This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/C3417AA6593611E98E4C8C44C4F9AE02.roa File: C3417AA6593611E98E4C8C44C4F9AE02.roa (raw, json) Hash identifier: CPG724JKOro03lp9kH78JPks3F1iBFJ6IMMveDvmHaY= Subject key identifier: 59:C1:D6:CD:C0:66:82:F4:E4:EA:06:D1:E4:65:F8:E2:AB:05:F9:2C Certificate issuer: /CN=A9166708/serialNumber=22792C70C98947BE8AF4F4A3E755AEDE7959D278 Certificate serial: 0FAF Authority key identifier: 22:79:2C:70:C9:89:47:BE:8A:F4:F4:A3:E7:55:AE:DE:79:59:D2:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/C3417AA6593611E98E4C8C44C4F9AE02.roa Signing time: Thu 22 May 2025 17:30:46 +0000 ROA not before: Thu 22 May 2025 17:30:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132232 IP address blocks: 103.7.252.0/22 maxlen: 22 2403:8700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.crl rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4015 (0xfaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166708, serialNumber=22792C70C98947BE8AF4F4A3E755AEDE7959D278 Validity Not Before: May 22 17:30:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=682f5f46-ce2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:93:d1:6f:e7:c2:6c:6e:2b:4f:46:43:67:6d: f0:1a:3b:3b:79:ab:da:d5:b9:9f:1e:d0:58:ec:ae: 19:18:2c:1d:51:6f:8f:b9:78:16:50:0b:65:14:37: 0b:32:64:63:fd:4d:98:3b:8d:25:08:e1:78:3b:ce: 40:4d:83:4a:d6:f4:58:b2:14:de:99:6b:8e:df:11: 11:c1:8e:7b:cc:96:91:b8:cb:40:6e:08:04:f9:8e: d1:b4:0e:4f:14:e9:c2:47:4a:9d:f8:e5:38:27:d1: d9:98:02:8f:60:1b:16:14:e1:2c:a4:91:05:de:71: ec:a7:54:48:25:81:ce:27:4c:e3:44:5f:9f:e2:1d: d3:cf:54:b1:d6:30:a2:f6:22:16:b0:de:37:a0:19: f0:98:79:58:20:9c:5f:e0:8a:67:d7:65:b2:00:d3: 9f:e5:ca:fe:bf:ae:d1:e9:d2:f7:51:03:4d:01:b0: c8:82:ba:2e:f4:8d:ea:af:21:ce:de:ac:1d:c1:8f: 84:40:ac:7e:76:f8:69:ba:04:6e:de:bb:f9:7c:cf: 47:81:2f:80:2c:4b:3e:bb:d0:ff:10:4c:3c:76:57: 38:f8:02:8d:3a:ac:cf:e8:03:e3:c2:3e:0b:c6:2a: a0:4c:2e:44:66:2f:41:e2:b1:6a:bd:14:04:6e:26: 08:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C1:D6:CD:C0:66:82:F4:E4:EA:06:D1:E4:65:F8:E2:AB:05:F9:2C X509v3 Authority Key Identifier: keyid:22:79:2C:70:C9:89:47:BE:8A:F4:F4:A3:E7:55:AE:DE:79:59:D2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/C3417AA6593611E98E4C8C44C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.7.252.0/22 IPv6: 2403:8700::/32 Signature Algorithm: sha256WithRSAEncryption 7d:04:59:5d:1f:a0:53:ce:16:b1:cf:23:c6:ab:ef:6c:57:b5: f2:d5:5b:5b:56:de:2a:71:13:4b:9c:63:79:0e:67:49:d1:c7: 87:2b:93:61:6e:e9:b7:c1:f1:9a:f2:0a:fd:49:1a:cc:eb:8d: e7:43:8c:d0:37:ef:74:52:de:76:9d:17:8c:cb:b8:58:87:a3: a0:c4:c5:eb:d5:49:59:e9:02:8f:2a:32:57:4e:75:e6:4d:5a: a8:99:07:48:e1:e3:70:e8:c9:98:b3:28:6c:44:96:76:9f:09: 0c:bc:bd:be:55:ef:4d:f8:0e:8c:36:21:e6:85:6e:b1:98:e0: d5:4f:ba:54:86:a4:00:84:b8:c2:ec:5c:f0:95:97:52:ba:aa: 07:d1:a4:77:0e:7b:d2:79:c7:52:e9:cf:69:7e:91:b9:ab:14: 84:1d:1e:e1:99:55:c3:dd:ae:29:49:e8:67:af:82:0d:47:ee: 8f:f9:59:89:82:cb:cb:20:ae:61:82:41:ab:8d:ba:5d:42:83: 37:c1:59:9f:e0:b5:50:26:88:15:97:1c:c0:99:7a:71:ca:b1: a2:ac:d8:22:af:f8:08:76:1d:09:03:23:96:3d:5b:52:03:09: 9c:25:46:ab:c4:a3:0f:b0:c3:e0:28:5d:23:fb:58:1f:e6:1c: ac:73:f5:24 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICD68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY3MDgxMTAvBgNVBAUTKDIyNzkyQzcwQzk4OTQ3QkU4QUY0RjRBM0U3NTVBRURF Nzk1OUQyNzgwHhcNMjUwNTIyMTczMDQ2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmNWY0Ni1jZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZPRb+fCbG4rT0ZDZ23wGjs7eava1bmfHtBY7K4ZGCwdUW+PuXgWUAtlFDcL MmRj/U2YO40lCOF4O85ATYNK1vRYshTemWuO3xERwY57zJaRuMtAbggE+Y7RtA5P FOnCR0qd+OU4J9HZmAKPYBsWFOEspJEF3nHsp1RIJYHOJ0zjRF+f4h3Tz1Sx1jCi 9iIWsN43oBnwmHlYIJxf4Ipn12WyANOf5cr+v67R6dL3UQNNAbDIgrou9I3qryHO 3qwdwY+EQKx+dvhpugRu3rv5fM9HgS+ALEs+u9D/EEw8dlc4+AKNOqzP6APjwj4L xiqgTC5EZi9B4rFqvRQEbiYIgwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFnB1s3A ZoL05OoG0eRl+OKrBfksMB8GA1UdIwQYMBaAFCJ5LHDJiUe+ivT0o+dVrt55WdJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjcwOC9GQTUyNkI1MDU5 MzUxMUU5OEI1NEJDNDNDNEY5QUUwMi9JbmtzY01tSlI3Nks5UFNqNTFXdTNubFow bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lua3NjTW1KUjc2SzlQU2o1MVd1M25sWjBuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjY3MDgvRkE1MjZCNTA1OTM1MTFFOThCNTRCQzQzQzRGOUFFMDIvQzM0MTdBQTY1 OTM2MTFFOThFNEM4QzQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnB/wwDQQCAAIwBwMFACQDhwAwDQYJKoZIhvcNAQELBQAD ggEBAH0EWV0foFPOFrHPI8ar72xXtfLVW1tW3ipxE0ucY3kOZ0nRx4crk2Fu6bfB 8ZryCv1JGszrjedDjNA373RS3nadF4zLuFiHo6DExevVSVnpAo8qMldOdeZNWqiZ B0jh43DoyZizKGxElnafCQy8vb5V7034Dow2IeaFbrGY4NVPulSGpACEuMLsXPCV l1K6qgfRpHcOe9J5x1Lpz2l+kbmrFIQdHuGZVcPdrilJ6Gevgg1H7o/5WYmCy8sg rmGCQauNul1CgzfBWZ/gtVAmiBWXHMCZenHKsaKs2CKv+Ah2HQkDI5Y9W1IDCZwl RqvEow+ww+AoXSP7WB/mHKxz9SQ= -----END CERTIFICATE-----Generated at Sat Dec 6 19:36:38 2025 by rpki-client