This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/C16E8E16256511EA98F3D465C4F9AE02.roa File: C16E8E16256511EA98F3D465C4F9AE02.roa (raw, json) Hash identifier: sDtUwRw9ku74o+SMju5AR4ol6xMTg9UP6ZV3q7DPf3I= Subject key identifier: EE:73:38:73:B1:A9:6D:A9:19:38:AF:C6:53:B8:66:15:60:7C:9C:54 Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Certificate serial: 0EBD Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/C16E8E16256511EA98F3D465C4F9AE02.roa Signing time: Wed 31 Dec 2025 18:15:06 +0000 ROA not before: Wed 31 Dec 2025 18:15:06 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 23881 IP address blocks: 45.121.200.0/24 maxlen: 24 45.121.201.0/24 maxlen: 24 45.121.203.0/24 maxlen: 24 103.15.192.0/24 maxlen: 24 103.15.194.0/24 maxlen: 24 103.15.195.0/24 maxlen: 24 203.90.224.0/24 maxlen: 24 203.90.225.0/24 maxlen: 24 203.90.226.0/24 maxlen: 24 203.90.227.0/24 maxlen: 24 203.90.228.0/24 maxlen: 24 203.90.229.0/24 maxlen: 24 203.90.230.0/24 maxlen: 24 203.90.252.0/24 maxlen: 24 203.90.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3773 (0xebd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Validity Not Before: Dec 31 18:15:06 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6955682a-d926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2d:bb:b5:16:f7:ff:d4:2a:3a:86:d7:b3:c3: d6:4b:f3:73:8d:2e:9d:0c:6a:e8:71:f2:d1:81:86: 77:2e:2c:75:92:57:1f:e3:10:80:2e:06:71:ca:db: 4d:17:bb:ca:33:1e:da:3c:a1:c6:84:5c:3c:c8:ee: 5c:0d:db:8a:99:e6:e2:65:6a:0e:d5:6e:94:be:3f: 78:b8:2f:f4:63:73:fb:7a:09:bb:68:c5:24:2c:41: 69:d1:63:8f:a2:75:e5:0e:4f:1a:49:1a:cd:06:25: 12:46:d1:b0:da:40:80:89:09:14:2a:32:52:93:58: 7e:f3:f7:98:15:c6:ea:6f:03:3d:45:23:3e:e2:54: 65:f5:90:c0:e9:e0:8f:f3:eb:73:10:58:88:99:15: 14:69:ac:14:c3:93:02:b1:4c:5e:3d:24:a5:c7:a8: ec:7b:6e:67:b6:8d:0a:e4:f8:74:38:bb:9e:44:c9: 4d:5f:8c:b8:9b:cb:5c:bc:5c:8f:eb:df:09:7b:08: ed:eb:79:62:42:dd:de:ed:c1:6e:e6:c7:04:d4:ed: 1c:3e:82:ef:31:6d:67:e2:d2:3e:86:47:95:56:16: b6:33:d6:91:b9:2d:bc:63:ce:67:d2:db:7c:37:7a: 05:cb:3d:67:f4:ef:60:37:dd:1c:63:a5:07:6a:35: 6b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:73:38:73:B1:A9:6D:A9:19:38:AF:C6:53:B8:66:15:60:7C:9C:54 X509v3 Authority Key Identifier: keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/C16E8E16256511EA98F3D465C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.121.200.0/23 45.121.203.0/24 103.15.192.0/24 103.15.194.0/23 203.90.224.0-203.90.230.255 203.90.252.0/24 203.90.254.0/24 Signature Algorithm: sha256WithRSAEncryption 55:0c:7b:ee:69:0c:d3:94:1e:a4:8b:59:40:5c:52:0f:76:4b: 6a:09:f6:a8:ce:26:82:c0:e7:24:d8:40:b3:fc:d0:a9:d0:35: 80:97:e9:39:23:59:d9:3f:1a:84:0c:23:92:f8:97:d3:06:6a: a5:16:ad:fe:25:30:36:79:18:bf:dd:0e:2f:ef:ec:cf:c2:32: 28:26:23:6e:73:41:bf:cd:b9:43:d0:22:24:73:ac:05:7c:90: e5:38:69:69:e8:05:51:10:e2:3e:31:51:82:34:c5:a6:9f:18: 0a:ff:69:f1:34:9a:1b:09:c3:9a:d2:f0:28:4a:0f:e1:ed:e0: da:21:62:14:87:3a:b9:de:7e:9d:51:85:76:d5:63:57:6c:fd: 36:a6:dc:b6:b0:df:87:65:34:f7:39:46:fd:d1:80:9c:fa:b4: cc:e3:ae:f4:2f:6e:21:56:95:79:ef:cd:55:1d:ba:a9:19:27: ca:cf:4f:4c:30:27:c9:9f:40:8e:76:1b:1c:72:c2:d2:3a:28: 20:57:04:49:a2:16:76:e5:d3:cb:a8:1a:0b:b8:72:e1:cc:76: 1c:62:75:48:45:a7:2b:a7:4a:e0:5a:05:7f:36:5e:28:2d:46: 6d:13:62:45:ab:c3:e9:04:cd:11:e5:a6:be:ae:be:04:46:6c: be:71:cf:57 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgICDr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NjlBREExMTAvBgNVBAUTKEM0MTcxNUZFRjIwMDEzM0Q5MTIzMjUwRkJCNjUzMUU4 OEE0QTk5REEwHhcNMjUxMjMxMTgxNTA2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU1NjgyYS1kOTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6i27tRb3/9QqOobXs8PWS/NzjS6dDGrocfLRgYZ3Lix1klcf4xCALgZxyttN F7vKMx7aPKHGhFw8yO5cDduKmebiZWoO1W6Uvj94uC/0Y3P7egm7aMUkLEFp0WOP onXlDk8aSRrNBiUSRtGw2kCAiQkUKjJSk1h+8/eYFcbqbwM9RSM+4lRl9ZDA6eCP 8+tzEFiImRUUaawUw5MCsUxePSSlx6jse25nto0K5Ph0OLueRMlNX4y4m8tcvFyP 698Jewjt63liQt3e7cFu5scE1O0cPoLvMW1n4tI+hkeVVha2M9aRuS28Y85n0tt8 N3oFyz1n9O9gN90cY6UHajVruQIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFO5zOHOx qW2pGTivxlO4ZhVgfJxUMB8GA1UdIwQYMBaAFMQXFf7yABM9kSMlD7tlMeiKSpna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUFEQS9GRjMyMDFDRUE2 QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6MlJJeVVQdTJVeDZJcEtt ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCY1ZfdklBRXoyUkl5VVB1MlV4NklwS21kby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjlBREEvRkYzMjAxQ0VBNkIyMTFFOThEMkIxODYwQzRGOUFFMDIvQzE2RThFMTYy NTY1MTFFQTk4RjNENDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSwYIKwYBBQUHAQcBAf8E PDA6MDgEAgABMDIDBAEtecgDBAAtecsDBABnD8ADBAFnD8IwDAMEBcta4AMEAMta 5gMEAMta/AMEAMta/jANBgkqhkiG9w0BAQsFAAOCAQEAVQx77mkM05QepItZQFxS D3ZLagn2qM4mgsDnJNhAs/zQqdA1gJfpOSNZ2T8ahAwjkviX0wZqpRat/iUwNnkY v90OL+/sz8IyKCYjbnNBv825Q9AiJHOsBXyQ5ThpaegFURDiPjFRgjTFpp8YCv9p 8TSaGwnDmtLwKEoP4e3g2iFiFIc6ud5+nVGFdtVjV2z9NqbctrDfh2U09zlG/dGA nPq0zOOu9C9uIVaVee/NVR26qRknys9PTDAnyZ9AjnYbHHLC0jooIFcESaIWduXT y6gaC7hy4cx2HGJ1SEWnK6dK4FoFfzZeKC1GbRNiRavD6QTNEeWmvq6+BEZsvnHP Vw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:57:51 2026 by rpki-client