This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/9995D8D6276011EDAF21D06DC4F9AE02.roa File: 9995D8D6276011EDAF21D06DC4F9AE02.roa (raw, json) Hash identifier: 4CrIrlbCOcRWsA5ARBsae7V64uUUtY5Z0RAalZp9YkU= Subject key identifier: 27:8F:3F:66:5A:0C:03:2E:A1:3C:3A:4A:1C:9C:8D:B2:94:9B:29:08 Certificate issuer: /CN=A9194522/serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A Certificate serial: 02B2 Authority key identifier: A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/9995D8D6276011EDAF21D06DC4F9AE02.roa Signing time: Sat 29 Nov 2025 13:56:27 +0000 ROA not before: Sat 29 Nov 2025 13:56:27 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 150178 IP address blocks: 103.198.94.0/23 maxlen: 23 103.198.94.0/24 maxlen: 24 103.198.95.0/24 maxlen: 24 2400:a3a0::/32 maxlen: 32 2400:a3a0::/48 maxlen: 48 2400:a3a0:1::/48 maxlen: 48 2400:a3a0:2::/48 maxlen: 48 2400:a3a0:3::/48 maxlen: 48 2400:a3a0:4::/48 maxlen: 48 2400:a3a0:5::/48 maxlen: 48 2400:a3a0:6::/48 maxlen: 48 2400:a3a0:94::/48 maxlen: 48 2400:a3a0:95::/48 maxlen: 48 2400:a3a0:fb::/48 maxlen: 48 2400:a3a0:ecc::/48 maxlen: 48 2400:a3a0:1000::/36 maxlen: 36 2400:a3a0:1000::/48 maxlen: 48 2400:a3a0:2000::/36 maxlen: 36 2400:a3a0:2000::/48 maxlen: 48 2400:a3a0:3000::/48 maxlen: 48 2400:a3a0:4000::/42 maxlen: 42 2400:a3a0:4001::/48 maxlen: 48 2400:a3a0:4002::/48 maxlen: 48 2400:a3a0:4003::/48 maxlen: 48 2400:a3a0:4004::/48 maxlen: 48 2400:a3a0:4005::/48 maxlen: 48 2400:a3a0:4006::/48 maxlen: 48 2400:a3a0:4007::/48 maxlen: 48 2400:a3a0:4008::/48 maxlen: 48 2400:a3a0:4009::/48 maxlen: 48 2400:a3a0:400a::/48 maxlen: 48 2400:a3a0:400b::/48 maxlen: 48 2400:a3a0:400c::/48 maxlen: 48 2400:a3a0:400d::/48 maxlen: 48 2400:a3a0:400e::/48 maxlen: 48 2400:a3a0:400f::/48 maxlen: 48 2400:a3a0:4010::/48 maxlen: 48 2400:a3a0:4011::/48 maxlen: 48 2400:a3a0:4012::/48 maxlen: 48 2400:a3a0:4013::/48 maxlen: 48 2400:a3a0:4014::/48 maxlen: 48 2400:a3a0:4015::/48 maxlen: 48 2400:a3a0:4016::/48 maxlen: 48 2400:a3a0:4017::/48 maxlen: 48 2400:a3a0:4018::/48 maxlen: 48 2400:a3a0:4019::/48 maxlen: 48 2400:a3a0:401a::/48 maxlen: 48 2400:a3a0:401b::/48 maxlen: 48 2400:a3a0:401c::/48 maxlen: 48 2400:a3a0:401d::/48 maxlen: 48 2400:a3a0:401e::/48 maxlen: 48 2400:a3a0:401f::/48 maxlen: 48 2400:a3a0:4020::/48 maxlen: 48 2400:a3a0:4021::/48 maxlen: 48 2400:a3a0:4022::/48 maxlen: 48 2400:a3a0:4023::/48 maxlen: 48 2400:a3a0:4024::/48 maxlen: 48 2400:a3a0:4025::/48 maxlen: 48 2400:a3a0:4026::/48 maxlen: 48 2400:a3a0:4027::/48 maxlen: 48 2400:a3a0:4028::/48 maxlen: 48 2400:a3a0:4029::/48 maxlen: 48 2400:a3a0:402a::/48 maxlen: 48 2400:a3a0:402b::/48 maxlen: 48 2400:a3a0:402c::/48 maxlen: 48 2400:a3a0:402d::/48 maxlen: 48 2400:a3a0:402e::/48 maxlen: 48 2400:a3a0:402f::/48 maxlen: 48 2400:a3a0:4030::/48 maxlen: 48 2400:a3a0:4031::/48 maxlen: 48 2400:a3a0:4032::/48 maxlen: 48 2400:a3a0:4033::/48 maxlen: 48 2400:a3a0:4034::/48 maxlen: 48 2400:a3a0:4035::/48 maxlen: 48 2400:a3a0:4036::/48 maxlen: 48 2400:a3a0:4037::/48 maxlen: 48 2400:a3a0:4038::/48 maxlen: 48 2400:a3a0:4039::/48 maxlen: 48 2400:a3a0:403a::/48 maxlen: 48 2400:a3a0:403b::/48 maxlen: 48 2400:a3a0:403c::/48 maxlen: 48 2400:a3a0:403d::/48 maxlen: 48 2400:a3a0:403e::/48 maxlen: 48 2400:a3a0:403f::/48 maxlen: 48 2400:a3a0:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194522, serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A Validity Not Before: Nov 29 13:56:27 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=692afb8b-3848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2c:3f:b1:6b:78:56:b0:53:72:b4:13:b1:e4: ee:cd:b3:5b:73:14:85:ea:70:18:4e:25:1e:8b:f5: c2:2e:88:66:bc:0a:3a:17:05:51:fe:9f:5f:81:69: 90:78:5c:fa:28:3b:65:0b:aa:80:aa:aa:06:47:94: a5:e9:72:f1:93:dd:0b:0d:1e:45:b5:7d:d4:9b:a4: 9e:98:8b:cc:17:1d:86:07:2c:07:ff:e9:81:95:9a: 37:94:08:2c:9e:1d:46:65:9b:1d:77:72:73:84:7f: b0:71:8e:6b:98:37:bc:ba:4a:36:d7:57:f3:74:85: a7:ee:51:d0:75:8c:f8:7a:14:3b:f0:98:7e:d2:4b: 55:38:f4:91:28:d6:8e:e8:63:a4:b1:d7:8d:fc:19: 8e:77:99:8d:ee:48:8e:2b:3a:4e:6b:23:c7:03:9c: c5:af:ba:f4:36:42:57:88:ed:37:1e:1e:ce:ab:5f: dd:44:98:03:9f:42:c4:c3:dc:aa:e7:62:9c:07:4a: 07:f8:af:54:0f:bf:ec:e5:cf:e7:15:6b:14:f2:f0: 7a:ee:16:6c:fc:6e:80:83:1d:b9:00:8a:63:b0:74: ba:3b:db:6a:90:16:ad:cb:b5:34:b7:3b:e8:5f:4c: bb:93:45:b0:19:21:69:b0:f9:33:a2:5e:af:66:b8: 07:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8F:3F:66:5A:0C:03:2E:A1:3C:3A:4A:1C:9C:8D:B2:94:9B:29:08 X509v3 Authority Key Identifier: keyid:A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/9995D8D6276011EDAF21D06DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.198.94.0/23 IPv6: 2400:a3a0::/32 Signature Algorithm: sha256WithRSAEncryption ab:4f:45:09:0d:3c:75:29:8e:af:dd:ce:12:8f:38:a2:22:69: 1c:4d:51:b4:7e:94:a2:7a:1b:0e:e2:d4:14:a1:82:6e:c5:b6: 68:3a:5a:3c:ba:3e:84:50:dc:fe:00:01:df:ff:64:54:10:33: ea:99:8d:1c:19:f0:b8:2f:d4:76:5a:ff:6f:74:15:c4:4b:a1: 58:a5:cf:ac:ef:1d:cc:27:ae:fd:f7:5b:dd:3e:fc:cc:f1:5b: 67:a4:3e:1b:23:ae:87:95:7a:da:8a:a7:98:e8:27:95:4d:5f: 2e:12:79:fe:6e:7b:fc:49:6b:fc:b6:ce:03:e5:25:95:77:c9: 2e:a3:36:10:fb:d4:67:90:16:95:d3:39:cc:10:55:cb:ea:46: 9f:1d:6f:db:18:90:9b:25:df:13:5d:4b:f6:28:fe:b4:d5:a7: 99:0b:68:5d:67:02:80:70:c1:37:45:7f:db:9b:8d:9c:ca:08: 3d:66:e1:80:1d:29:5b:b7:e4:e7:c4:01:2b:6a:f0:ea:7b:c9: 4c:60:2c:27:27:fd:c3:93:1e:f8:ab:7f:ea:04:a5:39:12:0c: e7:39:b0:d1:52:13:07:a7:4f:a2:1b:0e:75:ca:e4:b7:56:cf: 95:d3:71:2b:6b:80:11:72:b7:50:5e:6a:72:6d:b3:e0:0f:83: 91:a3:d4:03 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ1MjIxMTAvBgNVBAUTKEE2Mzg5Qzc3NERBRDY1RDg4REYyRTZENEY0M0RFMkEw QjU3MkVFN0EwHhcNMjUxMTI5MTM1NjI3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJhZmI4Yi0zODQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSw/sWt4VrBTcrQTseTuzbNbcxSF6nAYTiUei/XCLohmvAo6FwVR/p9fgWmQ eFz6KDtlC6qAqqoGR5Sl6XLxk90LDR5FtX3Um6SemIvMFx2GBywH/+mBlZo3lAgs nh1GZZsdd3JzhH+wcY5rmDe8uko211fzdIWn7lHQdYz4ehQ78Jh+0ktVOPSRKNaO 6GOksdeN/BmOd5mN7kiOKzpOayPHA5zFr7r0NkJXiO03Hh7Oq1/dRJgDn0LEw9yq 52KcB0oH+K9UD7/s5c/nFWsU8vB67hZs/G6Agx25AIpjsHS6O9tqkBaty7U0tzvo X0y7k0WwGSFpsPkzol6vZrgHTwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCePP2Za DAMuoTw6ShycjbKUmykIMB8GA1UdIwQYMBaAFKY4nHdNrWXYjfLm1PQ94qC1cu56 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDUyMi9ERTIwRkM5NjI3 NUMxMUVEOERBQzZBNjhDNEY5QUUwMi9wamljZDAydFpkaU44dWJVOUQzaW9MVnk3 bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BqaWNkMDJ0WmRpTjh1YlU5RDNpb0xWeTduby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTQ1MjIvREUyMEZDOTYyNzVDMTFFRDhEQUM2QTY4QzRGOUFFMDIvOTk5NUQ4RDYy NzYwMTFFREFGMjFEMDZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnxl4wDQQCAAIwBwMFACQAo6AwDQYJKoZIhvcNAQELBQAD ggEBAKtPRQkNPHUpjq/dzhKPOKIiaRxNUbR+lKJ6Gw7i1BShgm7Ftmg6Wjy6PoRQ 3P4AAd//ZFQQM+qZjRwZ8Lgv1HZa/290FcRLoVilz6zvHcwnrv33W90+/MzxW2ek PhsjroeVetqKp5joJ5VNXy4Sef5ue/xJa/y2zgPlJZV3yS6jNhD71GeQFpXTOcwQ VcvqRp8db9sYkJsl3xNdS/Yo/rTVp5kLaF1nAoBwwTdFf9ubjZzKCD1m4YAdKVu3 5OfEAStq8Op7yUxgLCcn/cOTHvirf+oEpTkSDOc5sNFSEwenT6IbDnXK5LdWz5XT cStrgBFyt1BeanJts+APg5Gj1AM= -----END CERTIFICATE-----Generated at Sun Dec 7 03:08:36 2025 by rpki-client