This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/C8165660822F11EEABA7D533C4F9AE02.roa File: C8165660822F11EEABA7D533C4F9AE02.roa (raw, json) Hash identifier: DSv2nGwTSEj42RfPbSo3xkl2KSy/0hQM67/1VYPFqfc= Subject key identifier: 42:27:7E:A9:46:64:F0:8A:3D:60:6A:41:E7:5C:2A:47:01:15:D4:4C Certificate issuer: /CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB Certificate serial: 03FF Authority key identifier: E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/C8165660822F11EEABA7D533C4F9AE02.roa Signing time: Fri 14 Nov 2025 23:15:50 +0000 ROA not before: Fri 14 Nov 2025 23:15:50 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 16839 IP address blocks: 103.23.64.0/22 maxlen: 24 2406:9f00::/32 maxlen: 32 2406:9f00:6100::/40 maxlen: 40 2406:9f00:6110::/48 maxlen: 48 2406:9f00:6120::/48 maxlen: 48 2406:9f00:6500::/40 maxlen: 40 2406:9f00:6510::/48 maxlen: 48 2406:9f00:6520::/48 maxlen: 48 2406:9f00:8100::/40 maxlen: 40 2406:9f00:8110::/48 maxlen: 48 2406:9f00:8120::/48 maxlen: 48 2406:9f00:8200::/40 maxlen: 40 2406:9f00:8210::/48 maxlen: 48 2406:9f00:8220::/48 maxlen: 48 2406:9f00:9100::/40 maxlen: 40 2406:9f00:9110::/48 maxlen: 48 2406:9f00:9120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1023 (0x3ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982, serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB Validity Not Before: Nov 14 23:15:50 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6917b826-5ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fb:8b:b1:0a:8f:44:f7:29:10:33:ba:44:cc: 95:75:3f:86:67:fe:aa:7f:b7:40:9b:c0:ae:ee:3c: 8f:db:bd:7a:f5:53:6d:21:65:87:5d:0e:84:c1:58: 8d:9f:39:a5:4b:6c:fe:70:25:f7:33:c8:e0:74:e3: b2:c0:20:d6:6d:41:b5:58:29:3d:84:ee:cd:e9:09: 85:e0:0b:e6:c4:a7:de:32:c1:b0:79:c2:07:df:1a: 3c:76:a6:ee:f6:e3:a7:e6:b4:a7:1a:26:8d:e3:08: 50:f6:2c:85:5f:e0:19:5c:c8:e8:3a:72:a8:e4:c2: 2c:86:f9:a1:4e:15:21:fb:28:3b:6b:02:6e:1d:be: 8a:06:ef:bf:5f:a2:09:0d:b6:85:3d:57:2a:22:04: 38:a8:55:c1:b7:c6:0a:e6:0d:94:50:e5:5b:13:49: aa:8e:50:58:81:08:cd:b0:8d:33:09:f4:5a:4c:73: b4:01:2e:ad:ae:29:a7:ce:d7:94:e6:4d:3d:90:08: 5b:77:f0:0b:94:9c:b2:1f:52:42:2b:bd:0e:4e:55: f5:a7:66:67:1d:84:27:06:e9:64:12:0f:c8:4a:2a: 96:4c:a7:8e:17:90:8d:90:4f:5c:94:af:d4:b4:8b: cc:96:c4:b3:b7:84:fe:2c:7c:b2:d8:6f:c6:c0:31: e6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:27:7E:A9:46:64:F0:8A:3D:60:6A:41:E7:5C:2A:47:01:15:D4:4C X509v3 Authority Key Identifier: keyid:E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/C8165660822F11EEABA7D533C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.23.64.0/22 IPv6: 2406:9f00::/32 Signature Algorithm: sha256WithRSAEncryption bb:48:99:bf:2c:c8:d7:ba:66:cb:72:a0:15:a0:0f:48:5f:b9: be:ec:2d:25:d5:8e:27:ba:47:c0:a0:23:8d:b1:e7:80:33:68: 5a:40:1e:23:c4:2d:64:0b:56:cb:e8:16:1e:ed:01:bd:bc:fd: 0d:a9:cc:5a:63:99:33:cd:23:aa:09:cd:07:dc:1e:f3:99:31: 5e:24:e6:b6:bf:80:93:94:40:a1:19:ab:1f:61:0f:f0:27:b4: 24:ae:43:41:88:22:ed:ed:22:ab:40:66:96:fc:3f:54:2f:0d: c5:dc:70:b6:af:52:61:ec:ba:ec:23:ea:44:e0:1d:01:c9:3d: 85:ea:38:35:be:d7:87:0e:70:a8:53:bc:12:7c:a9:a8:6d:d5: 64:0b:ab:49:ce:2b:58:83:cb:e0:e4:14:0b:56:54:f9:cd:3a: e1:3c:83:df:57:4b:72:53:81:e2:a3:c1:2f:bb:e2:50:a1:b2: 03:ab:b6:20:b4:0d:f5:cc:5f:4b:59:3b:d7:d2:97:e9:41:af: 06:60:81:cf:a2:b6:94:54:68:0d:b5:b2:d5:17:22:64:68:bd: f5:2e:12:6f:2f:84:fa:82:66:22:4a:f1:48:ff:3d:ac:04:86: 62:76:6a:8f:cf:7b:77:ce:50:3b:bb:fc:6a:58:10:5c:1d:4c: 74:d2:b0:f2 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKEU2MjE0NjlDRDVBNTc4Rjk0N0FCNDdFQjBFQ0U4ODkz OUI4N0VCRkIwHhcNMjUxMTE0MjMxNTUwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE3YjgyNi01YWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmfuLsQqPRPcpEDO6RMyVdT+GZ/6qf7dAm8Cu7jyP27169VNtIWWHXQ6EwViN nzmlS2z+cCX3M8jgdOOywCDWbUG1WCk9hO7N6QmF4AvmxKfeMsGwecIH3xo8dqbu 9uOn5rSnGiaN4whQ9iyFX+AZXMjoOnKo5MIshvmhThUh+yg7awJuHb6KBu+/X6IJ DbaFPVcqIgQ4qFXBt8YK5g2UUOVbE0mqjlBYgQjNsI0zCfRaTHO0AS6trimnzteU 5k09kAhbd/ALlJyyH1JCK70OTlX1p2ZnHYQnBulkEg/ISiqWTKeOF5CNkE9clK/U tIvMlsSzt4T+LHyy2G/GwDHmHQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEInfqlG ZPCKPWBqQedcKkcBFdRMMB8GA1UdIwQYMBaAFOYhRpzVpXj5R6tH6w7OiJObh+v7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9EOEI2ODY5NkFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi81aUZHbk5XbGVQbEhxMGZyRHM2SWs1dUg2 X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpRkduTldsZVBsSHEwZnJEczZJazV1SDZfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA5ODIvRDhCNjg2OTZBQzEzMTFFQ0I3NzZCMjA5QzRGOUFFMDIvQzgxNjU2NjA4 MjJGMTFFRUFCQTdENTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnF0AwDQQCAAIwBwMFACQGnwAwDQYJKoZIhvcNAQELBQAD ggEBALtImb8syNe6ZstyoBWgD0hfub7sLSXVjie6R8CgI42x54AzaFpAHiPELWQL VsvoFh7tAb28/Q2pzFpjmTPNI6oJzQfcHvOZMV4k5ra/gJOUQKEZqx9hD/AntCSu Q0GIIu3tIqtAZpb8P1QvDcXccLavUmHsuuwj6kTgHQHJPYXqODW+14cOcKhTvBJ8 qaht1WQLq0nOK1iDy+DkFAtWVPnNOuE8g99XS3JTgeKjwS+74lChsgOrtiC0DfXM X0tZO9fSl+lBrwZggc+itpRUaA21stUXImRovfUuEm8vhPqCZiJK8Uj/PawEhmJ2 ao/Pe3fOUDu7/GpYEFwdTHTSsPI= -----END CERTIFICATE-----Generated at Sun Dec 7 00:57:21 2025 by rpki-client