This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/D5775FF4E54F11F0875E48B9366F56BC.roa File: D5775FF4E54F11F0875E48B9366F56BC.roa (raw, json) Hash identifier: osLoFrVcX54KJqPsQx6xeONXJvxSUThAoJhPVtX+95Q= Subject key identifier: 70:93:18:EB:F9:15:89:27:FB:82:A2:16:6B:0B:A3:45:A1:68:6A:6F Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Certificate serial: 083D Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/D5775FF4E54F11F0875E48B9366F56BC.roa Signing time: Tue 30 Dec 2025 07:19:09 +0000 ROA not before: Tue 30 Dec 2025 07:19:09 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141215 IP address blocks: 103.156.152.0/24 maxlen: 24 2001:df2:89c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2109 (0x83d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Validity Not Before: Dec 30 07:19:09 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69537ced-af77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f8:4b:ac:60:85:29:31:65:b0:e3:92:47:26: 1f:2e:2f:09:32:76:d2:ab:e8:6f:b4:b6:84:9f:8e: b7:ee:21:89:90:58:c7:81:79:ad:ed:e2:ea:f3:39: db:83:30:e7:35:ee:92:ec:91:e0:78:a2:1f:38:a2: f0:62:db:80:d0:c4:1c:d1:40:2b:06:0e:56:27:75: 69:b2:a8:7b:b5:ae:87:6d:a3:d3:2d:73:1f:6a:ea: 7f:42:7e:bc:e4:2c:0e:df:1e:3d:87:c3:16:5c:d7: 01:df:65:6d:30:14:d1:53:b8:cb:9b:2e:e4:fa:6a: 15:47:e4:70:f0:be:cc:f9:8c:7d:76:4c:12:72:22: d8:ee:80:ba:fb:e3:94:5a:e8:54:a7:ae:9f:f5:57: 72:fb:74:14:4d:cd:d2:50:fb:32:d8:d1:b7:76:c2: 76:fc:6b:cb:8f:cd:5d:57:4f:cd:4f:d6:a6:b2:f2: 6c:37:01:1e:38:15:31:61:9d:1d:02:9a:56:37:22: 36:70:d3:9e:7d:44:44:c4:e2:51:27:2d:7b:67:61: 60:ca:b5:0f:52:35:75:18:78:fe:01:e7:9c:08:2f: b1:39:91:a5:73:b8:de:17:36:48:a1:e6:c2:c1:b3: 43:35:a8:39:bf:4c:66:08:fb:4c:86:8b:cc:6d:b9: ee:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:93:18:EB:F9:15:89:27:FB:82:A2:16:6B:0B:A3:45:A1:68:6A:6F X509v3 Authority Key Identifier: keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/D5775FF4E54F11F0875E48B9366F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.152.0/24 IPv6: 2001:df2:89c0::/48 Signature Algorithm: sha256WithRSAEncryption 7a:63:db:29:b0:0b:cd:be:fc:82:16:51:40:a1:a4:56:8e:8b: 4f:0c:21:c8:50:9d:0e:c5:2d:b5:ab:ad:06:6b:e5:6f:63:01: 48:2e:ab:55:12:df:91:9e:12:4a:b3:da:c4:b4:42:4f:c2:ca: bd:80:18:f0:b1:d9:47:27:c2:c9:09:61:ff:c8:1e:be:ca:01: 18:d0:a3:16:c0:91:62:5a:ea:14:f0:2f:ea:3a:9c:47:ef:6c: 1f:ff:5f:44:13:df:c7:d8:c4:3d:a2:17:f8:4c:d9:af:eb:15: 35:4e:12:b1:d4:c3:d8:29:df:39:b8:9c:f5:40:d9:db:cc:eb: 12:40:1e:5f:dd:06:a1:ba:cd:33:f1:45:c0:fb:9f:a0:aa:e6: 61:5a:02:5a:2a:5f:68:b9:93:32:75:71:71:f9:5d:94:89:0d: 4c:a7:bc:60:b8:ab:de:f3:7a:a3:f3:a1:91:3d:d0:cf:0f:a9: 9b:c4:9b:6c:21:d0:89:4e:9f:00:d9:2f:24:fb:01:ef:11:1e: 07:84:2f:53:ef:0d:22:99:ac:ee:53:76:19:59:ff:4c:1e:c3: d9:4e:52:db:0c:dc:d7:60:98:d4:d0:49:b6:aa:10:10:52:48: d0:60:08:b9:34:8a:68:1a:c3:53:3d:03:df:7b:1e:86:7f:1d: 37:87:cb:c2 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVGQUQxMTAvBgNVBAUTKDY4N0JFQjI3N0EwNTlERUZFQTJCRURENjdBRkIxQjgy Mzg4RTVFQjEwHhcNMjUxMjMwMDcxOTA5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTUzN2NlZC1hZjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPhLrGCFKTFlsOOSRyYfLi8JMnbSq+hvtLaEn4637iGJkFjHgXmt7eLq8znb gzDnNe6S7JHgeKIfOKLwYtuA0MQc0UArBg5WJ3Vpsqh7ta6HbaPTLXMfaup/Qn68 5CwO3x49h8MWXNcB32VtMBTRU7jLmy7k+moVR+Rw8L7M+Yx9dkwSciLY7oC6++OU WuhUp66f9Vdy+3QUTc3SUPsy2NG3dsJ2/GvLj81dV0/NT9amsvJsNwEeOBUxYZ0d AppWNyI2cNOefURExOJRJy17Z2FgyrUPUjV1GHj+AeecCC+xOZGlc7jeFzZIoebC wbNDNag5v0xmCPtMhovMbbnuAQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHCTGOv5 FYkn+4KiFmsLo0WhaGpvMB8GA1UdIwQYMBaAFGh76yd6BZ3v6ivt1nr7G4I4jl6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZBRC9BNEQ3ODk5RTA4 NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5lX3FLLTNXZXZzYmdqaU9Y ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIdnJKM29GbmVfcUstM1dldnNiZ2ppT1hyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjVGQUQvQTRENzg5OUUwODY2MTFFQjhBMkQxNTM1QzRGOUFFMDIvRDU3NzVGRjRF NTRGMTFGMDg3NUU0OEI5MzY2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnnJgwDwQCAAIwCQMHACABDfKJwDANBgkqhkiG9w0BAQsF AAOCAQEAemPbKbALzb78ghZRQKGkVo6LTwwhyFCdDsUttautBmvlb2MBSC6rVRLf kZ4SSrPaxLRCT8LKvYAY8LHZRyfCyQlh/8gevsoBGNCjFsCRYlrqFPAv6jqcR+9s H/9fRBPfx9jEPaIX+EzZr+sVNU4SsdTD2CnfObic9UDZ28zrEkAeX90GobrNM/FF wPufoKrmYVoCWipfaLmTMnVxcfldlIkNTKe8YLir3vN6o/OhkT3Qzw+pm8SbbCHQ iU6fANkvJPsB7xEeB4QvU+8NIpms7lN2GVn/TB7D2U5S2wzc12CY1NBJtqoQEFJI 0GAIuTSKaBrDUz0D33sehn8dN4fLwg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:33 2026 by rpki-client