This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/4F7CFB9A82B711EE997EB92AC4F9AE02.roa File: 4F7CFB9A82B711EE997EB92AC4F9AE02.roa (raw, json) Hash identifier: hgljKjisBGNnslvOx+Ue9/AjKn+RJmc2MY4DHEOzs28= Subject key identifier: 48:16:F4:DA:1D:64:17:61:A4:64:6D:14:CE:E6:56:CD:FD:CC:3E:AF Certificate issuer: /CN=A9196CE1/serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323 Certificate serial: 0185 Authority key identifier: 3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/4F7CFB9A82B711EE997EB92AC4F9AE02.roa Signing time: Wed 03 Dec 2025 02:33:32 +0000 ROA not before: Wed 03 Dec 2025 02:33:32 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 136418 IP address blocks: 202.47.164.0/24 maxlen: 24 202.47.165.0/24 maxlen: 24 2001:df3:2440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196CE1, serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323 Validity Not Before: Dec 3 02:33:32 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=692fa17c-d5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5c:88:2c:53:7b:8c:9f:0a:d7:ba:f9:6f:20: 29:1f:c2:56:b8:c0:6b:7c:4c:46:3e:ca:5a:7c:3e: 46:ec:75:22:06:44:a8:3c:ea:a3:f5:de:81:91:49: 72:a7:aa:b8:ed:3c:cc:08:41:cf:ca:38:1e:b7:14: 93:5f:e9:d6:1d:ce:8d:62:0c:79:b5:34:08:dc:57: 93:3b:22:80:ce:70:1e:eb:8a:12:66:79:3b:6d:5c: 37:ca:92:ac:4c:8c:ab:27:4d:ac:2c:3c:db:5f:54: 3b:0c:04:ac:31:22:4b:ca:4d:66:84:87:71:f3:d8: 76:66:de:9d:cb:c8:ad:2d:85:6a:96:11:d4:2c:e9: 01:73:b3:3b:6b:0a:10:ed:04:94:f2:d6:7e:71:0a: 39:11:fc:65:5b:24:c0:0e:8e:d1:99:98:f7:88:fe: 03:35:62:e5:d7:7e:a1:8b:da:1d:a1:36:89:6c:ce: 16:a8:41:f8:0a:30:28:4d:b2:a0:fa:2d:1b:ba:f1: 40:cb:1a:99:a5:de:65:a1:2a:af:98:5a:c1:ac:9e: 27:7c:b1:3d:06:01:1e:92:42:2d:f7:20:ec:33:28: 72:93:10:79:ba:20:1e:ae:ee:ee:0f:d3:6e:2b:2d: 58:2e:4a:a0:28:51:82:74:0e:00:a8:66:e4:db:5d: f3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:16:F4:DA:1D:64:17:61:A4:64:6D:14:CE:E6:56:CD:FD:CC:3E:AF X509v3 Authority Key Identifier: keyid:3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/4F7CFB9A82B711EE997EB92AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.47.164.0/23 IPv6: 2001:df3:2440::/48 Signature Algorithm: sha256WithRSAEncryption 1b:9c:3e:0d:c8:ba:d6:a3:e4:13:36:7a:9a:07:ee:0d:fd:c2: b5:c4:aa:c9:54:8c:94:fa:c1:56:9a:83:6d:6a:7c:ba:53:c1: 1a:1a:b7:5d:26:d6:f1:d6:d5:fd:3b:ca:a6:40:f0:28:66:60: 96:ff:f3:be:fd:82:52:f1:e8:cb:76:16:27:66:a9:b6:03:89: 4c:e3:a3:0a:c7:cc:ee:42:77:ff:4c:ae:f6:5b:db:93:72:3f: 75:63:99:35:cd:ea:b5:96:2b:89:bd:b5:d8:00:ae:a5:66:bb: aa:bd:1b:78:a9:0d:8b:3f:48:8e:64:79:c4:8c:cb:1f:2d:cc: d0:9c:fb:85:0d:63:56:0f:5e:b4:38:79:c1:b4:2b:14:a2:c6: a9:f5:f3:86:0f:ad:c5:5e:bf:d2:10:0f:dd:2f:86:f6:85:0b: 01:61:c6:7c:21:4e:a7:da:6f:df:ee:bb:58:a1:e6:ee:3a:bb: 0c:d7:e9:fd:55:25:d8:3b:d6:05:60:be:83:48:e3:64:35:3d: 1a:da:c9:df:e4:d0:01:f9:c9:14:d7:d0:86:1e:f5:36:13:ec: 37:ad:4c:7c:d0:1b:4c:ba:27:02:05:e9:ae:1d:88:f8:40:c4: 75:a7:4c:6b:be:79:e1:39:57:3e:f4:0e:82:d7:97:72:c5:62: b5:9d:ef:0f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZDRTExMTAvBgNVBAUTKDNDRDcxNTUyQUZBQTAxMzhGOUE2NEUwMTYwRUVGMDYw OTYwNjUzMjMwHhcNMjUxMjAzMDIzMzMyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmYTE3Yy1kNWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lyILFN7jJ8K17r5byApH8JWuMBrfExGPspafD5G7HUiBkSoPOqj9d6BkUly p6q47TzMCEHPyjgetxSTX+nWHc6NYgx5tTQI3FeTOyKAznAe64oSZnk7bVw3ypKs TIyrJ02sLDzbX1Q7DASsMSJLyk1mhIdx89h2Zt6dy8itLYVqlhHULOkBc7M7awoQ 7QSU8tZ+cQo5EfxlWyTADo7RmZj3iP4DNWLl136hi9odoTaJbM4WqEH4CjAoTbKg +i0buvFAyxqZpd5loSqvmFrBrJ4nfLE9BgEekkIt9yDsMyhykxB5uiAeru7uD9Nu Ky1YLkqgKFGCdA4AqGbk213zUQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEgW9Nod ZBdhpGRtFM7mVs39zD6vMB8GA1UdIwQYMBaAFDzXFVKvqgE4+aZOAWDu8GCWBlMj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkNFMS9FODgxRThFQzgy QjYxMUVFOUJGQzA2MURDNEY5QUUwMi9QTmNWVXEtcUFUajVwazRCWU83d1lKWUdV eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BOY1ZVcS1xQVRqNXBrNEJZTzd3WUpZR1V5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTZDRTEvRTg4MUU4RUM4MkI2MTFFRTlCRkMwNjFEQzRGOUFFMDIvNEY3Q0ZCOUE4 MkI3MTFFRTk5N0VCOTJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAHKL6QwDwQCAAIwCQMHACABDfMkQDANBgkqhkiG9w0BAQsF AAOCAQEAG5w+Dci61qPkEzZ6mgfuDf3CtcSqyVSMlPrBVpqDbWp8ulPBGhq3XSbW 8dbV/TvKpkDwKGZglv/zvv2CUvHoy3YWJ2aptgOJTOOjCsfM7kJ3/0yu9lvbk3I/ dWOZNc3qtZYrib212ACupWa7qr0beKkNiz9IjmR5xIzLHy3M0Jz7hQ1jVg9etDh5 wbQrFKLGqfXzhg+txV6/0hAP3S+G9oULAWHGfCFOp9pv3+67WKHm7jq7DNfp/VUl 2DvWBWC+g0jjZDU9GtrJ3+TQAfnJFNfQhh71NhPsN61MfNAbTLonAgXprh2I+EDE dadMa7554TlXPvQOgteXcsVitZ3vDw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:18:41 2025 by rpki-client