This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/E82DE3C290AB11ECAB81252FC4F9AE02.roa File: E82DE3C290AB11ECAB81252FC4F9AE02.roa (raw, json) Hash identifier: M9+vY+hFN94HdKE9FI6ZDTlRjfa1IPzz7IeGhvfQshE= Subject key identifier: CE:0C:F4:B8:C9:C5:2A:14:38:C2:88:F5:B1:BF:C5:A7:F9:AB:C0:E1 Certificate issuer: /CN=A917991B/serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89 Certificate serial: 04A1 Authority key identifier: 89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/E82DE3C290AB11ECAB81252FC4F9AE02.roa Signing time: Wed 26 Nov 2025 22:46:45 +0000 ROA not before: Wed 26 Nov 2025 22:46:45 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 148968 IP address blocks: 103.174.228.0/23 maxlen: 24 202.130.206.0/24 maxlen: 24 203.12.29.0/24 maxlen: 24 2001:df7:d980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1185 (0x4a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917991B, serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89 Validity Not Before: Nov 26 22:46:45 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69278355-44b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7c:a6:c0:f9:a5:df:93:33:4b:b9:2e:04:00: b1:33:da:2b:6b:cf:2f:ad:1d:3b:0e:5c:af:4c:4a: 91:07:b2:f7:f5:f8:05:36:ed:0a:6b:19:6b:bc:7d: 90:26:72:a4:5a:e9:eb:e5:ec:ea:cd:d6:f4:f2:49: fa:a5:a9:8f:32:9f:12:f3:a8:24:e9:e0:67:1c:31: cd:58:84:5a:6e:ad:de:59:91:f6:53:ea:34:32:46: 10:63:97:76:f6:c3:34:30:fc:c7:ee:65:a9:e9:7f: 20:62:67:03:05:59:d3:b2:7b:26:78:3f:ed:ce:a2: ad:66:83:48:ef:bf:77:23:20:83:9a:1b:ba:42:63: 2d:79:75:ce:4b:55:9b:89:79:94:bb:12:5b:19:c8: e8:36:b1:8f:ba:91:7f:18:62:bb:05:30:77:b8:bc: 4e:be:03:8d:a2:91:b3:13:14:b4:30:df:f7:bb:9c: c2:ca:ff:cf:c2:22:a5:ea:6a:c2:b1:7d:30:9d:75: 3c:c3:c1:4c:90:e0:fa:bc:56:b3:19:c5:94:d4:17: 84:31:2d:83:68:8b:80:e1:0d:9f:63:74:8b:7b:f6: 74:66:16:cd:eb:7b:dc:65:5f:ca:f1:98:d1:cd:66: 7d:ec:27:eb:2d:41:9a:77:35:e6:5b:16:f5:22:ae: 63:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:0C:F4:B8:C9:C5:2A:14:38:C2:88:F5:B1:BF:C5:A7:F9:AB:C0:E1 X509v3 Authority Key Identifier: keyid:89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/E82DE3C290AB11ECAB81252FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.228.0/23 202.130.206.0/24 203.12.29.0/24 IPv6: 2001:df7:d980::/48 Signature Algorithm: sha256WithRSAEncryption 6f:52:e5:ac:1f:ec:9c:67:e2:4b:24:16:90:21:c7:b9:86:e6: 32:ca:40:1c:58:db:04:53:e0:fa:8d:37:c2:1b:d9:33:4b:eb: b2:9d:78:33:00:13:e6:69:5c:72:6d:6d:38:2b:74:e6:5e:72: ac:99:f9:49:ec:3d:a9:a1:69:f1:1c:f9:da:0b:87:89:52:e9: 96:ff:06:9f:7a:e5:77:08:00:e1:8c:3a:bb:69:65:40:d2:51: f6:b3:82:5e:bd:37:53:d6:9c:30:ed:f1:af:de:41:3d:7c:34: 63:de:c8:20:5a:16:58:9e:75:6f:02:f7:d2:a2:f3:cd:02:49: 2d:92:7b:1b:45:a9:df:34:b3:e4:12:7a:4f:59:49:61:e4:3d: cc:69:c8:6b:cf:0e:a3:e2:4e:0e:a0:74:27:0f:09:c9:10:4f: de:ad:f8:72:7e:93:d3:18:ea:89:8f:06:18:c3:89:92:3c:8d: ae:2a:32:1e:08:ff:b1:25:f9:a2:f5:1e:f6:cb:43:78:95:6d: de:b4:8f:3d:47:af:ec:43:23:27:6f:0c:fd:ae:e6:27:4b:09: 8d:49:c0:de:73:8f:04:12:c0:dc:1d:af:21:93:5e:48:dc:24: 7b:2d:e7:0c:d4:83:f5:ea:d1:32:0f:ca:ac:8d:75:56:b9:cd: 90:31:67:41 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICBKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk5MUIxMTAvBgNVBAUTKDg5QTE5N0QwOTc2ODlDNkVCMzM4NjdBOUNDOEFDQ0Q3 RkIzNjRFODkwHhcNMjUxMTI2MjI0NjQ1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI3ODM1NS00NGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XymwPml35MzS7kuBACxM9ora88vrR07DlyvTEqRB7L39fgFNu0KaxlrvH2Q JnKkWunr5ezqzdb08kn6pamPMp8S86gk6eBnHDHNWIRabq3eWZH2U+o0MkYQY5d2 9sM0MPzH7mWp6X8gYmcDBVnTsnsmeD/tzqKtZoNI7793IyCDmhu6QmMteXXOS1Wb iXmUuxJbGcjoNrGPupF/GGK7BTB3uLxOvgONopGzExS0MN/3u5zCyv/PwiKl6mrC sX0wnXU8w8FMkOD6vFazGcWU1BeEMS2DaIuA4Q2fY3SLe/Z0ZhbN63vcZV/K8ZjR zWZ97CfrLUGadzXmWxb1Iq5jIQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFM4M9LjJ xSoUOMKI9bG/xaf5q8DhMB8GA1UdIwQYMBaAFImhl9CXaJxuszhnqcyKzNf7Nk6J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTkxQi83RDBDMzdEMDYw NDMxMUVDOEQzNzUxMEVDNEY5QUUwMi9pYUdYMEpkb25HNnpPR2VweklyTTFfczJU b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhR1gwSmRvbkc2ek9HZXB6SXJNMV9zMlRvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzk5MUIvN0QwQzM3RDA2MDQzMTFFQzhEMzc1MTBFQzRGOUFFMDIvRTgyREUzQzI5 MEFCMTFFQ0FCODEyNTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAFnruQDBADKgs4DBADLDB0wDwQCAAIwCQMHACABDffZgDAN BgkqhkiG9w0BAQsFAAOCAQEAb1LlrB/snGfiSyQWkCHHuYbmMspAHFjbBFPg+o03 whvZM0vrsp14MwAT5mlccm1tOCt05l5yrJn5Sew9qaFp8Rz52guHiVLplv8Gn3rl dwgA4Yw6u2llQNJR9rOCXr03U9acMO3xr95BPXw0Y97IIFoWWJ51bwL30qLzzQJJ LZJ7G0Wp3zSz5BJ6T1lJYeQ9zGnIa88Oo+JODqB0Jw8JyRBP3q34cn6T0xjqiY8G GMOJkjyNrioyHgj/sSX5ovUe9stDeJVt3rSPPUev7EMjJ28M/a7mJ0sJjUnA3nOP BBLA3B2vIZNeSNwkey3nDNSD9erRMg/KrI11VrnNkDFnQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:28:53 2025 by rpki-client