This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/E1C173F01EFD11EE88E45C83C4F9AE02.roa File: E1C173F01EFD11EE88E45C83C4F9AE02.roa (raw, json) Hash identifier: sT81rK2M9q+5qR5h3geelVobh9M/XdM5YvpNMzqLxAU= Subject key identifier: B6:9A:39:7C:51:45:3C:01:F4:7B:87:F0:E2:04:6A:6D:3C:A6:E1:F1 Certificate issuer: /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Certificate serial: 0212 Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/E1C173F01EFD11EE88E45C83C4F9AE02.roa Signing time: Sun 07 Dec 2025 01:10:16 +0000 ROA not before: Sun 07 Dec 2025 01:10:16 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 9328 IP address blocks: 202.0.108.0/24 maxlen: 24 202.2.0.0/22 maxlen: 22 203.7.130.0/23 maxlen: 23 203.26.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Validity Not Before: Dec 7 01:10:16 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6934d3f8-4716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:79:31:1c:6a:3a:ff:03:59:b8:58:b1:fa:7c: fb:1f:cc:73:0f:7f:dd:e1:7f:79:ab:59:5c:91:8f: ec:b8:79:57:ed:8c:52:16:9e:c2:00:49:ff:46:08: 9a:40:ca:f5:b8:d3:15:58:ce:6f:e9:88:7d:05:93: 5f:87:7d:d0:e6:a4:11:c4:22:fc:fc:aa:8b:44:fe: 90:54:f9:45:45:58:53:ed:42:30:93:b6:9b:3e:66: 25:cf:c4:6f:aa:99:b7:97:e6:f5:33:57:fa:ca:2f: aa:29:72:30:a2:48:4c:a6:8a:9e:aa:d7:ae:a4:3b: 57:5f:d6:80:1f:6c:b5:67:d9:23:f2:b0:9c:93:21: d1:38:46:91:45:0c:24:4a:3a:c2:0b:10:c7:d1:ec: 4b:61:c4:17:de:25:ce:8a:d9:e4:2f:67:13:81:c5: 3a:0f:26:8e:69:bc:fd:35:eb:e4:d4:e7:e8:c2:7c: a0:0e:17:19:8b:66:23:59:ae:ae:8c:dd:16:d0:e7: c0:a5:22:5e:58:46:df:51:c4:be:c5:ed:8b:c3:96: 72:7d:47:57:7b:dc:77:ba:e9:c0:fb:1c:1c:15:f0: 00:5e:a0:09:f1:90:68:2f:5b:8a:3b:ce:b0:97:50: 99:35:2b:63:9d:93:37:60:f3:4f:59:39:f3:71:e5: 27:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9A:39:7C:51:45:3C:01:F4:7B:87:F0:E2:04:6A:6D:3C:A6:E1:F1 X509v3 Authority Key Identifier: keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/E1C173F01EFD11EE88E45C83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.0.108.0/24 202.2.0.0/22 203.7.130.0/23 203.26.100.0/24 Signature Algorithm: sha256WithRSAEncryption 49:b5:e2:d3:0c:62:71:f1:90:8b:4c:2b:86:a3:ef:86:92:cc: b7:af:e8:39:4f:6e:95:90:a9:9f:ad:3e:9f:45:98:ef:4c:5b: 31:eb:24:50:ac:c3:fa:fe:61:cb:3d:ff:3c:4f:2a:9f:31:46: 59:71:cc:6f:ef:7d:26:c2:05:7a:35:ad:dc:ac:b0:2c:2b:e2: b5:8c:af:6d:b9:51:e3:4f:d3:ad:02:ff:e0:9a:50:f8:e2:6f: 9f:b7:54:ec:96:38:97:80:14:3a:84:84:3f:73:83:ab:9f:11: 0c:4a:12:a6:08:67:97:0a:2e:2f:76:79:11:2e:9b:e7:2d:97: e4:13:44:26:42:43:e3:8b:5e:4c:85:73:14:fe:8a:4d:13:dd: 5b:8f:f6:6e:02:d7:cf:8c:b2:2b:58:80:93:42:18:b4:28:bf: 08:81:4b:d3:91:b6:71:29:22:d0:fb:f1:5f:41:bc:78:fc:2e: a8:95:6a:a7:c1:ac:59:b0:d5:01:47:9e:a9:77:58:73:22:fe: 42:63:e8:29:8a:6c:82:16:80:a2:9d:e0:43:3d:19:c4:26:2e: c9:89:ad:f0:28:38:56:67:00:74:1e:f7:83:09:e5:f9:5d:3b: a2:a4:d0:17:6d:0d:13:e7:d0:64:c0:92:29:c7:fb:09:4a:35: b2:d4:0f:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKEVDNTFBOUVBMDZDMUM4NTdGNDhFQkQyRDI3M0E0MUYy MDFFQTY0MzQwHhcNMjUxMjA3MDExMDE2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM0ZDNmOC00NzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HkxHGo6/wNZuFix+nz7H8xzD3/d4X95q1lckY/suHlX7YxSFp7CAEn/Rgia QMr1uNMVWM5v6Yh9BZNfh33Q5qQRxCL8/KqLRP6QVPlFRVhT7UIwk7abPmYlz8Rv qpm3l+b1M1f6yi+qKXIwokhMpoqeqteupDtXX9aAH2y1Z9kj8rCckyHROEaRRQwk SjrCCxDH0exLYcQX3iXOitnkL2cTgcU6DyaOabz9Nevk1OfownygDhcZi2YjWa6u jN0W0OfApSJeWEbfUcS+xe2Lw5ZyfUdXe9x3uunA+xwcFfAAXqAJ8ZBoL1uKO86w l1CZNStjnZM3YPNPWTnzceUn0QIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFLaaOXxR RTwB9HuH8OIEam08puHxMB8GA1UdIwQYMBaAFOxRqeoGwchX9I69LSc6QfIB6mQ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9DNzYxQTBBQUND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlGZjBqcjB0SnpwQjhnSHFa RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGR3A2Z2JCeUZmMGpyMHRKenBCOGdIcVpEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkREMTUvQzc2MUEwQUFDQzUyMTFFREE4MjkxRDEwQzRGOUFFMDIvRTFDMTczRjAx RUZEMTFFRTg4RTQ1QzgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBADKAGwDBALKAgADBAHLB4IDBADLGmQwDQYJKoZIhvcNAQEL BQADggEBAEm14tMMYnHxkItMK4aj74aSzLev6DlPbpWQqZ+tPp9FmO9MWzHrJFCs w/r+Ycs9/zxPKp8xRllxzG/vfSbCBXo1rdyssCwr4rWMr225UeNP060C/+CaUPji b5+3VOyWOJeAFDqEhD9zg6ufEQxKEqYIZ5cKLi92eREum+ctl+QTRCZCQ+OLXkyF cxT+ik0T3VuP9m4C18+MsitYgJNCGLQovwiBS9ORtnEpItD78V9BvHj8LqiVaqfB rFmw1QFHnql3WHMi/kJj6CmKbIIWgKKd4EM9GcQmLsmJrfAoOFZnAHQe94MJ5fld O6Kk0BdtDRPn0GTAkinH+wlKNbLUD54= -----END CERTIFICATE-----Generated at Sat Dec 20 23:59:05 2025 by rpki-client