This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa File: B70AE7D20C6B11EC82638A40C4F9AE02.roa (raw, json) Hash identifier: jDaEFSep7GpjPRnx9VVt41QI2luPQqoFvxB7UlM+gbc= Subject key identifier: A4:E0:15:3A:92:27:CC:46:3B:6B:72:08:B8:5B:53:B3:53:AE:21:15 Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 2842 Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa Signing time: Thu 06 Nov 2025 15:22:30 +0000 ROA not before: Thu 06 Nov 2025 15:22:30 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132447 IP address blocks: 45.121.88.0/22 maxlen: 22 45.121.88.0/24 maxlen: 24 45.121.89.0/24 maxlen: 24 45.121.90.0/24 maxlen: 24 45.121.91.0/24 maxlen: 24 103.21.164.0/22 maxlen: 22 103.21.164.0/24 maxlen: 24 103.21.165.0/24 maxlen: 24 103.21.166.0/24 maxlen: 24 103.21.167.0/24 maxlen: 24 2405:6b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:23:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10306 (0x2842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: Nov 6 15:22:30 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690cbd36-4877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:51:1e:2f:2f:b3:db:5a:13:06:db:ce:c7:ad: cb:05:62:b8:35:b6:6f:ea:51:76:00:eb:03:f2:15: 09:d6:c9:17:95:34:d6:a6:cb:63:c5:f6:d2:91:8c: b1:b7:6c:90:89:0a:91:02:5e:a3:26:45:6d:1b:94: b3:06:32:56:c5:7a:6b:4a:df:e2:fe:a9:66:b9:fe: 5f:ec:29:8e:cc:11:2e:6d:1e:12:23:90:51:cc:eb: 82:e0:b4:6a:cc:ba:46:d7:07:46:aa:67:fb:03:95: 62:45:5a:75:40:24:51:7f:15:23:18:f7:9b:81:52: dd:7d:2a:95:f8:6e:68:bf:98:39:94:bb:bf:e3:8a: 9e:75:c0:a5:e5:2f:ba:03:c9:c2:f0:1e:8b:dd:06: 01:3d:28:88:08:fa:f1:48:c3:d5:bd:d6:3e:e3:f6: 6e:66:34:2c:0b:af:73:e7:d3:b5:89:38:75:82:84: f8:33:b1:e2:40:4f:81:ca:e9:14:6d:0a:a8:21:bf: 5b:6e:fb:d2:5a:ad:36:58:6e:51:0d:8c:d5:66:06: 1e:b7:16:2d:0c:63:0c:92:dc:f4:1d:c5:d6:57:c1: 8c:dc:c1:6a:8a:bf:72:6c:1b:c6:20:c5:f5:76:12: 7a:23:8d:31:66:bb:b0:18:12:ed:b1:e0:0e:82:5a: 80:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E0:15:3A:92:27:CC:46:3B:6B:72:08:B8:5B:53:B3:53:AE:21:15 X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.121.88.0/22 103.21.164.0/22 IPv6: 2405:6b00::/48 Signature Algorithm: sha256WithRSAEncryption a8:c8:ed:95:77:f0:d9:1d:2e:35:81:f7:02:d0:08:41:bb:23: fd:61:2b:5d:16:f7:62:ff:7c:59:5e:be:97:49:96:9b:88:84: ab:56:56:7f:40:c2:32:39:96:d3:22:4b:80:02:f3:40:c4:10: 95:30:ce:ac:a8:c2:ab:6b:bd:35:a3:32:55:63:09:c8:fe:d0: cb:af:96:cf:26:81:53:8f:45:db:37:b1:33:8c:f5:c4:b8:30: cd:98:f8:58:f0:02:c8:c6:a4:32:db:17:33:54:72:8b:5f:cd: f4:cd:17:8f:16:3b:cd:94:54:1a:d0:3e:22:7e:97:b6:c2:88: 4a:81:c3:95:37:d9:a6:2c:a6:1e:b0:97:c3:ff:37:72:87:91: fb:4a:7a:c4:75:17:0c:61:e6:61:d9:6c:c6:8e:03:8f:03:d3: ba:0b:ea:a4:5a:f9:52:0b:fe:c5:c9:8b:5a:ad:c6:b2:c5:8e: de:cc:cd:89:4d:93:78:f6:9a:c1:11:5e:b1:8a:9b:c3:44:f0: 5e:a8:95:ac:c7:80:6b:1a:4e:a7:83:24:93:d6:91:86:53:b4: 16:87:1b:ba:f4:59:6e:6a:6a:9f:22:3b:ae:1e:c1:79:71:c2: b8:38:33:15:67:7f:a1:c3:21:ae:0a:22:0c:9f:0f:78:74:8f: c7:c8:0c:de -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICKEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjUxMTA2MTUyMjMwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBjYmQzNi00ODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1EeLy+z21oTBtvOx63LBWK4NbZv6lF2AOsD8hUJ1skXlTTWpstjxfbSkYyx t2yQiQqRAl6jJkVtG5SzBjJWxXprSt/i/qlmuf5f7CmOzBEubR4SI5BRzOuC4LRq zLpG1wdGqmf7A5ViRVp1QCRRfxUjGPebgVLdfSqV+G5ov5g5lLu/44qedcCl5S+6 A8nC8B6L3QYBPSiICPrxSMPVvdY+4/ZuZjQsC69z59O1iTh1goT4M7HiQE+ByukU bQqoIb9bbvvSWq02WG5RDYzVZgYetxYtDGMMktz0HcXWV8GM3MFqir9ybBvGIMX1 dhJ6I40xZruwGBLtseAOglqAGQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFKTgFTqS J8xGO2tyCLhbU7NTriEVMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRBNkIvNzUyNDRCNjJBMTYzMTFFNEI5NjZERDBGQzRGOUFFMDIvQjcwQUU3RDIw QzZCMTFFQzgyNjM4QTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAIteVgDBAJnFaQwDwQCAAIwCQMHACQFawAAADANBgkqhkiG 9w0BAQsFAAOCAQEAqMjtlXfw2R0uNYH3AtAIQbsj/WErXRb3Yv98WV6+l0mWm4iE q1ZWf0DCMjmW0yJLgALzQMQQlTDOrKjCq2u9NaMyVWMJyP7Qy6+WzyaBU49F2zex M4z1xLgwzZj4WPACyMakMtsXM1Ryi1/N9M0XjxY7zZRUGtA+In6XtsKISoHDlTfZ piymHrCXw/83coeR+0p6xHUXDGHmYdlsxo4DjwPTugvqpFr5Ugv+xcmLWq3GssWO 3szNiU2TePaawRFesYqbw0TwXqiVrMeAaxpOp4Mkk9aRhlO0FocbuvRZbmpqnyI7 rh7BeXHCuDgzFWd/ocMhrgoiDJ8PeHSPx8gM3g== -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:23 2025 by rpki-client