This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/186A811414CD11F0AB0B2C0CC4F9AE02.roa File: 186A811414CD11F0AB0B2C0CC4F9AE02.roa (raw, json) Hash identifier: 9tc8Ga8JfnoWYOg9jj5aEvP7RbMQoDEn79rxtZ5FqHw= Subject key identifier: D4:76:03:B4:5E:B4:6A:C6:D7:C5:F5:AB:ED:03:9A:FF:94:48:EE:48 Certificate issuer: /CN=A9171AD3/serialNumber=DEA07928DE4284960D2CD5E8E7470284260B3266 Certificate serial: 0895 Authority key identifier: DE:A0:79:28:DE:42:84:96:0D:2C:D5:E8:E7:47:02:84:26:0B:32:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qB5KN5ChJYNLNXo50cChCYLMmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/186A811414CD11F0AB0B2C0CC4F9AE02.roa Signing time: Mon 30 Jun 2025 19:21:17 +0000 ROA not before: Mon 30 Jun 2025 19:21:17 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 135060 IP address blocks: 103.152.128.0/24 maxlen: 24 103.152.129.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 2197 (0x895) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171AD3, serialNumber=DEA07928DE4284960D2CD5E8E7470284260B3266 Validity Not Before: Jun 30 19:21:17 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6862e3ad-cfb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7c:e8:8b:e2:1a:4a:38:22:9b:bd:ad:6b:a9: 5a:b5:48:b0:06:95:44:dd:3e:13:13:52:2c:b3:7b: e1:b3:d5:b1:c7:f7:3b:92:80:41:26:fc:f5:85:d7: 0b:1d:2e:d4:b8:da:1a:22:4a:c5:7b:9f:af:bf:62: ef:84:d5:d2:6f:3d:15:88:b9:d8:c1:44:d1:5c:1b: d1:e2:ac:c1:dd:76:20:9e:e6:74:5e:f8:b0:53:b4: 1c:42:8d:10:dc:67:d5:89:13:63:f6:80:f2:ba:fa: 81:e6:28:66:2a:c2:c3:2d:25:25:5f:14:4b:fb:25: 22:c9:6b:e0:42:61:83:df:c3:79:e4:ef:db:f3:2e: 56:5a:e8:5f:e1:99:bc:90:07:fb:50:a7:96:41:2c: a7:46:db:3a:a4:ab:d9:56:10:87:ee:6c:d2:01:c9: a0:75:6e:4d:ac:cc:e0:44:6b:a9:ac:b8:6f:ef:ce: 95:17:86:30:fd:22:68:46:88:ac:96:2f:47:10:8a: 5c:28:ee:6e:59:fe:8c:47:3a:72:5d:9b:18:7c:00: 10:43:fe:f3:64:32:a0:27:39:80:9e:d2:58:30:8d: 67:83:e9:eb:a6:fc:df:a7:4c:18:d1:d8:cd:bb:db: 9d:6f:dc:ea:22:c5:f3:f6:e5:f4:82:29:1d:45:ff: 87:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:76:03:B4:5E:B4:6A:C6:D7:C5:F5:AB:ED:03:9A:FF:94:48:EE:48 X509v3 Authority Key Identifier: keyid:DE:A0:79:28:DE:42:84:96:0D:2C:D5:E8:E7:47:02:84:26:0B:32:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qB5KN5ChJYNLNXo50cChCYLMmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/186A811414CD11F0AB0B2C0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.128.0/23 Signature Algorithm: sha256WithRSAEncryption 72:59:a0:4d:8e:b6:5b:14:09:3b:57:ed:64:a7:b6:91:f6:57: 2d:37:3f:4f:51:f6:d9:52:23:3a:0b:61:dd:6e:23:8c:f7:92: f9:08:62:8e:e9:94:d9:c8:a7:37:27:fa:a7:15:1d:34:77:0b: 99:3c:4b:9a:9e:8a:bd:9f:fb:e7:7d:e4:b0:80:54:ae:e1:a2: b5:19:37:3d:c7:7d:c2:ed:80:d5:85:a7:b8:bd:b2:4a:da:c9: d8:20:e7:61:62:6e:7a:60:43:5b:c7:bc:66:96:1c:78:05:24: 10:49:46:3b:c4:cb:5c:31:59:c2:56:67:15:70:a5:2a:87:8b: d7:16:7f:e4:42:21:d6:eb:66:7f:86:b6:f4:aa:be:aa:10:fd: 40:f2:92:34:13:8f:c2:a7:36:19:60:2e:1d:75:da:2c:92:7d: c8:0d:05:92:54:b3:81:30:71:57:72:88:6d:f8:30:76:59:4d: d4:49:26:c6:df:70:c4:02:7f:87:c7:e7:fb:83:3a:84:d2:40: bb:95:4d:71:10:9a:8b:c3:fd:93:59:49:87:ad:98:e3:83:6c: d8:00:90:2e:e5:7b:f3:77:4f:d7:32:08:93:ae:78:02:9a:31: 5d:c6:3e:7b:1f:1f:72:2b:e0:66:f4:ea:ca:0c:fe:e3:cf:c3: 30:cf:67:0d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBRDMxMTAvBgNVBAUTKERFQTA3OTI4REU0Mjg0OTYwRDJDRDVFOEU3NDcwMjg0 MjYwQjMyNjYwHhcNMjUwNjMwMTkyMTE3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYyZTNhZC1jZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHzoi+IaSjgim72ta6latUiwBpVE3T4TE1Iss3vhs9Wxx/c7koBBJvz1hdcL HS7UuNoaIkrFe5+vv2LvhNXSbz0ViLnYwUTRXBvR4qzB3XYgnuZ0XviwU7QcQo0Q 3GfViRNj9oDyuvqB5ihmKsLDLSUlXxRL+yUiyWvgQmGD38N55O/b8y5WWuhf4Zm8 kAf7UKeWQSynRts6pKvZVhCH7mzSAcmgdW5NrMzgRGuprLhv786VF4Yw/SJoRois li9HEIpcKO5uWf6MRzpyXZsYfAAQQ/7zZDKgJzmAntJYMI1ng+nrpvzfp0wY0djN u9udb9zqIsXz9uX0gikdRf+HLwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNR2A7Re tGrG18X1q+0Dmv+USO5IMB8GA1UdIwQYMBaAFN6geSjeQoSWDSzV6OdHAoQmCzJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUFEMy8wQkM0Rjg0MEMx QjIxMUVBODMyNzg3NjdDNEY5QUUwMi8zcUI1S041Q2hKWU5MTlhvNTBjQ2hDWUxN bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxQjVLTjVDaEpZTkxOWG81MGNDaENZTE1tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzFBRDMvMEJDNEY4NDBDMUIyMTFFQTgzMjc4NzY3QzRGOUFFMDIvMTg2QTgxMTQx NENEMTFGMEFCMEIyQzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmIAwDQYJKoZIhvcNAQELBQADggEBAHJZoE2OtlsUCTtX 7WSntpH2Vy03P09R9tlSIzoLYd1uI4z3kvkIYo7plNnIpzcn+qcVHTR3C5k8S5qe ir2f++d95LCAVK7horUZNz3HfcLtgNWFp7i9skraydgg52FibnpgQ1vHvGaWHHgF JBBJRjvEy1wxWcJWZxVwpSqHi9cWf+RCIdbrZn+GtvSqvqoQ/UDykjQTj8KnNhlg Lh112iySfcgNBZJUs4EwcVdyiG34MHZZTdRJJsbfcMQCf4fH5/uDOoTSQLuVTXEQ movD/ZNZSYetmOODbNgAkC7le/N3T9cyCJOueAKaMV3GPnsfH3Ir4Gb06soM/uPP wzDPZw0= -----END CERTIFICATE-----Generated at Mon Dec 22 03:24:42 2025 by rpki-client