This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/1BC70FAEDBF011F092B3F5D0536F56BC.roa File: 1BC70FAEDBF011F092B3F5D0536F56BC.roa (raw, json) Hash identifier: CEJ0oBASqVxNrNnqS0IogtbXyHO97nW1T0rcluBy9Ek= Subject key identifier: C7:BC:52:A9:C6:68:B1:F6:9F:C2:67:29:CA:F8:EA:09:06:EE:3F:5C Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4 Certificate serial: 3583 Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/1BC70FAEDBF011F092B3F5D0536F56BC.roa Signing time: Thu 18 Dec 2025 09:01:34 +0000 ROA not before: Thu 18 Dec 2025 09:01:34 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 149175 IP address blocks: 202.181.137.0/24 maxlen: 24 202.181.138.0/24 maxlen: 24 202.181.142.0/24 maxlen: 24 202.181.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13699 (0x3583) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120B99, serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4 Validity Not Before: Dec 18 09:01:34 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6943c2ee-b384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b8:af:eb:26:cb:8f:a5:26:75:67:3a:65:47: 22:11:66:95:4c:d7:d5:11:ac:5e:a2:48:e4:89:6b: 21:fd:7a:0d:58:b3:af:72:6f:79:74:12:f6:f4:14: 66:f1:45:51:fa:3b:df:03:53:1f:59:eb:bb:f9:a2: 12:89:be:93:9f:25:6e:1b:70:1f:3b:5e:04:ac:8f: 9c:44:98:b5:57:96:cb:86:dc:8a:98:d4:94:70:46: d3:97:99:53:3f:b1:38:68:b0:d3:14:71:04:11:b6: e5:46:c2:fa:74:09:a0:22:53:ce:65:69:53:eb:ce: 59:aa:be:54:d7:2a:ec:79:05:41:cd:be:cf:c1:a4: aa:f5:94:52:8b:fb:0b:5c:b8:5d:d2:37:35:67:b1: db:33:23:9f:52:3e:7e:36:b1:74:0c:7e:a9:b8:75: bb:80:0d:36:8a:14:70:4c:c5:53:fb:d3:49:9e:fb: e3:05:67:ca:44:42:69:d2:91:37:96:37:f2:d6:a9: 81:72:b6:87:41:d8:6b:df:5d:0c:77:08:53:2e:e3: 09:15:8b:39:65:5b:22:41:d6:df:41:ae:3a:0a:44: 60:2a:82:85:87:ae:22:5b:19:c8:f6:de:81:6e:11: 73:d0:d2:51:a6:48:d6:07:8b:55:a7:7f:3f:58:96: 2a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BC:52:A9:C6:68:B1:F6:9F:C2:67:29:CA:F8:EA:09:06:EE:3F:5C X509v3 Authority Key Identifier: keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/1BC70FAEDBF011F092B3F5D0536F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.181.137.0-202.181.138.255 202.181.142.0/24 202.181.149.0/24 Signature Algorithm: sha256WithRSAEncryption a0:36:c5:28:7f:be:df:c5:72:a9:e1:a2:48:8b:fb:9c:c0:86: 4e:81:57:56:b3:ef:b0:cc:98:67:d4:24:00:c8:00:ec:53:e0: 66:8e:3c:e2:22:95:ca:d7:b1:ed:58:65:3d:0b:46:54:b6:67: 17:3b:09:c5:10:af:a7:49:0a:bc:cb:2a:7d:9d:3e:92:b3:85: 4b:b8:13:73:95:b0:20:d8:d9:7c:1c:6a:a9:e5:69:6c:df:b2: 7e:71:60:ce:48:86:34:49:03:d6:4b:f6:cd:40:f2:38:69:a2: d1:62:2f:b3:c2:7f:e4:bd:89:b7:4b:e2:b5:19:58:45:b3:2f: 3c:ee:eb:c4:cf:0d:90:7f:67:e6:6f:43:9c:6f:f3:86:fa:b9: f1:43:00:23:89:df:4b:04:e4:7d:50:91:c1:be:57:df:64:ee: 61:7e:87:29:b5:a0:fc:12:3b:99:cf:d9:a1:80:f5:30:cb:e9: 6f:ff:a5:d8:72:aa:e8:91:b0:66:d5:84:01:30:da:58:20:a8: 0e:f8:8d:61:94:95:d6:d0:84:dc:b8:70:d1:f7:f9:36:57:cd: 92:96:04:49:76:fb:a4:21:f5:1d:5f:b4:db:a1:fd:be:01:74: c4:fc:4b:b9:60:12:09:a1:79:3e:c8:92:db:7d:65:76:bc:91: f1:94:73:65 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICNYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBCOTkxMTAvBgNVBAUTKDg2Qzc5NDY5NDZCMkE1N0IwNTZGMDJCMjc5MzQwRDMw QzJDRTQ5QjQwHhcNMjUxMjE4MDkwMTM0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQzYzJlZS1iMzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuriv6ybLj6UmdWc6ZUciEWaVTNfVEaxeokjkiWsh/XoNWLOvcm95dBL29BRm 8UVR+jvfA1MfWeu7+aISib6TnyVuG3AfO14ErI+cRJi1V5bLhtyKmNSUcEbTl5lT P7E4aLDTFHEEEbblRsL6dAmgIlPOZWlT685Zqr5U1yrseQVBzb7PwaSq9ZRSi/sL XLhd0jc1Z7HbMyOfUj5+NrF0DH6puHW7gA02ihRwTMVT+9NJnvvjBWfKREJp0pE3 ljfy1qmBcraHQdhr310MdwhTLuMJFYs5ZVsiQdbfQa46CkRgKoKFh64iWxnI9t6B bhFz0NJRpkjWB4tVp38/WJYqwQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFMe8UqnG aLH2n8JnKcr46gkG7j9cMB8GA1UdIwQYMBaAFIbHlGlGsqV7BW8Csnk0DTDCzkm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEI5OS9EM0Y5MDUxQzFE ODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBYc0Zid0t5ZVRRTk1NTE9T YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzZVVhVWF5cFhzRmJ3S3llVFFOTU1MT1NiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjBCOTkvRDNGOTA1MUMxRDgzMTFFMkI0RUQ1Q0Q5MDhCMDJDRDIvMUJDNzBGQUVE QkYwMTFGMDkyQjNGNUQwNTM2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBowDAMEAMq1iQMEAMq1igMEAMq1jgMEAMq1lTANBgkqhkiG9w0B AQsFAAOCAQEAoDbFKH++38VyqeGiSIv7nMCGToFXVrPvsMyYZ9QkAMgA7FPgZo48 4iKVytex7VhlPQtGVLZnFzsJxRCvp0kKvMsqfZ0+krOFS7gTc5WwINjZfBxqqeVp bN+yfnFgzkiGNEkD1kv2zUDyOGmi0WIvs8J/5L2Jt0vitRlYRbMvPO7rxM8NkH9n 5m9DnG/zhvq58UMAI4nfSwTkfVCRwb5X32TuYX6HKbWg/BI7mc/ZoYD1MMvpb/+l 2HKq6JGwZtWEATDaWCCoDviNYZSV1tCE3Lhw0ff5NlfNkpYESXb7pCH1HV+026H9 vgF0xPxLuWASCaF5PsiS231ldryR8ZRzZQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:03:27 2025 by rpki-client