This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/ACE844F047AA11ECA0F05026C4F9AE02.roa File: ACE844F047AA11ECA0F05026C4F9AE02.roa (raw, json) Hash identifier: rDIISPx2Jw6kCtly/sr/saYDXZ1Vwq2i5nDputMMqM0= Subject key identifier: 8D:05:B7:9D:A5:57:21:DB:17:67:FA:81:8E:4C:81:72:F7:AE:27:19 Certificate issuer: /CN=A9167CC5/serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713 Certificate serial: 04F2 Authority key identifier: 5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/ACE844F047AA11ECA0F05026C4F9AE02.roa Signing time: Fri 28 Nov 2025 22:54:37 +0000 ROA not before: Fri 28 Nov 2025 22:54:37 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 132075 IP address blocks: 103.23.24.0/22 maxlen: 22 103.23.24.0/23 maxlen: 23 103.23.24.0/24 maxlen: 24 103.23.25.0/24 maxlen: 24 103.23.26.0/23 maxlen: 23 103.23.26.0/24 maxlen: 24 103.23.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1266 (0x4f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167CC5, serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713 Validity Not Before: Nov 28 22:54:37 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692a282d-afaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:53:a5:de:25:e2:f3:4f:b3:67:2e:40:6a:c9: 07:b3:31:58:62:40:a8:e9:00:a3:9a:29:18:0e:9a: 68:e0:af:04:64:92:cf:23:11:8c:aa:43:37:0c:c7: 61:e1:a3:65:49:78:51:15:55:50:73:fb:82:58:c5: 60:b9:80:47:f6:52:25:94:29:f6:3f:35:8c:1b:c3: a4:a8:0f:cb:f6:ea:2c:2d:c7:ba:81:37:4b:13:5d: cd:b2:34:c3:56:63:12:30:a6:da:45:8e:ec:c0:56: c5:6f:ea:73:48:a6:8b:34:49:d2:21:8e:d3:54:53: 24:c7:fa:7c:45:f1:1b:b8:b6:81:86:f1:63:1e:19: 6a:a6:0d:3c:27:1c:f0:cd:5b:80:e1:8c:6d:c8:e1: 39:a6:09:99:29:25:f3:bc:f6:f3:ec:2b:b2:af:b6: 79:82:fd:60:36:ee:f2:84:72:3a:ce:9e:6f:08:f2: d2:02:aa:20:f4:4a:b7:bc:89:c7:4e:56:12:ee:0e: 53:7b:34:3a:44:c8:a7:b7:e0:d0:7a:74:f5:19:08: 2e:8e:b3:d6:99:39:ac:7b:f9:3d:e9:d9:6a:3b:8c: c8:18:a2:99:3d:dc:72:86:0b:97:ef:f5:af:ca:5d: d0:e0:7e:fb:aa:93:a3:47:6f:af:01:fa:c2:f1:05: 53:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:05:B7:9D:A5:57:21:DB:17:67:FA:81:8E:4C:81:72:F7:AE:27:19 X509v3 Authority Key Identifier: keyid:5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/ACE844F047AA11ECA0F05026C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.23.24.0/22 Signature Algorithm: sha256WithRSAEncryption 74:8f:0c:2b:03:22:e4:ab:d7:60:a4:5c:e4:c0:6d:47:b6:d6: bb:1e:54:fb:d1:1f:23:89:b9:9d:25:7c:ee:21:93:bb:57:8a: c5:21:8b:eb:3f:87:57:09:8c:ce:c0:51:0b:41:52:85:ed:96: 43:c9:4c:50:bb:b1:0b:72:67:ac:18:05:52:cb:6d:f5:e4:c5: b7:a0:6c:94:6b:bb:36:9e:0c:9a:8f:2c:a6:3a:94:2f:9e:33: e0:4e:e7:62:33:4a:1b:fa:96:e5:af:2e:f6:e8:ea:25:21:1a: b9:2d:ab:4b:37:a2:40:1f:89:1c:02:c8:6b:43:71:be:92:d8: d3:ce:cc:f0:eb:40:3c:a4:a6:2a:c1:5c:9c:59:55:45:de:6c: 0c:3a:b3:f2:dd:2f:69:65:4a:e8:00:28:f4:c1:33:b3:17:5f: 47:1d:74:45:6a:06:97:94:39:28:f2:b7:b3:25:7c:9d:37:c7: 8c:aa:8a:ae:d8:62:ab:7b:86:db:fd:97:27:91:be:3b:85:fa: c9:4b:55:e1:7d:52:c1:e6:38:8a:87:09:b3:ae:69:62:c9:0b: 1b:7e:69:95:17:3b:3f:4c:83:d9:05:20:db:be:bd:f1:6b:7d: 05:da:8f:16:fe:21:e8:bf:44:08:51:1c:cb:81:4c:8f:64:1e: e1:97:06:86 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDQzUxMTAvBgNVBAUTKDVEMjc4NUI1NEQxNjNFRDAxRUE1NDE4QkNGQTM0RjFC NzQ1NkI3MTMwHhcNMjUxMTI4MjI1NDM3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJhMjgyZC1hZmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolOl3iXi80+zZy5AaskHszFYYkCo6QCjmikYDppo4K8EZJLPIxGMqkM3DMdh 4aNlSXhRFVVQc/uCWMVguYBH9lIllCn2PzWMG8OkqA/L9uosLce6gTdLE13NsjTD VmMSMKbaRY7swFbFb+pzSKaLNEnSIY7TVFMkx/p8RfEbuLaBhvFjHhlqpg08Jxzw zVuA4YxtyOE5pgmZKSXzvPbz7Cuyr7Z5gv1gNu7yhHI6zp5vCPLSAqog9Eq3vInH TlYS7g5TezQ6RMint+DQenT1GQgujrPWmTmse/k96dlqO4zIGKKZPdxyhguX7/Wv yl3Q4H77qpOjR2+vAfrC8QVTawIDAQABo4IClTCCApEwHQYDVR0OBBYEFI0Ft52l VyHbF2f6gY5MgXL3ricZMB8GA1UdIwQYMBaAFF0nhbVNFj7QHqVBi8+jTxt0VrcT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0NDNS8yQUM0RDMzRTQ2 QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0QWVwVUdMejZOUEczUld0 eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTZUZ0VTBXUHRBZXBVR0x6Nk5QRzNSV3R4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjdDQzUvMkFDNEQzM0U0NkIxMTFFQzk0NUI0RjU3QzRGOUFFMDIvQUNFODQ0RjA0 N0FBMTFFQ0EwRjA1MDI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnFxgwDQYJKoZIhvcNAQELBQADggEBAHSPDCsDIuSr12Ck XOTAbUe21rseVPvRHyOJuZ0lfO4hk7tXisUhi+s/h1cJjM7AUQtBUoXtlkPJTFC7 sQtyZ6wYBVLLbfXkxbegbJRruzaeDJqPLKY6lC+eM+BO52IzShv6luWvLvbo6iUh Grktq0s3okAfiRwCyGtDcb6S2NPOzPDrQDykpirBXJxZVUXebAw6s/LdL2llSugA KPTBM7MXX0cddEVqBpeUOSjyt7MlfJ03x4yqiq7YYqt7htv9lyeRvjuF+slLVeF9 UsHmOIqHCbOuaWLJCxt+aZUXOz9Mg9kFINu+vfFrfQXajxb+Iei/RAhRHMuBTI9k HuGXBoY= -----END CERTIFICATE-----Generated at Sat Dec 6 17:08:02 2025 by rpki-client