This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/DF0A2BF4B15E11EE8E75695CC4F9AE02.roa File: DF0A2BF4B15E11EE8E75695CC4F9AE02.roa (raw, json) Hash identifier: I3DJPrqQDQWNYUcfVkhfL36sgECV3rkEkAXDv9beZH0= Subject key identifier: E5:2F:6A:EB:F8:B1:6A:39:53:79:96:22:71:9B:F2:C3:0C:87:3D:E9 Certificate issuer: /CN=A9194692/serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40 Certificate serial: 0779 Authority key identifier: AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/DF0A2BF4B15E11EE8E75695CC4F9AE02.roa Signing time: Tue 02 Dec 2025 20:54:26 +0000 ROA not before: Tue 02 Dec 2025 20:54:26 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 136429 IP address blocks: 103.158.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1913 (0x779) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194692, serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40 Validity Not Before: Dec 2 20:54:26 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692f5202-9f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0a:ee:f0:d3:01:7f:92:82:13:2e:58:f4:87: a8:05:cc:ae:f8:12:0c:20:e8:78:cd:b0:cc:02:5e: 15:f5:2c:57:aa:09:c5:0a:a5:92:98:eb:ff:7a:a7: fa:46:c8:0f:e4:3a:de:8a:8d:86:5d:9d:85:db:a1: db:84:47:18:50:0d:c1:cf:23:8b:bb:af:c3:cd:d6: f8:e7:44:b4:26:1f:0b:47:83:f8:b6:b1:78:4a:41: 42:e5:c3:c7:5d:64:79:c9:36:b3:c6:91:d1:86:d6: 31:b9:96:01:f7:60:25:22:4e:b5:8c:26:de:b6:d5: a0:ec:1b:80:0c:0e:59:d0:41:c9:ea:f6:3f:6f:f5: 03:3a:c5:cb:aa:0b:37:9b:85:a7:ef:f2:85:1d:dd: 03:ca:4e:9c:a1:cb:e9:e4:9b:b0:18:4e:19:0b:3e: 5d:69:ea:70:73:b7:d0:67:0d:d1:5f:0f:06:9f:83: 3a:57:97:9c:63:c5:ea:d7:7b:c4:51:a7:f3:fe:15: f5:5e:63:e4:81:c0:b1:4f:41:90:71:f2:56:e0:b6: 04:4d:13:47:d7:83:e7:e2:83:55:6b:35:f1:5e:92: ab:ef:c8:7c:ff:34:cd:d0:51:5a:da:f3:ac:84:92: a5:f4:54:7c:05:74:6d:6e:97:3c:8c:a7:fe:cd:d9: 78:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2F:6A:EB:F8:B1:6A:39:53:79:96:22:71:9B:F2:C3:0C:87:3D:E9 X509v3 Authority Key Identifier: keyid:AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/DF0A2BF4B15E11EE8E75695CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.211.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:4e:a7:a9:58:36:04:cb:c4:3c:cb:82:ac:8e:b8:ea:03:dd: 91:53:d0:1e:26:fe:35:21:42:0b:96:fa:64:74:b9:fb:42:bc: 7c:15:d8:ea:c1:80:94:af:41:f6:9a:f5:eb:c6:2b:a0:0d:0c: 02:f7:f7:5b:7a:22:fd:14:d2:0f:ab:f0:3d:77:ca:d6:65:16: 97:ac:8b:4e:84:fa:c6:04:ce:45:ad:98:37:3f:cb:15:b0:f2: 93:1b:87:e4:f4:dc:79:d0:ca:d2:22:06:84:5a:b3:cd:9c:18: 37:d3:8e:c4:53:26:3a:47:82:72:4d:df:5c:a3:57:6a:58:b3: 8d:55:bb:d7:7f:38:d6:63:8e:0b:77:2c:73:a5:7f:7b:8a:01: 27:ea:41:db:ed:81:c8:8a:4a:86:e7:05:7c:1a:b6:67:98:8d: 8f:46:b8:c6:47:49:6d:c3:07:1b:fe:b9:66:1e:f1:3c:05:3f: 4f:55:a9:c2:a3:cc:aa:e9:51:49:e8:9e:2c:57:61:d4:0f:74: bf:e9:9d:9d:01:12:34:06:90:c0:52:d3:7d:05:70:5c:81:55: 0d:26:28:8f:be:f2:de:d8:aa:a1:66:bd:4d:0a:90:a8:d9:d5: 65:03:75:db:34:59:d8:b1:26:c0:7b:1b:55:db:6e:17:67:0b: c6:d7:72:44 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ2OTIxMTAvBgNVBAUTKEFGRTVCM0NEMkRDNTY3QUI4QTU4RUIzOTgwRDVFNUU3 ODQyOTBBNDAwHhcNMjUxMjAyMjA1NDI2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmNTIwMi05ZjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgru8NMBf5KCEy5Y9IeoBcyu+BIMIOh4zbDMAl4V9SxXqgnFCqWSmOv/eqf6 RsgP5Dreio2GXZ2F26HbhEcYUA3BzyOLu6/Dzdb450S0Jh8LR4P4trF4SkFC5cPH XWR5yTazxpHRhtYxuZYB92AlIk61jCbettWg7BuADA5Z0EHJ6vY/b/UDOsXLqgs3 m4Wn7/KFHd0Dyk6cocvp5JuwGE4ZCz5daepwc7fQZw3RXw8Gn4M6V5ecY8Xq13vE Uafz/hX1XmPkgcCxT0GQcfJW4LYETRNH14Pn4oNVazXxXpKr78h8/zTN0FFa2vOs hJKl9FR8BXRtbpc8jKf+zdl4VQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOUvauv4 sWo5U3mWInGb8sMMhz3pMB8GA1UdIwQYMBaAFK/ls80txWeriljrOYDV5eeEKQpA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDY5Mi84ODVBMzJGRTQy OTQxMUVCOTA0OTFBMzRDNEY5QUUwMi9yLVd6elMzRlo2dUtXT3M1Z05YbDU0UXBD a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItV3p6UzNGWjZ1S1dPczVnTlhsNTRRcENrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTQ2OTIvODg1QTMyRkU0Mjk0MTFFQjkwNDkxQTM0QzRGOUFFMDIvREYwQTJCRjRC MTVFMTFFRThFNzU2OTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnntMwDQYJKoZIhvcNAQELBQADggEBAH9Op6lYNgTLxDzL gqyOuOoD3ZFT0B4m/jUhQguW+mR0uftCvHwV2OrBgJSvQfaa9evGK6ANDAL391t6 Iv0U0g+r8D13ytZlFpesi06E+sYEzkWtmDc/yxWw8pMbh+T03HnQytIiBoRas82c GDfTjsRTJjpHgnJN31yjV2pYs41Vu9d/ONZjjgt3LHOlf3uKASfqQdvtgciKSobn BXwatmeYjY9GuMZHSW3DBxv+uWYe8TwFP09VqcKjzKrpUUnonixXYdQPdL/pnZ0B EjQGkMBS030FcFyBVQ0mKI++8t7YqqFmvU0KkKjZ1WUDdds0WdixJsB7G1Xbbhdn C8bXckQ= -----END CERTIFICATE-----Generated at Sun Dec 7 03:00:34 2025 by rpki-client