This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/214B85D87C0311EBB2F8C86CC4F9AE02.roa File: 214B85D87C0311EBB2F8C86CC4F9AE02.roa (raw, json) Hash identifier: zH3/5G987bmsSKPSXMUwqlBOkaI+jRaNXqyKyOVM9h0= Subject key identifier: 09:AA:0C:F1:12:DB:D8:34:E2:91:9A:44:70:3B:06:A0:CB:19:71:33 Certificate issuer: /CN=A912BAA5/serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Certificate serial: 3506 Authority key identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/214B85D87C0311EBB2F8C86CC4F9AE02.roa Signing time: Wed 31 Dec 2025 15:10:55 +0000 ROA not before: Wed 31 Dec 2025 15:10:55 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 24556 IP address blocks: 103.199.108.0/22 maxlen: 24 137.59.48.0/22 maxlen: 24 202.191.120.0/21 maxlen: 24 2404:3f80::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 15:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13574 (0x3506) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BAA5, serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Validity Not Before: Dec 31 15:10:55 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69553cfe-18e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:df:da:e7:89:6a:af:d4:b9:c1:b9:48:0d: 5b:a6:7d:0c:e2:ae:95:38:2a:d7:07:85:b8:a9:c3: 57:41:61:60:44:9c:1c:f7:09:a8:db:e3:4d:3d:38: 45:92:aa:25:44:e5:c1:53:21:0d:d7:64:cb:f5:43: a0:d5:bc:d4:bf:81:4c:ed:99:64:8a:71:05:51:66: 30:b8:fd:29:49:03:d7:a1:70:7e:f4:e8:04:0a:06: 37:01:63:b5:46:d7:72:ff:68:35:29:f4:c6:70:e9: 74:e1:d1:2a:4c:5b:f3:99:82:26:20:28:82:da:66: 85:80:db:3d:b3:ed:d0:72:99:7d:ee:8d:af:e4:58: 16:38:f6:e2:a7:e0:52:70:34:d9:0e:c8:35:7a:c8: fd:92:e0:c2:52:95:d1:cf:b5:82:c4:9b:e0:ba:cd: a9:64:66:5d:b9:ff:e5:80:4a:9d:a3:ce:f8:e5:56: 35:ae:97:15:7a:2f:9c:c0:28:13:72:98:7b:a0:9a: 18:34:2e:be:fa:17:f1:bd:60:06:fc:73:89:b4:7c: 7e:c9:ef:f8:ff:8a:7c:ae:23:79:30:f2:46:c8:ec: fb:74:9c:99:92:60:57:08:f1:51:2d:9c:be:6d:7a: 8b:ee:07:92:80:42:5e:20:ac:c6:a3:e3:ad:d9:fe: 3f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AA:0C:F1:12:DB:D8:34:E2:91:9A:44:70:3B:06:A0:CB:19:71:33 X509v3 Authority Key Identifier: keyid:A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/214B85D87C0311EBB2F8C86CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.199.108.0/22 137.59.48.0/22 202.191.120.0/21 IPv6: 2404:3f80::/32 Signature Algorithm: sha256WithRSAEncryption 0e:ae:a0:fc:a1:a7:53:4f:00:6b:f4:b8:bb:2e:94:fa:1c:7a: 15:b8:87:ef:b6:f3:ba:fa:27:f0:7a:31:4a:80:a0:d9:89:f7: b8:6a:92:9f:e0:ac:8f:f6:15:2f:c9:d2:3d:dc:20:be:08:09: fe:98:89:bd:6d:99:2b:1a:ef:07:2b:73:16:99:38:1f:91:72: ae:8f:e3:26:f6:44:79:87:f3:85:bc:16:b5:b1:ce:59:83:24: 4c:74:81:f3:54:56:46:9b:65:e8:f9:3a:7d:29:d6:e6:91:25: e9:d9:09:6b:d8:12:32:10:e2:32:53:2e:3b:d0:2d:82:99:7c: 08:81:ca:69:f6:1a:8f:9f:52:ab:8f:9f:57:ab:c3:31:c1:53: 73:49:18:e4:0d:18:d3:c4:36:f9:e7:4e:29:4d:04:52:f3:b5: 5e:b2:91:61:e9:26:d7:66:d4:2b:9d:23:29:1b:dd:df:82:07: 94:d4:b3:4d:7c:8d:32:04:54:89:ef:26:23:a0:50:d5:ef:3e: 58:3a:ab:dc:80:8f:d5:9f:65:82:a6:42:50:c3:2e:bd:2a:fb: 7c:82:6d:9b:5c:c4:75:62:d3:7e:da:c0:6f:55:e6:af:14:c7: d7:18:70:10:68:16:ad:fe:5a:e3:e8:13:53:78:5d:9d:b0:55: 4b:26:01:2d -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICNQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MkJBQTUxMTAvBgNVBAUTKEE1MzY3QkUxNDI0MTU1OUMxRUI4N0QwRDVFQTNFRUM1 OTNFRENGRUMwHhcNMjUxMjMxMTUxMDU1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU1M2NmZS0xOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIjf2ueJaq/UucG5SA1bpn0M4q6VOCrXB4W4qcNXQWFgRJwc9wmo2+NNPThF kqolROXBUyEN12TL9UOg1bzUv4FM7ZlkinEFUWYwuP0pSQPXoXB+9OgECgY3AWO1 Rtdy/2g1KfTGcOl04dEqTFvzmYImICiC2maFgNs9s+3Qcpl97o2v5FgWOPbip+BS cDTZDsg1esj9kuDCUpXRz7WCxJvgus2pZGZduf/lgEqdo8745VY1rpcVei+cwCgT cph7oJoYNC6++hfxvWAG/HOJtHx+ye/4/4p8riN5MPJGyOz7dJyZkmBXCPFRLZy+ bXqL7geSgEJeIKzGo+Ot2f4/6wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFAmqDPES 29g04pGaRHA7BqDLGXEzMB8GA1UdIwQYMBaAFKU2e+FCQVWcHrh9DV6j7sWT7c/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBNS9FNjdGNjM2NDFE OEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZad2V1SDBOWHFQdXhaUHR6 LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUWjc0VUpCVlp3ZXVIME5YcVB1eFpQdHotdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkJBQTUvRTY3RjYzNjQxRDhGMTFFMkI1NEU0M0VGMDhCMDJDRDIvMjE0Qjg1RDg3 QzAzMTFFQkIyRjhDODZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnx2wDBAKJOzADBAPKv3gwDQQCAAIwBwMFACQEP4AwDQYJ KoZIhvcNAQELBQADggEBAA6uoPyhp1NPAGv0uLsulPocehW4h++287r6J/B6MUqA oNmJ97hqkp/grI/2FS/J0j3cIL4ICf6Yib1tmSsa7wcrcxaZOB+Rcq6P4yb2RHmH 84W8FrWxzlmDJEx0gfNUVkabZej5On0p1uaRJenZCWvYEjIQ4jJTLjvQLYKZfAiB ymn2Go+fUquPn1erwzHBU3NJGOQNGNPENvnnTilNBFLztV6ykWHpJtdm1CudIykb 3d+CB5TUs018jTIEVInvJiOgUNXvPlg6q9yAj9WfZYKmQlDDLr0q+3yCbZtcxHVi 037awG9V5q8Ux9cYcBBoFq3+WuPoE1N4XZ2wVUsmAS0= -----END CERTIFICATE-----Generated at Fri Jan 2 09:53:43 2026 by rpki-client