This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/230576C0784C11EE9C354422C4F9AE02.roa File: 230576C0784C11EE9C354422C4F9AE02.roa (raw, json) Hash identifier: 5/tz+zV+KYTuT4GPIpqQGv7xmSUoiPQVsrX2Ae3OaPk= Subject key identifier: 78:C4:87:55:3D:92:82:E3:41:B5:A3:71:40:E8:E9:BE:6D:76:16:29 Certificate issuer: /CN=A9189AA3/serialNumber=54A5D8FBF84E3EDF31FA24E45C6C672A93B65AD0 Certificate serial: 018F Authority key identifier: 54:A5:D8:FB:F8:4E:3E:DF:31:FA:24:E4:5C:6C:67:2A:93:B6:5A:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKXY-_hOPt8x-iTkXGxnKpO2WtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/230576C0784C11EE9C354422C4F9AE02.roa Signing time: Wed 03 Dec 2025 02:33:08 +0000 ROA not before: Wed 03 Dec 2025 02:33:08 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 151976 IP address blocks: 103.67.56.0/23 maxlen: 24 2401:47a0::/32 maxlen: 32 2401:47a0:3000::/48 maxlen: 48 2401:47a0:3001::/48 maxlen: 48 2401:47a0:3002::/48 maxlen: 48 2401:47a0:3004::/48 maxlen: 48 2401:47a0:300f::/48 maxlen: 48 2401:47a0:30ff::/48 maxlen: 48 2401:47a0:3fff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.crl rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKXY-_hOPt8x-iTkXGxnKpO2WtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189AA3, serialNumber=54A5D8FBF84E3EDF31FA24E45C6C672A93B65AD0 Validity Not Before: Dec 3 02:33:08 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692fa164-0261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:1c:72:31:67:53:0e:28:fe:81:b5:0f:29: 92:67:f0:c0:5c:6a:c8:f4:15:18:a6:8b:d4:68:8a: f5:64:6a:f5:d1:a9:26:be:56:9c:e5:01:91:3e:09: 31:54:0f:b5:cf:4d:7d:46:d6:4f:8b:03:ae:1a:60: 57:e4:56:ac:fa:c5:58:b3:7a:d8:f3:3c:fb:99:27: 0e:6e:8e:7a:65:78:cb:1e:1a:ec:f1:62:2c:a9:86: d2:7e:89:95:32:ff:94:f5:16:53:64:71:ff:e0:35: 41:11:59:dd:a0:0c:06:f4:08:3f:3f:f5:de:57:bb: 0b:73:b8:cb:6e:12:f1:ed:31:8e:56:e2:0b:03:a9: 67:88:b9:5c:59:f0:43:b9:80:c2:cc:24:14:4e:68: c4:40:a6:f5:c5:2b:54:e3:51:3d:bd:99:37:bd:73: 5e:d4:bf:38:31:7e:ec:63:93:f5:cc:4f:d1:84:75: 14:b4:af:00:84:39:a2:be:ac:56:11:1b:18:b8:7d: de:f8:de:bd:17:30:0c:00:c4:6a:bd:bc:a9:9d:7e: 40:59:6b:cc:c0:d9:c8:b5:ec:1e:38:91:c4:5d:cf: fe:d7:19:e5:ec:9e:58:db:21:09:9d:39:7e:15:7e: ff:7b:bd:22:b8:79:46:69:04:70:2c:a9:4f:2b:5d: ce:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C4:87:55:3D:92:82:E3:41:B5:A3:71:40:E8:E9:BE:6D:76:16:29 X509v3 Authority Key Identifier: keyid:54:A5:D8:FB:F8:4E:3E:DF:31:FA:24:E4:5C:6C:67:2A:93:B6:5A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKXY-_hOPt8x-iTkXGxnKpO2WtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/230576C0784C11EE9C354422C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.56.0/23 IPv6: 2401:47a0::/32 Signature Algorithm: sha256WithRSAEncryption 2a:52:d8:49:1a:32:9f:d8:6f:7e:09:9c:49:c4:93:0d:20:da: b3:0e:06:ce:a1:b1:df:e3:ae:55:f6:83:22:b5:de:b4:1f:97: 7e:57:81:f9:db:2d:8d:f7:65:4d:36:c7:72:a3:f0:bd:56:54: 53:ef:6e:b9:c6:a0:10:b6:c1:47:10:77:ba:e4:65:b5:a5:b9: 49:d2:a0:5c:45:16:21:08:96:4c:36:f2:ee:3e:9a:53:cd:b0: 16:f1:96:0b:78:1b:f6:76:52:27:3f:d7:bd:72:fb:8f:3b:7b: be:00:78:bd:74:73:53:2a:f0:33:51:c6:00:7a:bc:9d:81:57: 2c:8f:89:79:cf:22:40:79:92:02:4a:ba:bb:6d:9c:b0:99:33: b0:8e:3b:03:95:64:1d:a9:76:7b:07:81:9b:e9:fc:ed:9f:da: 1b:89:fe:6c:4f:bb:8e:ba:32:1c:3f:df:76:c0:2e:86:a7:79: b4:c7:85:dc:3e:d7:48:04:e2:c6:51:36:ef:ed:d7:33:86:0e: 48:d9:36:bf:30:e5:61:f8:49:84:2b:23:38:89:08:03:3e:0d: 96:ce:1d:1d:dd:44:a3:c8:d8:6b:f1:f3:f8:42:78:72:f3:ee: 52:70:90:10:28:88:72:56:bf:16:55:75:ac:3b:5b:ae:b9:e0: 4c:cf:83:dc -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlBQTMxMTAvBgNVBAUTKDU0QTVEOEZCRjg0RTNFREYzMUZBMjRFNDVDNkM2NzJB OTNCNjVBRDAwHhcNMjUxMjAzMDIzMzA4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmYTE2NC0wMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTgccjFnUw4o/oG1DymSZ/DAXGrI9BUYpovUaIr1ZGr10akmvlac5QGRPgkx VA+1z019RtZPiwOuGmBX5Fas+sVYs3rY8zz7mScObo56ZXjLHhrs8WIsqYbSfomV Mv+U9RZTZHH/4DVBEVndoAwG9Ag/P/XeV7sLc7jLbhLx7TGOVuILA6lniLlcWfBD uYDCzCQUTmjEQKb1xStU41E9vZk3vXNe1L84MX7sY5P1zE/RhHUUtK8AhDmivqxW ERsYuH3e+N69FzAMAMRqvbypnX5AWWvMwNnIteweOJHEXc/+1xnl7J5Y2yEJnTl+ FX7/e70iuHlGaQRwLKlPK13OPQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFHjEh1U9 koLjQbWjcUDo6b5tdhYpMB8GA1UdIwQYMBaAFFSl2Pv4Tj7fMfok5FxsZyqTtlrQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUFBMy8wQTJDQjc4Njc4 NEIxMUVFQTREN0RCNzdDNEY5QUUwMi9WS1hZLV9oT1B0OHgtaVRrWEd4bktwTzJX dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZLWFktX2hPUHQ4eC1pVGtYR3huS3BPMld0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODlBQTMvMEEyQ0I3ODY3ODRCMTFFRUE0RDdEQjc3QzRGOUFFMDIvMjMwNTc2QzA3 ODRDMTFFRTlDMzU0NDIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnQzgwDQQCAAIwBwMFACQBR6AwDQYJKoZIhvcNAQELBQAD ggEBACpS2EkaMp/Yb34JnEnEkw0g2rMOBs6hsd/jrlX2gyK13rQfl35XgfnbLY33 ZU02x3Kj8L1WVFPvbrnGoBC2wUcQd7rkZbWluUnSoFxFFiEIlkw28u4+mlPNsBbx lgt4G/Z2Uic/171y+487e74AeL10c1Mq8DNRxgB6vJ2BVyyPiXnPIkB5kgJKurtt nLCZM7COOwOVZB2pdnsHgZvp/O2f2huJ/mxPu466Mhw/33bALoanebTHhdw+10gE 4sZRNu/t1zOGDkjZNr8w5WH4SYQrIziJCAM+DZbOHR3dRKPI2Gvx8/hCeHLz7lJw kBAoiHJWvxZVdaw7W6654EzPg9w= -----END CERTIFICATE-----Generated at Sun Dec 7 07:45:30 2025 by rpki-client