This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/F1F8A98442D811ED854B9670C4F9AE02.roa File: F1F8A98442D811ED854B9670C4F9AE02.roa (raw, json) Hash identifier: TvztujTH0aF+f3+QnJDK+OdcTc4zPAtby3BUe4w8JhA= Subject key identifier: AF:43:70:62:47:C0:DF:20:E6:57:17:B3:FA:D0:54:D0:F5:40:D5:46 Certificate issuer: /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Certificate serial: 0259 Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/F1F8A98442D811ED854B9670C4F9AE02.roa Signing time: Wed 03 Dec 2025 00:30:20 +0000 ROA not before: Wed 03 Dec 2025 00:30:20 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 9253 IP address blocks: 45.115.196.0/22 maxlen: 24 103.84.220.0/22 maxlen: 24 202.126.48.0/20 maxlen: 24 2406:9400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C3CC, serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Validity Not Before: Dec 3 00:30:20 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692f849c-f4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5b:43:0a:dd:dc:9c:ed:08:c0:9d:a6:39:a5: 2c:71:b5:c3:9a:18:f1:30:20:e7:ea:96:26:3e:a5: f3:a3:5a:6e:dc:22:30:6c:6e:c2:38:46:30:d8:b3: bf:ff:51:40:2a:0c:22:2d:23:58:d5:d2:ff:ba:e5: d8:49:51:1f:d3:ce:e3:40:1c:66:43:f1:01:ea:9f: 95:05:60:f8:f3:07:38:f8:d1:15:6f:cf:65:63:70: 8a:e3:ca:45:73:fe:e7:a8:1a:90:c1:18:30:a6:d3: e1:05:6a:a9:4d:2e:ac:6e:48:d1:d7:3e:42:64:21: 3f:c7:6d:77:91:b6:70:60:6c:86:3c:a0:0d:ce:d8: 1a:fe:4d:4c:71:8c:8e:0d:af:af:8e:c3:0c:11:38: 7f:ea:7d:52:94:cf:32:20:8b:f7:47:1e:67:2b:48: cb:9b:c2:34:42:e0:67:d9:87:5c:03:fb:f3:e1:6d: 23:48:7e:fd:95:95:25:1b:3b:b5:7a:2b:4d:d0:d9: ac:f0:e0:4f:52:1c:46:f8:39:02:a8:90:90:65:ed: 69:10:6d:3c:86:c0:22:4e:ad:0a:70:fc:f5:97:1a: 72:0f:d0:59:ac:97:67:28:74:4a:b4:a6:ea:29:6f: cb:2e:10:2c:42:34:7a:4c:23:44:bc:73:05:b1:55: f3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:43:70:62:47:C0:DF:20:E6:57:17:B3:FA:D0:54:D0:F5:40:D5:46 X509v3 Authority Key Identifier: keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/F1F8A98442D811ED854B9670C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.115.196.0/22 103.84.220.0/22 202.126.48.0/20 IPv6: 2406:9400::/32 Signature Algorithm: sha256WithRSAEncryption a0:80:eb:31:19:a8:17:4d:38:f5:48:45:a1:1a:0e:be:2a:f4: 5e:11:45:38:92:92:b7:6f:84:d1:ba:d7:94:d7:23:05:e2:9a: bc:32:7d:c1:cc:9b:2a:0c:b8:88:be:3b:f4:57:b7:bf:c2:c8: d4:4f:72:c3:66:42:43:15:6b:86:ef:09:da:31:57:1a:84:c6: 2c:21:8f:39:71:c3:80:c9:c1:62:92:27:84:a5:4e:d6:39:91: bf:23:cb:eb:1c:50:ec:a9:24:77:77:77:47:70:b6:12:c1:de: 69:b2:ba:2b:79:0e:30:35:fc:2a:e4:22:fc:0a:9e:bb:6b:95: 84:6c:31:79:bb:6d:28:ce:7b:0d:ef:d7:c1:ec:b9:cf:4f:12: b1:ee:99:27:04:25:2a:92:a4:0a:92:3d:42:73:cd:84:6e:4d: 59:4e:42:93:8f:e5:c4:25:ea:31:3e:cb:70:c6:2d:b0:71:d0: 84:cc:46:a5:58:0c:ea:e0:64:dd:3c:03:6e:67:f3:05:f1:cb: 74:4f:f2:ad:86:31:06:8d:db:36:84:d6:a7:5c:bd:c2:c7:69: d8:80:38:7b:95:24:03:5e:2f:1f:24:34:3e:19:61:2e:71:75: 6d:01:42:3e:cd:a9:87:54:cc:d8:1d:cf:17:af:3d:cc:54:d7: c2:b0:9f:03 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzQ0MxMTAvBgNVBAUTKDFCM0E0MTFBMDc1QTVEQjFBMkM2NDJGOEQ0QTFCQzND QjVCQ0JCMUMwHhcNMjUxMjAzMDAzMDIwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmODQ5Yy1mNGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ltDCt3cnO0IwJ2mOaUscbXDmhjxMCDn6pYmPqXzo1pu3CIwbG7COEYw2LO/ /1FAKgwiLSNY1dL/uuXYSVEf087jQBxmQ/EB6p+VBWD48wc4+NEVb89lY3CK48pF c/7nqBqQwRgwptPhBWqpTS6sbkjR1z5CZCE/x213kbZwYGyGPKANztga/k1McYyO Da+vjsMMETh/6n1SlM8yIIv3Rx5nK0jLm8I0QuBn2YdcA/vz4W0jSH79lZUlGzu1 eitN0Nms8OBPUhxG+DkCqJCQZe1pEG08hsAiTq0KcPz1lxpyD9BZrJdnKHRKtKbq KW/LLhAsQjR6TCNEvHMFsVXzawIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFK9DcGJH wN8g5lcXs/rQVND1QNVGMB8GA1UdIwQYMBaAFBs6QRoHWl2xosZC+NShvDy1vLsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzNDQy80QTE0NzQwNDQy RDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhiR2l4a0w0MUtHOFBMVzh1 eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d6cEJHZ2RhWGJHaXhrTDQxS0c4UExXOHV4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkMzQ0MvNEExNDc0MDQ0MkQ0MTFFREExMjYwRTZBQzRGOUFFMDIvRjFGOEE5ODQ0 MkQ4MTFFRDg1NEI5NjcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAItc8QDBAJnVNwDBATKfjAwDQQCAAIwBwMFACQGlAAwDQYJ KoZIhvcNAQELBQADggEBAKCA6zEZqBdNOPVIRaEaDr4q9F4RRTiSkrdvhNG615TX IwXimrwyfcHMmyoMuIi+O/RXt7/CyNRPcsNmQkMVa4bvCdoxVxqExiwhjzlxw4DJ wWKSJ4SlTtY5kb8jy+scUOypJHd3d0dwthLB3mmyuit5DjA1/CrkIvwKnrtrlYRs MXm7bSjOew3v18Hsuc9PErHumScEJSqSpAqSPUJzzYRuTVlOQpOP5cQl6jE+y3DG LbBx0ITMRqVYDOrgZN08A25n8wXxy3RP8q2GMQaN2zaE1qdcvcLHadiAOHuVJANe Lx8kND4ZYS5xdW0BQj7NqYdUzNgdzxevPcxU18KwnwM= -----END CERTIFICATE-----Generated at Sun Dec 7 06:53:18 2025 by rpki-client