This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/97834674B8C511F0A874F663C4F9AE02.roa File: 97834674B8C511F0A874F663C4F9AE02.roa (raw, json) Hash identifier: ccWVBhFOcENM09AuDRyLIP93A/dh9M6+1AU3r2Fkb/c= Subject key identifier: DD:B3:E2:2C:81:EE:AE:0E:FA:C7:3A:AE:B4:10:A0:E9:C1:93:99:99 Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0D10 Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/97834674B8C511F0A874F663C4F9AE02.roa Signing time: Mon 10 Nov 2025 04:24:48 +0000 ROA not before: Mon 10 Nov 2025 04:24:48 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 149765 IP address blocks: 123.136.28.0/24 maxlen: 24 2404:7e00:501::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3344 (0xd10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Nov 10 04:24:48 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69116910-2dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:eb:6b:53:fc:cd:db:63:0f:2e:77:e3:3b:7d: a4:67:42:69:71:0c:eb:91:85:16:21:c2:ad:77:7f: a8:e4:01:0d:3f:48:57:05:b6:f8:e7:d0:5a:8d:db: ae:6b:89:a4:2a:d6:d9:0e:56:93:91:c2:41:c6:8c: 67:45:06:6c:81:e3:5c:90:93:75:1a:01:fb:0a:0a: b5:5e:f7:1f:57:22:f4:8d:00:ed:f4:48:60:1e:c2: 18:39:ac:d9:9c:38:52:5a:12:32:b0:28:16:8c:d3: d5:d8:64:b0:95:63:9b:d4:d7:0d:38:38:c6:bd:12: e4:2b:fe:7f:a0:ac:79:a4:25:5b:2f:81:86:c4:46: 17:ee:c7:59:da:90:88:e0:21:7e:8f:ef:c7:cf:55: fb:38:57:5e:2d:2d:0e:a4:db:53:f8:1f:b4:1f:bd: 0f:0a:a9:11:a9:9f:7b:32:5e:2f:0a:43:c9:52:1c: 01:3e:5f:fa:2b:a6:96:16:2c:7f:ef:63:06:79:c6: ae:53:24:46:f1:09:ac:6e:83:45:bf:08:e4:88:d5: 04:a4:de:9f:ab:e8:eb:be:04:4e:24:48:c3:b0:a8: ed:4c:6a:b6:8e:e5:a7:b3:cd:87:50:21:ee:92:ea: b5:fe:c5:ab:b7:19:17:b9:8b:10:6c:42:3d:cb:13: 9f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B3:E2:2C:81:EE:AE:0E:FA:C7:3A:AE:B4:10:A0:E9:C1:93:99:99 X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/97834674B8C511F0A874F663C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.136.28.0/24 IPv6: 2404:7e00:501::/48 Signature Algorithm: sha256WithRSAEncryption 4d:17:49:66:65:5f:3e:6a:00:35:df:7a:31:8d:a0:40:f4:3d: 1d:76:08:9b:b6:01:65:e9:5b:d2:8e:f7:2c:a8:73:71:77:7c: 12:d5:93:61:ab:d2:ba:6b:78:f7:a8:b0:56:6f:61:a7:e9:f4: 31:13:4c:71:8b:61:70:b3:e3:75:0c:66:2d:b6:ec:be:95:55: 4f:de:07:e8:dd:d8:d5:ef:75:8a:11:7a:d4:4f:b6:e5:af:0c: b9:e4:f6:44:03:02:97:0b:fd:63:a1:0e:e1:51:08:28:f6:65: d1:05:a4:d9:35:8e:8c:63:89:99:e4:3b:50:f0:97:3b:f4:b9: a8:63:ca:03:31:ce:be:c8:48:a6:7a:87:d2:5e:0f:78:1a:d1: 10:3f:13:54:dc:be:ca:80:89:a2:90:c1:58:18:72:1e:7b:e0: ee:51:a8:ac:e4:16:50:19:db:82:77:dc:85:90:92:39:89:d0: 91:ea:89:9a:af:80:47:d3:83:ee:c3:a2:33:be:38:a2:05:2c: 98:2e:e8:13:7a:31:66:e7:49:31:c4:84:47:b6:5a:c6:b7:7d: 73:b3:80:e8:92:76:58:e6:bb:2c:e9:f0:53:06:8b:a0:f4:eb: 26:2e:78:6b:b2:48:87:5e:4d:2b:93:71:bd:a8:ec:35:55:14: bc:8d:36:5e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjUxMTEwMDQyNDQ4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OTExNjkxMC0yZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApetrU/zN22MPLnfjO32kZ0JpcQzrkYUWIcKtd3+o5AENP0hXBbb459Bajduu a4mkKtbZDlaTkcJBxoxnRQZsgeNckJN1GgH7Cgq1XvcfVyL0jQDt9EhgHsIYOazZ nDhSWhIysCgWjNPV2GSwlWOb1NcNODjGvRLkK/5/oKx5pCVbL4GGxEYX7sdZ2pCI 4CF+j+/Hz1X7OFdeLS0OpNtT+B+0H70PCqkRqZ97Ml4vCkPJUhwBPl/6K6aWFix/ 72MGecauUyRG8QmsboNFvwjkiNUEpN6fq+jrvgROJEjDsKjtTGq2juWns82HUCHu kuq1/sWrtxkXuYsQbEI9yxOfrwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFN2z4iyB 7q4O+sc6rrQQoOnBk5mZMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjcwOEYvNTZEQjBGMjRGMTYzMTFFOTlEQkVERjY1QzRGOUFFMDIvOTc4MzQ2NzRC OEM1MTFGMEE4NzRGNjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAB7iBwwDwQCAAIwCQMHACQEfgAFATANBgkqhkiG9w0BAQsF AAOCAQEATRdJZmVfPmoANd96MY2gQPQ9HXYIm7YBZelb0o73LKhzcXd8EtWTYavS umt496iwVm9hp+n0MRNMcYthcLPjdQxmLbbsvpVVT94H6N3Y1e91ihF61E+25a8M ueT2RAMClwv9Y6EO4VEIKPZl0QWk2TWOjGOJmeQ7UPCXO/S5qGPKAzHOvshIpnqH 0l4PeBrRED8TVNy+yoCJopDBWBhyHnvg7lGorOQWUBnbgnfchZCSOYnQkeqJmq+A R9OD7sOiM744ogUsmC7oE3oxZudJMcSER7Zaxrd9c7OA6JJ2WOa7LOnwUwaLoPTr Ji54a7JIh15NK5NxvajsNVUUvI02Xg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:57 2025 by rpki-client