This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/5FF4FD52704C11ED97935E7DC4F9AE02.roa File: 5FF4FD52704C11ED97935E7DC4F9AE02.roa (raw, json) Hash identifier: mkay78ArXCLuTCpk5LBJHpYSqvgsay5EEQLpiKDYBb8= Subject key identifier: C2:79:00:01:83:9B:B0:C6:1B:C1:A5:13:B2:57:16:DD:A1:73:18:55 Certificate issuer: /CN=A912E5CB/serialNumber=E1733B970FDDF767FF195428437E1242A3769277 Certificate serial: 023C Authority key identifier: E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/5FF4FD52704C11ED97935E7DC4F9AE02.roa Signing time: Mon 15 Dec 2025 01:21:18 +0000 ROA not before: Mon 15 Dec 2025 01:21:18 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 7600 IP address blocks: 203.20.226.0/23 maxlen: 23 203.20.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 01:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E5CB, serialNumber=E1733B970FDDF767FF195428437E1242A3769277 Validity Not Before: Dec 15 01:21:18 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=693f628e-72c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cd:73:94:27:fa:59:8c:1e:24:bd:1d:49:dd: 77:f7:31:2f:32:fe:6c:20:5f:35:ca:2f:ee:de:90: f1:32:62:62:ff:f7:1d:ec:de:ac:62:59:5e:7f:2b: 3a:9f:c1:eb:8b:a2:e6:60:d5:f4:5a:01:90:84:16: e8:45:d0:b0:97:bb:4e:92:34:88:ae:6d:fa:33:a0: 5b:37:61:67:ca:00:b0:9e:05:77:8f:cc:3a:e1:8c: c0:e9:3b:40:51:c8:5e:df:1e:be:da:54:f1:9c:51: de:83:b4:9b:ca:b9:cf:9c:9a:7e:fe:ce:18:0f:d4: f9:42:42:a5:3a:9f:0b:da:4e:c4:ad:75:a2:0d:03: 53:67:b7:bb:c3:3b:84:cc:ff:b6:0f:3a:2f:b1:e1: 36:e5:19:89:5e:e2:dd:48:bb:ff:b0:9b:c8:73:51: b8:88:40:33:c8:a8:c2:20:cd:67:0b:7e:1b:68:b5: f2:c5:d7:19:e1:57:a0:ad:83:59:86:ec:99:a6:f5: b9:3d:e9:49:da:54:4b:1a:87:05:0d:ad:e9:24:36: 82:55:79:ad:ef:63:ba:2a:69:71:08:36:00:53:65: 37:7e:54:40:97:46:47:c6:1f:3b:6a:6a:36:92:53: a6:c5:75:97:98:59:72:cd:fc:63:72:25:7e:2f:7a: bd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:79:00:01:83:9B:B0:C6:1B:C1:A5:13:B2:57:16:DD:A1:73:18:55 X509v3 Authority Key Identifier: keyid:E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/5FF4FD52704C11ED97935E7DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.20.226.0/23 203.20.247.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:3c:d2:4a:5a:b6:af:8e:75:0b:e4:40:6a:15:97:8b:cb:59: fc:95:d2:88:5f:52:eb:60:81:90:74:6d:14:b6:2f:1b:44:e6: 4e:29:c7:60:83:40:e2:90:30:bc:ff:29:ee:f5:fe:56:40:73: 0c:0e:2a:83:5d:5a:5e:3c:41:cc:42:ab:dd:d3:92:8d:bb:23: 15:0b:c2:ea:86:df:e0:aa:f0:5c:e1:ed:05:6f:54:1a:61:c7: 8a:76:18:4a:15:3f:e5:f8:a9:7a:0b:39:f4:4f:31:11:dc:70: 29:0a:77:97:34:5c:f5:80:0e:e3:22:ca:dc:8e:e9:be:a0:8f: 0e:1e:78:e2:4b:93:2c:8c:71:bb:3b:4f:ea:a1:cd:84:0c:1c: 87:af:d0:ff:90:95:db:e5:b4:2a:aa:05:c6:10:79:85:fd:e3: 90:c2:72:0a:2c:8c:6d:4f:82:08:a8:dc:10:e1:29:4a:f1:1d: 4b:f4:18:59:a3:74:a9:85:31:72:06:da:79:11:71:4e:ea:12: 33:cd:7e:01:3a:dc:8b:51:22:0a:0d:3f:07:49:31:c9:55:92: c2:ca:0b:ba:9d:31:85:52:4c:34:23:8f:39:5e:bf:e0:2e:6e: 5d:7e:4a:c9:b6:20:18:1a:85:dd:31:94:bb:6d:12:1b:13:55: ad:0b:36:d3 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1Q0IxMTAvBgNVBAUTKEUxNzMzQjk3MEZEREY3NjdGRjE5NTQyODQzN0UxMjQy QTM3NjkyNzcwHhcNMjUxMjE1MDEyMTE4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNmNjI4ZS03MmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM1zlCf6WYweJL0dSd139zEvMv5sIF81yi/u3pDxMmJi//cd7N6sYllefys6 n8Hri6LmYNX0WgGQhBboRdCwl7tOkjSIrm36M6BbN2FnygCwngV3j8w64YzA6TtA Uche3x6+2lTxnFHeg7SbyrnPnJp+/s4YD9T5QkKlOp8L2k7ErXWiDQNTZ7e7wzuE zP+2DzovseE25RmJXuLdSLv/sJvIc1G4iEAzyKjCIM1nC34baLXyxdcZ4VegrYNZ huyZpvW5PelJ2lRLGocFDa3pJDaCVXmt72O6KmlxCDYAU2U3flRAl0ZHxh87amo2 klOmxXWXmFlyzfxjciV+L3q9PQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMJ5AAGD m7DGG8GlE7JXFt2hcxhVMB8GA1UdIwQYMBaAFOFzO5cP3fdn/xlUKEN+EkKjdpJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTVDQi81Mjg4RENFMDcw NDkxMUVEQjZFMUZCNzhDNEY5QUUwMi80WE03bHdfZDkyZl9HVlFvUTM0U1FxTjJr bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYTTdsd19kOTJmX0dWUW9RMzRTUXFOMmtuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkU1Q0IvNTI4OERDRTA3MDQ5MTFFREI2RTFGQjc4QzRGOUFFMDIvNUZGNEZENTI3 MDRDMTFFRDk3OTM1RTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAHLFOIDBADLFPcwDQYJKoZIhvcNAQELBQADggEBAF880kpa tq+OdQvkQGoVl4vLWfyV0ohfUutggZB0bRS2LxtE5k4px2CDQOKQMLz/Ke71/lZA cwwOKoNdWl48QcxCq93Tko27IxULwuqG3+Cq8Fzh7QVvVBphx4p2GEoVP+X4qXoL OfRPMRHccCkKd5c0XPWADuMiytyO6b6gjw4eeOJLkyyMcbs7T+qhzYQMHIev0P+Q ldvltCqqBcYQeYX945DCcgosjG1Pggio3BDhKUrxHUv0GFmjdKmFMXIG2nkRcU7q EjPNfgE63ItRIgoNPwdJMclVksLKC7qdMYVSTDQjjzlev+Aubl1+Ssm2IBgahd0x lLttEhsTVa0LNtM= -----END CERTIFICATE-----Generated at Sun Jan 11 23:07:06 2026 by rpki-client