This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/B9CAD7A47D2311EEA3696814C4F9AE02.roa File: B9CAD7A47D2311EEA3696814C4F9AE02.roa (raw, json) Hash identifier: GYYAxCU47qOQPGRshhcyGpuUvaXO8+Ciqhml4LnWXo0= Subject key identifier: 9D:86:6A:5A:CC:1E:B2:0F:E2:0E:A2:54:D9:AA:9C:DC:02:01:E4:80 Certificate issuer: /CN=A9125E1B/serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Certificate serial: 019E Authority key identifier: 86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/B9CAD7A47D2311EEA3696814C4F9AE02.roa Signing time: Fri 09 Jan 2026 03:22:49 +0000 ROA not before: Fri 09 Jan 2026 03:22:49 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138505 IP address blocks: 180.131.132.0/23 maxlen: 23 180.131.132.0/24 maxlen: 24 180.131.133.0/24 maxlen: 24 2001:df3:1dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Jan 2026 02:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E1B, serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Validity Not Before: Jan 9 03:22:49 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69607489-0bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:40:94:7e:a6:9e:36:8f:47:02:d2:21:0e:b9: c9:e7:30:22:46:28:44:4c:90:ed:3e:9a:e0:11:62: f9:80:fb:9e:b3:3c:19:ea:f7:9f:eb:c5:5d:1d:20: 50:2b:f2:83:5c:91:8f:62:39:6d:65:9b:8b:04:1a: ae:e6:45:0a:e6:c6:00:1f:1d:6e:b1:6c:26:ef:e9: b5:f6:a2:19:8f:dd:ea:82:9c:7a:a1:6d:6e:ac:35: 0a:3d:96:68:ef:49:f3:47:82:be:74:e3:e2:3e:19: 25:4b:c3:9b:5d:92:c7:06:3a:43:f0:fc:30:f0:c0: ed:87:17:d0:b3:7a:a5:99:6d:df:72:3d:7b:8b:36: ae:a9:61:63:de:20:a1:a5:fd:68:c0:c8:bc:8a:f1: 6d:3f:2b:e2:e0:b3:5d:a5:60:82:df:a3:ea:c8:e7: 40:91:d5:2f:95:42:36:f1:8d:19:f0:6f:ae:82:70: 84:d5:66:ab:8d:59:60:9a:2a:f7:42:6b:24:04:ab: 22:27:89:18:6d:9f:d4:df:55:cd:02:0e:aa:aa:3e: 83:e9:13:f7:6a:28:b9:7c:cb:02:ad:74:d3:f5:29: b4:a6:31:19:52:fb:80:b6:b5:07:ef:88:a2:c0:a0: a2:16:cd:50:3b:d6:1e:42:12:bb:22:5d:50:44:01: 38:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:86:6A:5A:CC:1E:B2:0F:E2:0E:A2:54:D9:AA:9C:DC:02:01:E4:80 X509v3 Authority Key Identifier: keyid:86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/B9CAD7A47D2311EEA3696814C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.131.132.0/23 IPv6: 2001:df3:1dc0::/48 Signature Algorithm: sha256WithRSAEncryption 42:fb:ae:28:ac:70:74:31:c5:86:0a:ec:d6:db:f1:f5:ef:84: ff:2d:a7:99:49:f2:c3:57:3b:6c:a2:85:9b:9a:37:5a:9a:aa: 0b:69:ab:56:12:e8:59:c2:90:2d:bc:35:34:6f:9a:df:df:04: 30:e0:bd:e3:11:c5:ab:d3:bc:5c:09:68:1d:34:83:fd:ec:cf: a5:a9:cf:d2:42:f0:68:f1:5b:c3:0b:40:3b:99:7a:98:24:b6: dd:38:a1:95:1f:ec:49:26:1e:a3:ba:8d:d0:8b:8d:18:5a:61: 36:95:90:18:c7:54:b3:d0:27:a1:21:3b:3e:d7:72:0f:30:9e: bb:4d:67:4b:32:73:95:cd:97:04:41:54:8b:77:36:93:4b:8d: bd:77:f5:f2:60:72:0f:d2:ca:79:23:dc:67:74:e3:f8:9a:1c: 82:7a:52:84:25:c6:57:08:cc:cd:6c:f4:49:8d:51:84:a7:bb: b3:61:7c:6f:c7:6a:7b:55:7c:2f:ac:60:3a:4a:f2:41:cd:c5: 7a:4a:98:7d:90:09:9a:d1:e0:2e:16:da:e4:9f:86:98:05:8e: b1:7b:b3:58:c3:4a:e1:87:32:f3:3d:a7:57:fc:a3:a2:f2:4e: 89:ff:d0:81:ae:e6:78:38:5d:a9:97:99:bb:22:e9:2a:3a:de: 43:97:33:49 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MjVFMUIxMTAvBgNVBAUTKDg2NEM1MTM5NUE2NUQ1REU3MEVDRDMwQUFEMjdBNjlG NEI5QjIyQkMwHhcNMjYwMTA5MDMyMjQ5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTYwNzQ4OS0wYmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl0CUfqaeNo9HAtIhDrnJ5zAiRihETJDtPprgEWL5gPueszwZ6vef68VdHSBQ K/KDXJGPYjltZZuLBBqu5kUK5sYAHx1usWwm7+m19qIZj93qgpx6oW1urDUKPZZo 70nzR4K+dOPiPhklS8ObXZLHBjpD8Pww8MDthxfQs3qlmW3fcj17izauqWFj3iCh pf1owMi8ivFtPyvi4LNdpWCC36PqyOdAkdUvlUI28Y0Z8G+ugnCE1WarjVlgmir3 QmskBKsiJ4kYbZ/U31XNAg6qqj6D6RP3aii5fMsCrXTT9Sm0pjEZUvuAtrUH74ii wKCiFs1QO9YeQhK7Il1QRAE4GwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJ2GalrM HrIP4g6iVNmqnNwCAeSAMB8GA1UdIwQYMBaAFIZMUTlaZdXecOzTCq0npp9LmyK8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUUxQi83NDk1MjUxNDdE MjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFkNXc3Tk1LclNlbW4wdWJJ cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hreFJPVnBsMWQ1dzdOTUtyU2VtbjB1Yklydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjVFMUIvNzQ5NTI1MTQ3RDIyMTFFRUE3QjA3NDYwQzRGOUFFMDIvQjlDQUQ3QTQ3 RDIzMTFFRUEzNjk2ODE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAG0g4QwDwQCAAIwCQMHACABDfMdwDANBgkqhkiG9w0BAQsF AAOCAQEAQvuuKKxwdDHFhgrs1tvx9e+E/y2nmUnyw1c7bKKFm5o3WpqqC2mrVhLo WcKQLbw1NG+a398EMOC94xHFq9O8XAloHTSD/ezPpanP0kLwaPFbwwtAO5l6mCS2 3TihlR/sSSYeo7qN0IuNGFphNpWQGMdUs9AnoSE7PtdyDzCeu01nSzJzlc2XBEFU i3c2k0uNvXf18mByD9LKeSPcZ3Tj+JocgnpShCXGVwjMzWz0SY1RhKe7s2F8b8dq e1V8L6xgOkryQc3FekqYfZAJmtHgLhba5J+GmAWOsXuzWMNK4Ycy8z2nV/yjovJO if/Qga7meDhdqZeZuyLpKjreQ5czSQ== -----END CERTIFICATE-----Generated at Tue Jan 13 05:33:55 2026 by rpki-client