This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/0ED6FD58E4AC11F09CFF02084D6F56BC.roa File: 0ED6FD58E4AC11F09CFF02084D6F56BC.roa (raw, json) Hash identifier: ndDyR3nARcCpI8M00O5NTsG0TXsMVKolzBW8M2vjJSM= Subject key identifier: D7:60:0C:D6:8E:7F:91:24:A4:B1:28:3B:7A:D8:D9:7C:D9:73:A3:66 Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Certificate serial: 083B Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/0ED6FD58E4AC11F09CFF02084D6F56BC.roa Signing time: Mon 29 Dec 2025 11:46:48 +0000 ROA not before: Mon 29 Dec 2025 11:46:48 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 23750 IP address blocks: 103.156.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2107 (0x83b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Validity Not Before: Dec 29 11:46:48 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69526a28-8047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:86:55:c8:cb:40:4f:75:e4:ef:ec:10:3c:ce: 4a:c9:56:36:5f:43:8f:b6:54:b9:d9:ca:9f:98:94: 0c:ac:d6:94:79:12:33:32:b7:34:4e:f3:6f:bf:f7: a5:fd:30:f8:20:96:fc:10:6e:52:a6:48:37:51:4b: 19:77:52:eb:52:3d:69:6c:94:cf:67:d0:53:57:2e: 99:38:04:a2:cd:ed:cd:c7:0f:2b:03:19:dc:cc:30: 3e:55:04:29:64:2a:3a:26:4c:ef:ff:00:8e:92:4e: 31:2c:db:00:8f:d8:13:f4:2b:5d:d7:e7:e5:36:8c: 6a:02:8e:f9:58:10:c7:6f:9d:2a:02:95:33:84:38: fe:a5:80:55:92:ae:c8:31:cb:57:e8:4f:41:a6:78: a3:b3:27:79:bd:4b:2c:bd:4b:66:8f:0f:ad:e2:40: b7:d1:e2:ea:df:4d:72:a0:40:0d:92:96:b1:43:64: 1b:9a:c0:f3:44:8d:40:a5:58:f3:7c:b9:52:8d:ec: 24:52:61:a8:7c:71:9c:35:6d:30:3f:42:7e:12:0d: ff:72:c1:9e:cb:a8:ca:55:e7:04:45:0d:87:1c:37: 0a:0f:29:be:93:22:09:47:1f:fb:28:76:01:5a:0a: 86:66:95:a2:03:f9:32:c9:3f:36:d5:35:34:82:54: 61:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:60:0C:D6:8E:7F:91:24:A4:B1:28:3B:7A:D8:D9:7C:D9:73:A3:66 X509v3 Authority Key Identifier: keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/0ED6FD58E4AC11F09CFF02084D6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.153.0/24 Signature Algorithm: sha256WithRSAEncryption ad:c5:cc:4b:ac:1a:ff:ed:44:38:6c:48:a2:6c:c4:01:60:cf: 7c:2c:9b:8b:7a:8a:53:72:9a:f5:af:b7:0a:6c:58:fc:1f:5a: 80:61:66:60:f7:69:56:f4:45:b5:70:28:b6:cf:51:bf:d3:29: 6e:5d:25:a9:6e:fe:e5:da:42:1d:2f:0e:a1:04:f8:a0:1a:60: 95:74:59:6f:5f:7b:6a:6e:26:de:3b:24:f8:54:89:57:fc:12: 04:61:d8:86:9e:a7:86:93:0f:de:56:1b:b7:6c:44:75:96:f3: 96:f6:05:1d:19:d8:1d:5c:34:b3:fa:1c:02:d7:ba:10:6b:0b: 0c:83:b9:88:3e:f4:f8:c1:db:ca:63:a2:21:74:6f:b4:5a:7c: d1:ce:70:59:2d:a7:92:05:8f:84:d2:f8:13:06:4f:c9:91:f2: 7c:8d:9c:fa:e2:2c:2c:47:1d:2d:80:71:a0:e1:af:fe:1e:f2: 7c:35:54:d2:3b:ee:36:e0:bd:9a:05:3f:41:ec:41:28:76:62: 1f:51:eb:a6:ec:07:8b:39:f0:63:b8:0e:73:71:d7:43:98:e2: cb:39:3e:e4:96:0a:f1:40:e4:d3:b0:53:05:38:a4:dc:47:f0: 65:26:ba:07:2d:86:3a:43:fa:be:3e:41:de:c8:5b:28:d9:5a: d8:83:ef:3a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVGQUQxMTAvBgNVBAUTKDY4N0JFQjI3N0EwNTlERUZFQTJCRURENjdBRkIxQjgy Mzg4RTVFQjEwHhcNMjUxMjI5MTE0NjQ4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTUyNmEyOC04MDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4ZVyMtAT3Xk7+wQPM5KyVY2X0OPtlS52cqfmJQMrNaUeRIzMrc0TvNvv/el /TD4IJb8EG5Spkg3UUsZd1LrUj1pbJTPZ9BTVy6ZOASize3Nxw8rAxnczDA+VQQp ZCo6Jkzv/wCOkk4xLNsAj9gT9Ctd1+flNoxqAo75WBDHb50qApUzhDj+pYBVkq7I MctX6E9Bpnijsyd5vUssvUtmjw+t4kC30eLq301yoEANkpaxQ2QbmsDzRI1ApVjz fLlSjewkUmGofHGcNW0wP0J+Eg3/csGey6jKVecERQ2HHDcKDym+kyIJRx/7KHYB WgqGZpWiA/kyyT821TU0glRhcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNdgDNaO f5EkpLEoO3rY2XzZc6NmMB8GA1UdIwQYMBaAFGh76yd6BZ3v6ivt1nr7G4I4jl6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZBRC9BNEQ3ODk5RTA4 NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5lX3FLLTNXZXZzYmdqaU9Y ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIdnJKM29GbmVfcUstM1dldnNiZ2ppT1hyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjVGQUQvQTRENzg5OUUwODY2MTFFQjhBMkQxNTM1QzRGOUFFMDIvMEVENkZENThF NEFDMTFGMDlDRkYwMjA4NEQ2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnnJkwDQYJKoZIhvcNAQELBQADggEBAK3FzEusGv/tRDhs SKJsxAFgz3wsm4t6ilNymvWvtwpsWPwfWoBhZmD3aVb0RbVwKLbPUb/TKW5dJalu /uXaQh0vDqEE+KAaYJV0WW9fe2puJt47JPhUiVf8EgRh2Iaep4aTD95WG7dsRHWW 85b2BR0Z2B1cNLP6HALXuhBrCwyDuYg+9PjB28pjoiF0b7RafNHOcFktp5IFj4TS +BMGT8mR8nyNnPriLCxHHS2AcaDhr/4e8nw1VNI77jbgvZoFP0HsQSh2Yh9R66bs B4s58GO4DnNx10OY4ss5PuSWCvFA5NOwUwU4pNxH8GUmugcthjpD+r4+Qd7IWyjZ WtiD7zo= -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:10 2026 by rpki-client