This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/AF17D342228A11EDBBB7C135C4F9AE02.roa File: AF17D342228A11EDBBB7C135C4F9AE02.roa (raw, json) Hash identifier: OtRh1Fk7TwGNS5hIMmXvDQHTwbUcw1dj3fxKTgn60lw= Subject key identifier: 1E:43:32:17:F7:86:E6:2D:C9:6D:6E:95:94:70:E0:A4:96:D1:9F:BE Certificate issuer: /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748 Certificate serial: 02A1 Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/AF17D342228A11EDBBB7C135C4F9AE02.roa Signing time: Wed 05 Nov 2025 01:45:54 +0000 ROA not before: Wed 05 Nov 2025 01:45:54 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 37931 IP address blocks: 203.19.222.0/24 maxlen: 24 203.89.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 673 (0x2a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748 Validity Not Before: Nov 5 01:45:54 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690aac52-db12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6e:f3:cd:2d:fb:27:2a:0c:61:d6:40:fb:f5: 43:ba:60:7f:de:6c:99:2e:24:a8:7a:d4:45:cf:d2: 7f:bb:00:70:3a:f7:85:5b:f6:12:8b:ef:1e:61:cc: aa:71:bf:4b:8a:cc:b1:c1:55:37:86:cf:45:f5:14: 58:54:cc:f7:12:7b:86:3c:ac:f4:e5:72:d5:a6:49: 8b:d3:11:1e:b6:30:c1:68:5b:5e:f7:5c:73:75:51: 6d:13:aa:2d:26:35:00:26:86:1a:64:56:c7:96:e5: 69:a7:80:50:b3:26:82:00:2d:08:9a:8e:d2:ca:da: 2c:06:b3:cc:0c:3a:6d:f9:65:e2:b6:56:ff:e6:d1: f9:6d:e2:c8:32:4f:87:e9:8d:68:df:11:e1:84:0f: ed:30:b7:93:67:53:44:74:34:cd:a5:e3:03:44:35: 7e:3a:13:75:58:9e:39:79:5a:a1:5a:d2:06:56:b1: 5f:8e:4c:25:38:85:92:44:c8:43:02:66:cf:e6:a9: c5:8c:ca:59:28:90:61:7b:eb:24:17:1a:94:cf:5e: 91:e6:b4:f2:41:bb:a5:38:e5:9e:ab:b1:7c:24:18: ec:49:fa:a5:aa:ea:cf:8f:09:6e:db:dc:bd:97:fb: 71:3d:2c:52:83:09:e5:df:c6:57:f2:c3:f9:e9:bc: 39:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:43:32:17:F7:86:E6:2D:C9:6D:6E:95:94:70:E0:A4:96:D1:9F:BE X509v3 Authority Key Identifier: keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/AF17D342228A11EDBBB7C135C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.19.222.0/24 203.89.5.0/24 Signature Algorithm: sha256WithRSAEncryption 23:5b:9f:44:92:09:58:8b:ff:4e:1b:26:a0:e8:af:b8:f2:44: 98:a9:04:5e:46:2a:19:ac:33:6f:03:0a:55:f3:c5:6f:50:c2: 8b:69:de:e4:c8:63:43:3d:f6:6a:d8:97:6f:8d:88:7f:30:26: 8e:3e:d5:94:fc:57:59:ce:da:95:c0:c9:c0:29:ea:ad:5a:56: 3e:02:a8:c8:67:06:f1:1f:54:92:9e:8f:c0:b5:93:0b:c8:eb: e9:de:d4:2a:df:ab:b0:ea:3a:dd:a8:f9:11:f2:1c:68:02:c0: 50:dd:50:4a:2c:ef:92:75:c8:4a:60:12:85:ed:6d:ad:b9:60: 92:f8:0e:2b:fb:d0:31:fb:d6:0f:e6:d5:15:d1:e9:90:7e:a9: 49:97:0e:0b:59:98:f9:bd:3d:fc:50:7d:14:6c:cd:f7:40:80: 09:4c:0b:0c:a4:1a:4c:de:8f:49:85:47:db:b9:37:a1:fa:07: cb:95:08:4c:f2:e6:18:e8:6d:b6:a0:cf:b8:ed:c1:bc:51:9c: 2c:bb:95:53:71:28:b5:80:6e:d2:52:bf:3b:a3:87:37:af:58: 59:5a:aa:aa:5e:fe:b5:38:80:5b:a9:4c:d8:59:e8:d2:de:1f: d7:e0:d9:4e:b2:53:59:3d:5c:25:1d:64:51:12:3d:f7:22:e0: b0:fb:ed:4b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU0NEYxMTAvBgNVBAUTKEI2MDEyMTRDOTYyOEM5RjQyMUQzNjczNEIzODFDREVD OTI4OTQ3NDgwHhcNMjUxMTA1MDE0NTU0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhYWM1Mi1kYjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzG7zzS37JyoMYdZA+/VDumB/3myZLiSoetRFz9J/uwBwOveFW/YSi+8eYcyq cb9LisyxwVU3hs9F9RRYVMz3EnuGPKz05XLVpkmL0xEetjDBaFte91xzdVFtE6ot JjUAJoYaZFbHluVpp4BQsyaCAC0Imo7SytosBrPMDDpt+WXitlb/5tH5beLIMk+H 6Y1o3xHhhA/tMLeTZ1NEdDTNpeMDRDV+OhN1WJ45eVqhWtIGVrFfjkwlOIWSRMhD AmbP5qnFjMpZKJBhe+skFxqUz16R5rTyQbulOOWeq7F8JBjsSfqlqurPjwlu29y9 l/txPSxSgwnl38ZX8sP56bw57wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFB5DMhf3 huYtyW1ulZRw4KSW0Z++MB8GA1UdIwQYMBaAFLYBIUyWKMn0IdNnNLOBzeySiUdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTQ0Ri85MDEyQ0E0NDIy ODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lmUWgwMmMwczRITjdKS0pS MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnRWhUSllveWZRaDAyYzBzNEhON0pLSlIwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU0NEYvOTAxMkNBNDQyMjg4MTFFRDg5MTU1RTM1QzRGOUFFMDIvQUYxN0QzNDIy MjhBMTFFREJCQjdDMTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADLE94DBADLWQUwDQYJKoZIhvcNAQELBQADggEBACNbn0SS CViL/04bJqDor7jyRJipBF5GKhmsM28DClXzxW9Qwotp3uTIY0M99mrYl2+NiH8w Jo4+1ZT8V1nO2pXAycAp6q1aVj4CqMhnBvEfVJKej8C1kwvI6+ne1Crfq7DqOt2o +RHyHGgCwFDdUEos75J1yEpgEoXtba25YJL4Div70DH71g/m1RXR6ZB+qUmXDgtZ mPm9PfxQfRRszfdAgAlMCwykGkzej0mFR9u5N6H6B8uVCEzy5hjobbagz7jtwbxR nCy7lVNxKLWAbtJSvzujhzevWFlaqqpe/rU4gFupTNhZ6NLeH9fg2U6yU1k9XCUd ZFESPfci4LD77Us= -----END CERTIFICATE-----Generated at Sat Dec 6 18:32:17 2025 by rpki-client