.127.32.0/24 202.157.180.0/23 IPv6: 2401:cb60::-2401:cb60:8:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 39:83:3e:76:14:3c:80:f4:fd:ba:8a:a5:80:18:a4:f6:f2:2f: a5:7e:38:a7:8c:f9:11:a1:81:bd:e3:c2:7e:c9:ab:27:aa:c2: 75:f2:f5:ba:a4:1a:3a:19:e1:17:49:a5:8f:ce:a1:e2:a3:fe: 69:dc:4f:90:d4:16:1e:56:af:01:cd:ee:39:05:ad:54:c3:a2: 53:61:c7:bf:7e:1c:c7:3f:35:b9:40:85:44:d7:fa:10:d0:7a: 37:02:8e:7c:d5:31:cc:51:52:9d:eb:a4:2f:83:5f:38:7a:33: ae:1b:e8:f0:38:f4:df:f8:c6:89:85:3e:d1:18:d5:49:35:88: de:c9:db:05:d3:7c:ea:48:d1:49:54:83:75:7d:99:79:c1:c1: ca:50:62:4e:8d:80:45:de:61:6d:93:55:53:ae:34:01:84:45: 32:61:7d:30:1c:91:3d:7b:18:fd:e9:6d:57:52:eb:aa:c8:58: 72:08:9c:a2:21:08:87:9c:f4:3e:c1:d4:ff:fe:4b:4b:89:a3: 29:e9:2d:00:46:ba:cf:42:9e:7e:9e:26:f4:2b:68:6b:90:6b: ef:46:22:c3:84:de:22:89:4d:03:ff:01:9d:e2:f3:75:29:49: b8:20:13:a8:d6:1b:11:c7:46:4f:c7:b5:11:50:3b:79:a3:03: f8:d2:0d:d8 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwOTkxMTAvBgNVBAUTKDAzQTAyRTJGNURBQkYwRkYzOTM4NjI4QkM0RkY1RkI2 MTY1M0YwNDUwHhcNMjUxMTEwMDI1MDE2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTExNTJlOC1iOTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxCgVFdTLtJyAJCny4+CoWGymNv/pvyI+wdXwQYLN9gplEeislwyNQyrlSqr HfNWKJOaGEqJX3LU0gdlLnVX4ckC/M0TzVNjYJHbsVSv+NO2BLrQeGaiCMj30Ell PIvTn9myrPJTIK87Mfus/F+A0gtEdbiP08geYBKCuDEumav97htpgCstjupotcrW qksDlowxBVUKciQQDaE5AemiBLGfoMNwcxhaQ7j4sg2s8GORY5Ak+Py9tl23JtRq G9QNRSh7AIb55noUI2jTsmkMhpKWo0Uox0LCXT502btsSLmiXUMtjKigCDmFqhFQ R7cYLHyitNtzNVLHkBzy3FyVvQIDAQABo4ICtTCCArEwHQYDVR0OBBYEFDuNJNgB ACZV5ZFGATaiArFelXvjMB8GA1UdIwQYMBaAFAOgLi9dq/D/OThii8T/X7YWU/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTA5OS9GRDM2N0M3MDBE MDQxMUVGODVFNDZGNTVDNEY5QUUwMi9BNkF1TDEycjhQODVPR0tMeFA5ZnRoWlQ4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2QXVMMTJyOFA4NU9HS0x4UDlmdGhaVDhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjEwOTkvRkQzNjdDNzAwRDA0MTFFRjg1RTQ2RjU1QzRGOUFFMDIvNDJENEMzQkMw RDA2MTFFRkEzRUNCMDU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMBIEAgABMAwDBAB5fyADBAHKnbQwGAQCAAIwEjAQAwUFJAHLYAMHACQBy2AA CDANBgkqhkiG9w0BAQsFAAOCAQEAOYM+dhQ8gPT9uoqlgBik9vIvpX44p4z5EaGB vePCfsmrJ6rCdfL1uqQaOhnhF0mlj86h4qP+adxPkNQWHlavAc3uOQWtVMOiU2HH v34cxz81uUCFRNf6ENB6NwKOfNUxzFFSneukL4NfOHozrhvo8Dj03/jGiYU+0RjV STWI3snbBdN86kjRSVSDdX2ZecHBylBiTo2ARd5hbZNVU640AYRFMmF9MByRPXsY /eltV1LrqshYcgicoiEIh5z0PsHU//5LS4mjKektAEa6z0Kefp4m9Ctoa5Br70Yi w4TeIolNA/8BneLzdSlJuCATqNYbEcdGT8e1EVA7eaMD+NIN2A== -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:02 2025 by rpki-client