This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/0C8A84CAC91D11F0A6FFFB29C4F9AE02.roa File: 0C8A84CAC91D11F0A6FFFB29C4F9AE02.roa (raw, json) Hash identifier: lTraxOellgIPclFt1yccIEDAtmkdysDWZGnhFx4LYEU= Subject key identifier: C5:CA:FD:05:58:EE:D0:2E:31:C4:DC:74:6C:23:CB:9E:77:D7:0A:7E Certificate issuer: /CN=A9172D88/serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E Certificate serial: 0413 Authority key identifier: B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/0C8A84CAC91D11F0A6FFFB29C4F9AE02.roa Signing time: Mon 24 Nov 2025 10:05:05 +0000 ROA not before: Mon 24 Nov 2025 10:05:05 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 136905 IP address blocks: 103.162.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1043 (0x413) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D88, serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E Validity Not Before: Nov 24 10:05:05 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69242dd1-a32c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b1:f4:21:e7:3c:dc:da:5d:72:e5:98:03:37: 0d:d1:46:37:02:87:f0:24:19:80:87:01:37:36:30: c3:6e:58:3c:6a:1f:8e:08:55:bd:64:c1:4d:5a:09: 34:b1:1e:ab:5d:02:5a:4d:44:eb:9d:1a:ce:4d:48: bc:fb:e4:30:8a:05:4a:15:34:0a:d8:4f:da:64:7e: ee:21:7b:ae:47:fb:a8:f3:af:c1:cb:af:0b:86:b9: 85:7f:9d:f8:4e:fe:ac:23:e8:b2:70:14:8c:d8:3c: 83:9e:b0:59:c0:08:8a:7e:b1:26:b9:b4:92:97:1a: d7:ec:38:70:27:22:8f:1d:dd:18:3b:44:bd:71:e5: a0:4c:61:40:f7:6e:8f:40:79:7a:6e:4a:77:02:95: f5:96:d7:b1:09:bb:6e:f4:3f:e1:1c:32:3a:5c:d2: 3e:19:0a:ae:e1:c8:b0:b1:e7:7a:b6:a2:be:b7:4e: 8f:1b:27:66:3d:66:f5:5e:06:be:5f:69:11:63:02: 4d:c1:b4:1c:8e:f8:02:85:83:27:d9:b7:39:76:7b: 8e:d3:6e:26:c0:fd:8e:50:b2:88:af:23:d2:f1:a4: 1e:3c:1d:8f:b4:7d:6e:84:43:ea:9a:b7:9c:eb:17: 0e:4f:87:75:56:01:ca:80:48:b9:39:a5:a5:a2:74: bd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CA:FD:05:58:EE:D0:2E:31:C4:DC:74:6C:23:CB:9E:77:D7:0A:7E X509v3 Authority Key Identifier: keyid:B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/0C8A84CAC91D11F0A6FFFB29C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.3.0/24 Signature Algorithm: sha256WithRSAEncryption 53:77:b5:06:18:0a:ee:b7:4a:d3:f9:9f:36:80:3b:36:fa:d8: ca:5a:01:72:3f:b6:81:da:67:55:59:26:3b:42:17:19:30:46: e9:3a:20:10:61:0e:f1:aa:43:0a:f2:ab:72:fe:20:5e:d7:45: d1:10:1f:6e:66:97:1e:cd:e4:ed:23:b8:2a:45:c6:9a:e7:70: b4:c8:c9:29:3e:73:ef:4f:64:41:72:f5:3d:33:f0:49:ed:77: d6:5e:d7:ff:07:5b:ab:0a:e1:26:0c:07:70:ed:36:42:f2:6f: 64:5c:a4:1e:0f:0e:5f:1a:3a:e8:1e:b3:2c:8e:fc:a3:9a:c4: 21:33:c5:02:1d:30:41:1f:cc:39:f9:a2:ca:df:63:f3:84:b5: c5:52:e7:3b:e4:bb:88:00:b2:d7:88:af:4f:32:9f:e7:a4:ed: cd:f8:ee:64:5e:06:0b:a1:62:28:4b:3e:96:ce:81:d1:22:f0: 74:6c:ec:d0:2f:ba:9e:bb:95:8f:b3:1a:d2:69:ed:17:02:96: 20:9f:21:b0:5d:9d:e9:c4:ef:3c:66:a3:d4:96:7d:37:78:80: 2c:0b:85:ed:15:9b:ba:5d:e2:1d:6e:23:59:3f:b1:3d:c0:1e: 15:6a:9c:4f:28:6d:e4:b3:ab:b0:b4:19:33:bc:7d:08:20:87: 08:d8:3e:1d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJEODgxMTAvBgNVBAUTKEIyRjA1QzJDRUMzNTUwRDJEM0M5RUI1MTM4MzlGNDdB MDAyQTg3MkUwHhcNMjUxMTI0MTAwNTA1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI0MmRkMS1hMzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurH0Iec83NpdcuWYAzcN0UY3AofwJBmAhwE3NjDDblg8ah+OCFW9ZMFNWgk0 sR6rXQJaTUTrnRrOTUi8++QwigVKFTQK2E/aZH7uIXuuR/uo86/By68LhrmFf534 Tv6sI+iycBSM2DyDnrBZwAiKfrEmubSSlxrX7DhwJyKPHd0YO0S9ceWgTGFA926P QHl6bkp3ApX1ltexCbtu9D/hHDI6XNI+GQqu4ciwsed6tqK+t06PGydmPWb1Xga+ X2kRYwJNwbQcjvgChYMn2bc5dnuO024mwP2OULKIryPS8aQePB2PtH1uhEPqmrec 6xcOT4d1VgHKgEi5OaWlonS9yQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMXK/QVY 7tAuMcTcdGwjy5531wp+MB8GA1UdIwQYMBaAFLLwXCzsNVDS08nrUTg59HoAKocu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ4OC9GMUI3RUFCQTkz QUMxMUVDQjY3QTMxNTJDNEY5QUUwMi9zdkJjTE93MVVOTFR5ZXRST0RuMGVnQXFo eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N2QmNMT3cxVU5MVHlldFJPRG4wZWdBcWh5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJEODgvRjFCN0VBQkE5M0FDMTFFQ0I2N0EzMTUyQzRGOUFFMDIvMEM4QTg0Q0FD OTFEMTFGMEE2RkZGQjI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnogMwDQYJKoZIhvcNAQELBQADggEBAFN3tQYYCu63StP5 nzaAOzb62MpaAXI/toHaZ1VZJjtCFxkwRuk6IBBhDvGqQwryq3L+IF7XRdEQH25m lx7N5O0juCpFxprncLTIySk+c+9PZEFy9T0z8Entd9Ze1/8HW6sK4SYMB3DtNkLy b2RcpB4PDl8aOugesyyO/KOaxCEzxQIdMEEfzDn5osrfY/OEtcVS5zvku4gAsteI r08yn+ek7c347mReBguhYihLPpbOgdEi8HRs7NAvup67lY+zGtJp7RcCliCfIbBd nenE7zxmo9SWfTd4gCwLhe0Vm7pd4h1uI1k/sT3AHhVqnE8obeSzq7C0GTO8fQgg hwjYPh0= -----END CERTIFICATE-----Generated at Sun Dec 7 01:47:12 2025 by rpki-client