This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/C07738FE9F4511EB88EBCA76C4F9AE02.roa File: C07738FE9F4511EB88EBCA76C4F9AE02.roa (raw, json) Hash identifier: 4EX6NY3ufYSUTvJdu2riLSr05m0sa3A6m+1xwUYJIdg= Subject key identifier: EB:33:46:51:50:FA:A4:0A:FD:A0:55:E6:B8:47:53:E6:7A:2A:A1:CB Certificate issuer: /CN=A9143DE2/serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA Certificate serial: 09FC Authority key identifier: DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/C07738FE9F4511EB88EBCA76C4F9AE02.roa Signing time: Wed 24 Dec 2025 20:17:01 +0000 ROA not before: Wed 24 Dec 2025 20:17:01 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 134798 IP address blocks: 49.0.4.0/24 maxlen: 24 49.0.5.0/24 maxlen: 24 49.0.6.0/24 maxlen: 24 49.0.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 19:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2556 (0x9fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DE2, serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA Validity Not Before: Dec 24 20:17:01 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=694c4a3d-9fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cd:a8:5d:42:73:7f:21:ea:c9:72:4e:8c:95: be:d5:33:85:69:5b:80:a5:20:5c:88:ce:2b:b7:69: 80:b8:2c:cb:00:df:a6:a3:13:03:fe:64:14:a7:ad: 99:af:93:2d:1e:5e:8a:c0:31:15:aa:25:ca:7c:8f: 10:f4:ea:d4:7b:1b:0c:01:93:72:84:be:d8:a6:76: 71:47:b0:e5:34:aa:21:a9:85:01:7c:82:62:1a:d3: da:0e:58:91:ea:e3:7a:92:b2:be:b0:08:ab:76:bb: 18:9f:28:43:5b:ab:05:04:ae:48:36:e9:6b:1a:7a: e2:91:c2:4f:a1:9a:b4:21:90:31:0f:63:60:b7:0c: 89:06:77:5c:57:e2:9b:1c:3d:0b:40:00:8b:07:d4: 8b:5c:87:95:20:41:d7:47:80:3c:07:97:0a:54:95: ca:66:15:f6:0c:6c:1a:4c:bf:77:08:3e:f4:a1:5c: db:fb:7c:0d:b5:dc:fb:0e:a4:29:65:8c:2a:80:14: 4b:87:4c:9a:65:e3:3b:5e:6c:4c:78:96:a4:24:54: 19:34:c1:75:8d:31:d2:5f:38:68:61:c6:78:43:9f: 21:b7:14:49:7c:60:af:57:97:e4:af:aa:c9:6b:05: 45:82:7d:5a:45:35:7d:2b:3f:58:b0:64:93:30:cb: bd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:33:46:51:50:FA:A4:0A:FD:A0:55:E6:B8:47:53:E6:7A:2A:A1:CB X509v3 Authority Key Identifier: keyid:DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/C07738FE9F4511EB88EBCA76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.0.4.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:60:1f:6b:70:54:4d:4c:68:b4:22:d6:78:f5:9f:f4:9d:db: ef:76:c4:45:60:42:20:28:1f:3e:98:31:53:15:97:e2:b5:b0: 14:20:c9:8e:29:ff:2d:4d:74:70:70:d9:10:68:6f:f7:86:6e: 9a:5a:8e:ab:40:80:67:3a:2f:26:3c:9f:23:d9:43:70:07:04: 9c:04:c3:e8:57:7b:f4:45:b1:8c:5e:8f:78:b7:84:50:02:13: 5f:b9:32:82:4d:b3:16:8c:f4:81:a7:88:43:f2:e0:74:a8:53: d9:52:d2:4d:00:d5:bc:8c:e9:d9:9e:c1:09:24:e9:b5:18:f5: bd:eb:fd:59:a3:38:ad:a8:b4:32:64:14:37:18:06:2c:5f:3f: a8:f9:d3:ad:23:4b:55:5b:28:3d:8c:7a:97:72:01:09:63:77: 40:e0:83:3e:c1:7e:e1:58:75:11:5c:06:fb:e7:f7:6f:c4:d0: bd:ae:0d:32:11:9c:4f:27:8f:eb:fd:58:78:cf:0b:15:55:36: 15:3f:0d:98:6b:34:1f:81:0e:81:b9:98:27:7e:6a:1e:be:58: 3d:b8:ea:07:e0:b9:4f:06:fc:ca:26:c9:32:b7:da:d5:4a:61: 0f:38:15:eb:95:cf:9b:32:e3:46:ef:3e:d9:ef:e7:09:cf:16: a4:32:a8:19 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NDNERTIxMTAvBgNVBAUTKERGNkQwMDJCQkNBQkEyNTBEMkFFNkI0NDU0RTNDQkZE NjdEMkM3RUEwHhcNMjUxMjI0MjAxNzAxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTRjNGEzZC05ZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA182oXUJzfyHqyXJOjJW+1TOFaVuApSBciM4rt2mAuCzLAN+moxMD/mQUp62Z r5MtHl6KwDEVqiXKfI8Q9OrUexsMAZNyhL7YpnZxR7DlNKohqYUBfIJiGtPaDliR 6uN6krK+sAirdrsYnyhDW6sFBK5INulrGnrikcJPoZq0IZAxD2NgtwyJBndcV+Kb HD0LQACLB9SLXIeVIEHXR4A8B5cKVJXKZhX2DGwaTL93CD70oVzb+3wNtdz7DqQp ZYwqgBRLh0yaZeM7XmxMeJakJFQZNMF1jTHSXzhoYcZ4Q58htxRJfGCvV5fkr6rJ awVFgn1aRTV9Kz9YsGSTMMu9nwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOszRlFQ +qQK/aBV5rhHU+Z6KqHLMB8GA1UdIwQYMBaAFN9tACu8q6JQ0q5rRFTjy/1n0sfq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RFMi9EMjE4REQ1MjhF OTcxMUVBOEMyREU1MzdDNEY5QUUwMi8zMjBBSzd5cm9sRFNybXRFVk9QTF9XZlN4 LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMyMEFLN3lyb2xEU3JtdEVWT1BMX1dmU3gtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDNERTIvRDIxOERENTI4RTk3MTFFQThDMkRFNTM3QzRGOUFFMDIvQzA3NzM4RkU5 RjQ1MTFFQjg4RUJDQTc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIxAAQwDQYJKoZIhvcNAQELBQADggEBAHtgH2twVE1MaLQi 1nj1n/Sd2+92xEVgQiAoHz6YMVMVl+K1sBQgyY4p/y1NdHBw2RBob/eGbppajqtA gGc6LyY8nyPZQ3AHBJwEw+hXe/RFsYxej3i3hFACE1+5MoJNsxaM9IGniEPy4HSo U9lS0k0A1byM6dmewQkk6bUY9b3r/VmjOK2otDJkFDcYBixfP6j5060jS1VbKD2M epdyAQljd0Dggz7BfuFYdRFcBvvn92/E0L2uDTIRnE8nj+v9WHjPCxVVNhU/DZhr NB+BDoG5mCd+ah6+WD246gfguU8G/MomyTK32tVKYQ84FeuVz5sy40bvPtnv5wnP FqQyqBk= -----END CERTIFICATE-----Generated at Sat Dec 27 15:41:35 2025 by rpki-client