This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/2486E3E0D4B011F0A4E6361AC4F9AE02.roa File: 2486E3E0D4B011F0A4E6361AC4F9AE02.roa (raw, json) Hash identifier: PFk1mSnoqV2B8nNi8/2CP9saQFwyA5WBQtUNoxuoSj0= Subject key identifier: 3C:4C:EE:45:29:33:A5:B6:62:2B:19:29:E9:5B:BB:C6:75:0F:6D:F1 Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Certificate serial: 74 Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/2486E3E0D4B011F0A4E6361AC4F9AE02.roa Signing time: Tue 09 Dec 2025 03:35:44 +0000 ROA not before: Tue 09 Dec 2025 03:35:44 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 131090 IP address blocks: 61.7.128.0/18 maxlen: 24 103.10.228.0/22 maxlen: 22 103.10.228.0/24 maxlen: 24 103.10.229.0/24 maxlen: 24 103.10.230.0/24 maxlen: 24 103.10.231.0/24 maxlen: 24 110.77.128.0/18 maxlen: 24 110.77.192.0/18 maxlen: 24 110.78.128.0/18 maxlen: 24 116.58.224.0/19 maxlen: 24 119.42.64.0/18 maxlen: 24 2001:c38:b000::/36 maxlen: 36 2001:c38:b010::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Validity Not Before: Dec 9 03:35:44 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69379910-d107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1e:03:ba:a1:ff:ea:0c:bc:bc:96:72:56:63: 55:68:f2:98:77:b1:69:fc:bc:e6:ca:9a:4d:20:ae: 6b:ad:6b:45:46:7a:06:87:4c:b8:41:18:cc:6e:a0: 99:a7:fc:29:08:2a:65:c5:f1:93:8e:f4:5b:df:bc: 7f:f1:f7:5f:7e:be:b3:f6:84:b6:24:12:65:6f:08: ff:81:4c:06:ba:2a:36:9b:ab:70:1e:d2:15:c8:a0: 64:11:56:a3:0b:90:a0:23:ad:e8:24:92:b3:a5:2f: c6:c1:4c:f2:df:10:d3:03:9a:c1:c8:de:a5:cf:e5: 9b:d4:23:bf:b3:d9:84:24:9c:32:7c:66:37:e6:f4: f5:88:fd:f9:e7:81:09:f7:04:18:65:53:95:94:bc: 8b:1b:ac:f8:cc:4f:61:af:60:6e:0a:6d:32:85:a3: 00:c8:b4:1d:6d:11:9f:cf:2f:7a:2e:0e:77:31:77: b9:d8:11:9a:63:bb:b4:68:60:9a:a6:93:b8:f2:72: 56:0e:5c:b1:e5:2a:68:14:2a:83:fb:0e:39:88:03: 3b:58:45:2c:c5:45:2c:99:0f:d0:ef:96:18:61:b0: 8b:de:f8:8e:be:73:ae:3f:c7:5c:29:e2:ef:6a:d8: 52:ee:1a:07:89:2b:c5:bd:ef:5c:3a:33:5b:b4:c3: d9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4C:EE:45:29:33:A5:B6:62:2B:19:29:E9:5B:BB:C6:75:0F:6D:F1 X509v3 Authority Key Identifier: keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/2486E3E0D4B011F0A4E6361AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.7.128.0/18 103.10.228.0/22 110.77.128.0/17 110.78.128.0/18 116.58.224.0/19 119.42.64.0/18 IPv6: 2001:c38:b000::/36 Signature Algorithm: sha256WithRSAEncryption 43:dd:c5:3e:61:b9:6f:a2:ae:f6:44:04:42:f0:45:7d:a4:33: 19:38:84:8b:fd:be:a1:5f:31:06:69:3f:74:83:b6:1a:b7:0b: 81:c9:24:1a:59:9e:e8:13:a7:bd:bc:99:28:97:32:3e:7e:fe: 66:c5:4c:6a:eb:71:44:43:4b:0b:dc:4a:24:60:f8:9f:b4:54: 29:40:07:59:f0:8a:36:c5:27:94:33:d4:95:a6:3c:1f:b2:af: af:01:4d:02:ee:9d:0a:01:c7:7c:9f:28:b5:97:09:d5:de:ca: c0:dc:40:9a:bd:4d:1b:76:d8:3f:6e:2b:56:a4:f8:e3:72:4d: d1:74:aa:2b:41:33:98:3a:b6:7d:9d:bd:80:a1:ee:7a:e8:07: 6c:40:ec:f6:d9:6c:6e:84:a0:74:6c:34:4c:fc:9a:ed:19:be: c6:5d:82:8b:06:41:53:4d:ec:27:2c:49:bd:e9:d8:41:b3:bf: c5:6f:16:e5:cc:a7:da:cc:b2:4e:de:dd:df:de:08:fe:33:5b: a2:21:a7:cf:2c:37:f5:71:31:f4:dd:29:62:50:cf:fa:af:b9: ad:83:1f:d6:74:2f:42:4b:e4:42:50:3d:5b:f2:81:c5:1a:31: c1:1b:a5:2d:3d:88:d9:2c:23:d3:10:b9:20:ee:aa:05:e1:5d: b7:d7:9f:15 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoOUEzQTY3RUREQ0QwOTc3NTMzQTlBMEI4QzQ5RjRDMDEw MEM4NTM5MTAeFw0yNTEyMDkwMzM1NDRaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5Mzc5OTEwLWQxMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOHgO6of/qDLy8lnJWY1Vo8ph3sWn8vObKmk0grmuta0VGegaHTLhBGMxuoJmn /CkIKmXF8ZOO9FvfvH/x919+vrP2hLYkEmVvCP+BTAa6Kjabq3Ae0hXIoGQRVqML kKAjregkkrOlL8bBTPLfENMDmsHI3qXP5ZvUI7+z2YQknDJ8Zjfm9PWI/fnngQn3 BBhlU5WUvIsbrPjMT2GvYG4KbTKFowDItB1tEZ/PL3ouDncxd7nYEZpju7RoYJqm k7jyclYOXLHlKmgUKoP7DjmIAztYRSzFRSyZD9DvlhhhsIve+I6+c64/x1wp4u9q 2FLuGgeJK8W971w6M1u0w9m5AgMBAAGjggLDMIICvzAdBgNVHQ4EFgQUPEzuRSkz pbZiKxkp6Vu7xnUPbfEwHwYDVR0jBBgwFoAUmjpn7dzQl3UzqaC4xJ9MAQDIU5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0I4ODUzMUNBQzhF QzExRjBBMzQ0QUI0NUM0RjlBRTAyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWpwbjdkelFsM1V6cWFDNHhKOU1BUURJVTVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9CODg1MzFDQUM4RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi8yNDg2RTNFMEQ0 QjAxMUYwQTRFNjM2MUFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBNBggrBgEFBQcBBwEB/wQ+ MDwwKgQCAAEwJAMEBj0HgAMEAmcK5AMEB25NgAMEBm5OgAMEBXQ64AMEBncqQDAO BAIAAjAIAwYEIAEMOLAwDQYJKoZIhvcNAQELBQADggEBAEPdxT5huW+irvZEBELw RX2kMxk4hIv9vqFfMQZpP3SDthq3C4HJJBpZnugTp728mSiXMj5+/mbFTGrrcURD SwvcSiRg+J+0VClAB1nwijbFJ5Qz1JWmPB+yr68BTQLunQoBx3yfKLWXCdXeysDc QJq9TRt22D9uK1ak+ONyTdF0qitBM5g6tn2dvYCh7nroB2xA7PbZbG6EoHRsNEz8 mu0ZvsZdgosGQVNN7CcsSb3p2EGzv8VvFuXMp9rMsk7e3d/eCP4zW6Ihp88sN/Vx MfTdKWJQz/qvua2DH9Z0L0JL5EJQPVvygcUaMcEbpS09iNksI9MQuSDuqgXhXbfX nxU= -----END CERTIFICATE-----Generated at Wed Dec 17 11:17:46 2025 by rpki-client