This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/AD8187A41FF511ED8DD6D661C4F9AE02.roa File: AD8187A41FF511ED8DD6D661C4F9AE02.roa (raw, json) Hash identifier: Wjv2UQZSDwfC4dKbLhWY3Zl91JlEtTynpiuYv/JnZQc= Subject key identifier: 0F:3C:CF:CA:C3:02:9C:A7:76:E7:10:BB:5F:50:4A:3B:B8:5E:60:A4 Certificate issuer: /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Certificate serial: 23C2 Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/AD8187A41FF511ED8DD6D661C4F9AE02.roa Signing time: Thu 06 Nov 2025 15:53:21 +0000 ROA not before: Thu 06 Nov 2025 15:53:21 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 24016 IP address blocks: 103.197.164.0/22 maxlen: 24 115.84.128.0/19 maxlen: 24 202.21.176.0/20 maxlen: 24 220.158.220.0/22 maxlen: 24 2401:8300::/32 maxlen: 40 2401:8300:f000::/48 maxlen: 48 2401:8300:f001::/48 maxlen: 48 2401:8300:f002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9154 (0x23c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194D56, serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Validity Not Before: Nov 6 15:53:21 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690cc470-077a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:40:3b:9a:9c:8d:88:1f:ee:9e:d3:46:52:15: 41:b3:e0:82:a9:3f:21:43:19:c1:91:52:41:fc:48: 91:ed:5f:d2:d1:a5:83:7c:ae:7f:3d:24:99:61:cc: 18:97:0b:84:8b:d3:73:29:6c:5f:ae:79:a7:e4:1d: b9:26:a7:69:06:0f:e7:c4:54:01:89:d9:78:15:e0: c4:dc:83:95:0b:f8:df:0c:48:b7:cd:35:a9:90:ec: 77:66:33:fb:bb:5f:69:54:f9:dd:63:66:3f:37:78: ba:f5:ab:14:42:68:49:f6:43:0a:c6:2e:2a:f8:f6: 8b:49:f7:af:57:0a:4d:af:ae:9f:45:b5:23:05:5e: 9f:33:e6:73:f2:c5:c7:2c:73:f3:ec:b3:11:e8:eb: 0e:eb:69:b5:42:7f:79:6c:47:51:b5:5f:fd:6a:ad: 5e:26:e5:2a:bf:00:df:65:9b:e7:5b:f0:ce:d7:ee: 17:c8:df:b8:a4:d4:1e:4a:2e:3f:50:9a:46:19:1d: 00:ef:9b:52:df:5e:e2:a3:63:33:21:55:e3:5e:e6: 42:df:ae:29:98:db:5e:77:f9:85:c9:5f:71:8c:00: f8:bd:a0:11:22:93:a0:4a:97:cb:f9:2e:a8:f5:52: 80:c4:f2:a9:7d:67:8f:ad:56:3d:e0:0c:03:01:23: 89:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3C:CF:CA:C3:02:9C:A7:76:E7:10:BB:5F:50:4A:3B:B8:5E:60:A4 X509v3 Authority Key Identifier: keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/AD8187A41FF511ED8DD6D661C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.197.164.0/22 115.84.128.0/19 202.21.176.0/20 220.158.220.0/22 IPv6: 2401:8300::/32 Signature Algorithm: sha256WithRSAEncryption 1e:29:d1:c7:94:dd:b3:1a:cc:65:27:78:c3:86:b5:ba:5b:ee: 89:cb:13:4d:c4:32:4d:c9:7d:75:90:d2:9a:d4:8b:4f:45:e3: dc:dd:d9:f2:9d:cd:ea:4e:80:d2:0a:63:36:38:a6:6a:00:14: 8e:6f:79:78:ec:f1:82:b3:f7:df:ac:aa:d3:54:6a:a4:12:4d: fe:f5:1f:78:68:8e:53:22:e4:c6:ce:d4:c4:98:14:28:18:32: cf:7e:2c:99:f8:38:a2:01:5a:9a:cb:36:c1:a6:d5:a7:ab:e6: 03:34:85:02:53:db:34:a8:f1:32:1f:de:21:40:a9:a1:ae:6b: 85:e3:6b:78:37:f1:d3:35:b3:83:ab:ab:f2:95:8d:3b:16:a8: ef:0f:7c:b5:b2:4c:ee:d6:83:e4:42:d1:8d:25:a6:22:01:7d: b6:d0:0b:07:95:7a:fc:ac:ca:a8:2b:bc:61:38:18:a2:c5:ea: d2:34:62:1f:00:91:01:34:18:b6:29:79:0a:d6:5f:e3:0b:41: e0:6c:81:cd:f6:3b:70:ea:54:8b:19:a1:7e:3b:d5:1c:64:46: b1:ac:82:8f:b1:86:62:f7:c7:1a:6e:8f:02:63:27:d1:8a:71: 51:6e:f9:2c:2b:11:42:87:b4:a7:15:a0:7b:22:43:dd:b5:87: 06:dd:b9:bf -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICI8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRENTYxMTAvBgNVBAUTKDdDNUI3NDE0RTNDQzgwNDA1OUJDQTg2Q0M1MTYzQTA3 NDNFNDFDODUwHhcNMjUxMTA2MTU1MzIxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBjYzQ3MC0wNzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEA7mpyNiB/untNGUhVBs+CCqT8hQxnBkVJB/EiR7V/S0aWDfK5/PSSZYcwY lwuEi9NzKWxfrnmn5B25JqdpBg/nxFQBidl4FeDE3IOVC/jfDEi3zTWpkOx3ZjP7 u19pVPndY2Y/N3i69asUQmhJ9kMKxi4q+PaLSfevVwpNr66fRbUjBV6fM+Zz8sXH LHPz7LMR6OsO62m1Qn95bEdRtV/9aq1eJuUqvwDfZZvnW/DO1+4XyN+4pNQeSi4/ UJpGGR0A75tS317io2MzIVXjXuZC364pmNted/mFyV9xjAD4vaARIpOgSpfL+S6o 9VKAxPKpfWePrVY94AwDASOJcQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFA88z8rD ApynducQu19QSju4XmCkMB8GA1UdIwQYMBaAFHxbdBTjzIBAWbyobMUWOgdD5ByF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEQ1Ni9FNUQ0MDdGRTg2 QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdFQlp2S2hzeFJZNkIwUGtI SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGdDBGT1BNZ0VCWnZLaHN4Ulk2QjBQa0hJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTRENTYvRTVENDA3RkU4NkIzMTFFNTk4RjM3RjFBQzRGOUFFMDIvQUQ4MTg3QTQx RkY1MTFFRDhERDZENjYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAJnxaQDBAVzVIADBATKFbADBALcntwwDQQCAAIwBwMFACQB gwAwDQYJKoZIhvcNAQELBQADggEBAB4p0ceU3bMazGUneMOGtbpb7onLE03EMk3J fXWQ0prUi09F49zd2fKdzepOgNIKYzY4pmoAFI5veXjs8YKz99+sqtNUaqQSTf71 H3hojlMi5MbO1MSYFCgYMs9+LJn4OKIBWprLNsGm1aer5gM0hQJT2zSo8TIf3iFA qaGua4Xja3g38dM1s4Orq/KVjTsWqO8PfLWyTO7Wg+RC0Y0lpiIBfbbQCweVevys yqgrvGE4GKLF6tI0Yh8AkQE0GLYpeQrWX+MLQeBsgc32O3DqVIsZoX471RxkRrGs go+xhmL3xxpujwJjJ9GKcVFu+SwrEUKHtKcVoHsiQ921hwbdub8= -----END CERTIFICATE-----Generated at Sun Dec 7 01:08:58 2025 by rpki-client