This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/B02CCB344E0C11EF9175067FC4F9AE02.roa File: B02CCB344E0C11EF9175067FC4F9AE02.roa (raw, json) Hash identifier: B07v/r28GGPExOvdtIgZQOaQqr8pYN3jGjnhD5+9r68= Subject key identifier: C5:2D:DA:EA:D3:90:DD:BC:97:51:26:14:F4:76:44:41:78:9D:E4:B8 Certificate issuer: /CN=A916E44B/serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03 Certificate serial: 0108 Authority key identifier: 81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/B02CCB344E0C11EF9175067FC4F9AE02.roa Signing time: Fri 05 Dec 2025 03:13:27 +0000 ROA not before: Fri 05 Dec 2025 03:13:27 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 16509 IP address blocks: 122.252.145.0/24 maxlen: 24 122.252.146.0/24 maxlen: 24 122.252.147.0/24 maxlen: 24 122.252.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E44B, serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03 Validity Not Before: Dec 5 03:13:27 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69324dd7-d575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:9a:ee:fd:2b:77:b1:71:72:4a:0f:0b:a7: fd:5d:7c:e3:8e:c9:eb:7c:1d:f5:36:02:0b:b9:f6: 80:44:7c:39:bc:8c:ea:ae:7e:76:d3:41:9b:ee:f5: 72:14:09:90:de:7d:cd:bc:ba:32:1d:e9:17:15:20: 08:95:59:3b:36:7a:51:91:da:7b:5d:61:2c:bb:c7: 31:eb:74:ec:94:9f:ad:9f:e4:dc:75:c7:b2:5c:dc: 96:3c:52:f0:f7:6b:53:63:91:93:86:70:bb:b6:90: ca:5b:25:6a:b0:90:df:8b:9f:ef:4d:45:5d:e4:7a: 37:db:c1:ef:93:cf:85:e7:06:d6:79:b1:44:44:7a: cc:d0:0f:80:b9:02:47:14:97:21:60:65:97:31:5a: d3:10:c8:9c:15:b2:97:b9:52:29:86:81:f0:62:45: f7:ce:3f:07:89:db:63:74:92:5c:de:14:e6:44:bd: 3b:fe:fb:fa:ad:c5:32:81:92:aa:97:ec:ac:52:ff: 46:9c:2f:fa:5e:56:ff:67:72:02:7f:1a:cd:07:1d: 36:5b:12:93:9a:b0:a7:d9:5b:1b:23:f0:9e:ab:59: ac:4c:e5:7e:38:cc:1c:9f:e7:5e:60:bb:0b:35:97: 0c:8d:1d:72:0a:aa:49:bd:69:58:61:d4:06:82:76: 6a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2D:DA:EA:D3:90:DD:BC:97:51:26:14:F4:76:44:41:78:9D:E4:B8 X509v3 Authority Key Identifier: keyid:81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/B02CCB344E0C11EF9175067FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.252.145.0-122.252.151.255 Signature Algorithm: sha256WithRSAEncryption 9c:b3:67:24:97:be:e1:7f:0a:36:d9:01:b9:c7:c5:48:ef:b2: 04:9a:56:3d:3f:0f:14:77:6e:16:f1:61:7b:67:81:f6:5c:ef: 32:f7:c3:77:56:f7:40:dd:f7:48:21:fb:90:6f:55:6f:66:a3: 35:81:7f:37:19:50:05:fb:a1:fd:00:cd:46:7c:ec:65:f7:94: 86:4e:f8:e0:3f:44:6f:b5:3a:4d:3f:3d:9d:29:1f:c0:2c:6e: f8:f2:34:df:35:57:60:00:57:1c:2f:6b:92:a5:0a:13:44:da: 0a:00:6d:a9:c4:5a:ef:52:8d:0e:0c:79:1d:cb:25:13:bb:c8: 5d:12:c6:82:d5:27:71:53:d5:c2:d9:ad:de:8b:2e:d7:73:f3: cb:43:3c:88:88:76:44:89:7c:f5:7d:52:b4:22:8c:d4:b1:0a: 2e:a8:26:57:9c:49:bf:cf:36:24:43:e6:8e:7e:ad:bb:c1:18: c8:84:fa:92:db:71:aa:e1:f4:42:7d:90:61:67:0a:04:c1:79: d5:bb:ef:d2:bf:34:92:94:f1:5f:2a:5d:db:23:5f:d2:19:23: 49:94:79:7f:6f:e9:07:a5:81:32:10:f6:4a:f0:f7:bb:b1:17: ea:50:7a:34:d8:97:00:d5:bb:d6:ac:f9:f1:a2:5a:b8:a1:d8: 2e:5c:18:12 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU0NEIxMTAvBgNVBAUTKDgxMjI0M0U2QjVEMERFMTFBRTcwQzcyN0IzOUQxRjIx RTNBRUFDMDMwHhcNMjUxMjA1MDMxMzI3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMyNGRkNy1kNTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZma7v0rd7FxckoPC6f9XXzjjsnrfB31NgILufaARHw5vIzqrn5200Gb7vVy FAmQ3n3NvLoyHekXFSAIlVk7NnpRkdp7XWEsu8cx63TslJ+tn+TcdceyXNyWPFLw 92tTY5GThnC7tpDKWyVqsJDfi5/vTUVd5Ho328Hvk8+F5wbWebFERHrM0A+AuQJH FJchYGWXMVrTEMicFbKXuVIphoHwYkX3zj8HidtjdJJc3hTmRL07/vv6rcUygZKq l+ysUv9GnC/6Xlb/Z3ICfxrNBx02WxKTmrCn2VsbI/Ceq1msTOV+OMwcn+deYLsL NZcMjR1yCqpJvWlYYdQGgnZqkQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFMUt2urT kN28l1EmFPR2REF4neS4MB8GA1UdIwQYMBaAFIEiQ+a10N4RrnDHJ7OdHyHjrqwD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTQ0Qi82MzUwNjk0QzRF MEMxMUVGOTIxODc0N0VDNEY5QUUwMi9nU0pENXJYUTNoR3VjTWNuczUwZkllT3Vy QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dTSkQ1clhRM2hHdWNNY25zNTBmSWVPdXJBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkU0NEIvNjM1MDY5NEM0RTBDMTFFRjkyMTg3NDdFQzRGOUFFMDIvQjAyQ0NCMzQ0 RTBDMTFFRjkxNzUwNjdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAHr8kQMEA3r8kDANBgkqhkiG9w0BAQsFAAOCAQEAnLNn JJe+4X8KNtkBucfFSO+yBJpWPT8PFHduFvFhe2eB9lzvMvfDd1b3QN33SCH7kG9V b2ajNYF/NxlQBfuh/QDNRnzsZfeUhk744D9Eb7U6TT89nSkfwCxu+PI03zVXYABX HC9rkqUKE0TaCgBtqcRa71KNDgx5HcslE7vIXRLGgtUncVPVwtmt3osu13Pzy0M8 iIh2RIl89X1StCKM1LEKLqgmV5xJv882JEPmjn6tu8EYyIT6kttxquH0Qn2QYWcK BMF51bvv0r80kpTxXypd2yNf0hkjSZR5f2/pB6WBMhD2SvD3u7EX6lB6NNiXANW7 1qz58aJauKHYLlwYEg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:43:51 2025 by rpki-client