This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/8FFF9C5AAF1A11EFAF122A6AC4F9AE02.roa File: 8FFF9C5AAF1A11EFAF122A6AC4F9AE02.roa (raw, json) Hash identifier: DFfr6A3Q6Z0rtiDpIfnn7HaR1OPP5j2ZlUMfeqmSe80= Subject key identifier: 97:01:D7:04:37:9B:DF:C8:4B:F5:55:82:3A:4B:EE:2B:F8:90:5E:AA Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Certificate serial: 0270 Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/8FFF9C5AAF1A11EFAF122A6AC4F9AE02.roa Signing time: Fri 05 Dec 2025 00:09:30 +0000 ROA not before: Fri 05 Dec 2025 00:09:30 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 150740 IP address blocks: 103.20.242.0/24 maxlen: 24 2001:df1:65c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 624 (0x270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176909, serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Validity Not Before: Dec 5 00:09:30 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=693222ba-9ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b3:73:b8:86:56:ae:70:8b:2e:72:01:52:46: 45:cc:2e:b1:b8:2b:de:55:7f:23:29:17:bf:41:fa: af:ce:61:d1:6e:74:a9:25:da:53:40:c5:4f:b2:4c: 43:c0:42:a2:e2:e9:dc:3b:d3:24:84:e1:e3:e5:87: c6:c0:8c:10:a7:0f:44:4e:f3:9d:a1:21:9b:94:0a: b4:4a:81:24:61:cb:03:52:21:c3:c8:ea:81:5f:08: e2:99:ad:6f:71:9b:7e:7d:6a:ec:1d:5d:6a:0e:a2: 3b:7e:e2:01:64:b9:91:ee:1b:55:0a:f6:02:e1:de: 21:70:99:4c:5b:87:ef:59:0e:89:d0:c9:7a:fb:81: 62:f0:08:1b:65:76:a5:16:04:10:bd:5e:59:e0:41: ad:e0:8c:55:04:02:74:b4:6c:b7:02:9d:63:06:0c: 91:3a:ba:f8:94:ed:d3:0b:3c:ba:96:e9:24:64:29: d1:a8:93:d6:fd:06:19:1a:d9:e0:05:54:cf:55:c6: eb:a8:91:ff:7f:de:89:94:5f:f2:58:1f:9e:45:eb: 9e:63:a6:1f:47:08:23:e9:cf:2e:73:44:7a:7d:f3: 03:6e:03:3f:9b:3f:4e:16:48:e4:ec:bb:d9:1c:20: cf:1f:5b:cb:a2:65:b4:49:a8:a4:65:0b:be:2c:98: 4b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:01:D7:04:37:9B:DF:C8:4B:F5:55:82:3A:4B:EE:2B:F8:90:5E:AA X509v3 Authority Key Identifier: keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/8FFF9C5AAF1A11EFAF122A6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.242.0/24 IPv6: 2001:df1:65c0::/48 Signature Algorithm: sha256WithRSAEncryption 47:6c:08:d7:94:a4:75:bd:d0:6e:d2:1a:c3:d0:5a:c4:d6:d4: 2f:df:bb:a6:fa:ee:a4:7a:4a:01:5c:d9:07:ec:98:fc:0a:cd: 19:80:1e:eb:d7:e4:06:b4:38:2a:1e:a7:3c:88:23:a2:e2:98: e9:67:6c:48:78:9c:1a:ed:72:be:ee:8d:9b:a0:cd:ac:0b:68: 01:7a:04:f6:84:f0:03:58:fa:6c:58:56:a5:a2:c2:73:c9:29: 57:f2:0d:6f:b3:ea:7c:e4:08:9d:4d:21:f4:a2:84:7c:b5:9a: 1d:35:f1:3a:5d:f2:07:9f:97:dd:15:25:9f:b8:89:7f:32:a8: 35:ea:01:d8:db:fe:04:2e:ae:94:99:87:32:d8:3d:e3:ab:0c: 21:d7:dd:e3:1b:f5:00:e3:a8:ca:92:02:b1:dd:0c:6c:90:80: ff:af:bf:8d:40:38:9e:bb:32:9e:4e:65:56:f0:34:7c:d2:e5: ef:69:8a:7f:b2:31:b8:44:3f:fc:8d:42:bc:86:72:e3:39:37: 7d:2b:fa:c3:18:86:b0:d5:c7:22:a6:cb:00:d6:04:fd:65:ae: c6:c0:63:ab:42:50:20:c9:83:46:32:a1:2e:d4:9e:3b:1f:13: 8c:f4:59:61:5b:55:3e:86:a7:b4:8f:45:c8:73:9e:11:12:59: 1f:39:be:5d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY5MDkxMTAvBgNVBAUTKDNCNDhBQjg2MTY1MkZBRUVEN0UxRDEyNTgzRjE2QkI3 RkJCMjg5MTMwHhcNMjUxMjA1MDAwOTMwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMyMjJiYS05ZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7NzuIZWrnCLLnIBUkZFzC6xuCveVX8jKRe/QfqvzmHRbnSpJdpTQMVPskxD wEKi4uncO9MkhOHj5YfGwIwQpw9ETvOdoSGblAq0SoEkYcsDUiHDyOqBXwjima1v cZt+fWrsHV1qDqI7fuIBZLmR7htVCvYC4d4hcJlMW4fvWQ6J0Ml6+4Fi8AgbZXal FgQQvV5Z4EGt4IxVBAJ0tGy3Ap1jBgyROrr4lO3TCzy6lukkZCnRqJPW/QYZGtng BVTPVcbrqJH/f96JlF/yWB+eReueY6YfRwgj6c8uc0R6ffMDbgM/mz9OFkjk7LvZ HCDPH1vLomW0SaikZQu+LJhLZwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJcB1wQ3 m9/IS/VVgjpL7iv4kF6qMB8GA1UdIwQYMBaAFDtIq4YWUvru1+HRJYPxa7f7sokT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjkwOS85QUJBQ0FDODRE Q0IxMUVEODI5NjFCMzZDNEY5QUUwMi9PMGlyaGhaUy11N1g0ZEVsZ19GcnRfdXlp Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08waXJoaFpTLXU3WDRkRWxnX0ZydF91eWlSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzY5MDkvOUFCQUNBQzg0RENCMTFFRDgyOTYxQjM2QzRGOUFFMDIvOEZGRjlDNUFB RjFBMTFFRkFGMTIyQTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnFPIwDwQCAAIwCQMHACABDfFlwDANBgkqhkiG9w0BAQsF AAOCAQEAR2wI15Skdb3QbtIaw9BaxNbUL9+7pvrupHpKAVzZB+yY/ArNGYAe69fk BrQ4Kh6nPIgjouKY6WdsSHicGu1yvu6Nm6DNrAtoAXoE9oTwA1j6bFhWpaLCc8kp V/INb7PqfOQInU0h9KKEfLWaHTXxOl3yB5+X3RUln7iJfzKoNeoB2Nv+BC6ulJmH Mtg946sMIdfd4xv1AOOoypICsd0MbJCA/6+/jUA4nrsynk5lVvA0fNLl72mKf7Ix uEQ//I1CvIZy4zk3fSv6wxiGsNXHIqbLANYE/WWuxsBjq0JQIMmDRjKhLtSeOx8T jPRZYVtVPoantI9FyHOeERJZHzm+XQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:33:40 2025 by rpki-client