This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/0E33CCCADB0911F0A26F2FDC81D3641D.roa File: 0E33CCCADB0911F0A26F2FDC81D3641D.roa (raw, json) Hash identifier: rPe4vhXZonbANC80nWrcqICh0JnSf/sZ+SChznXkca8= Subject key identifier: D8:D9:9B:98:02:3C:0C:1B:85:5D:BC:CF:9E:39:9C:7F:36:44:46:4A Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 05EA Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/0E33CCCADB0911F0A26F2FDC81D3641D.roa Signing time: Wed 17 Dec 2025 05:28:22 +0000 ROA not before: Wed 17 Dec 2025 05:28:22 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 211392 IP address blocks: 103.135.208.0/22 maxlen: 22 103.135.208.0/24 maxlen: 24 103.135.209.0/24 maxlen: 24 103.135.210.0/24 maxlen: 24 103.135.211.0/24 maxlen: 24 103.172.110.0/23 maxlen: 23 103.172.110.0/24 maxlen: 24 103.172.111.0/24 maxlen: 24 103.204.13.0/24 maxlen: 24 125.3.192.0/21 maxlen: 24 203.168.128.0/22 maxlen: 22 203.168.128.0/23 maxlen: 23 203.168.128.0/24 maxlen: 24 203.168.129.0/24 maxlen: 24 203.168.130.0/23 maxlen: 23 203.168.130.0/24 maxlen: 24 203.168.131.0/24 maxlen: 24 203.168.192.0/20 maxlen: 23 203.168.192.0/24 maxlen: 24 203.168.193.0/24 maxlen: 24 203.168.194.0/24 maxlen: 24 203.168.195.0/24 maxlen: 24 203.168.196.0/24 maxlen: 24 203.168.197.0/24 maxlen: 24 203.168.198.0/24 maxlen: 24 203.168.199.0/24 maxlen: 24 203.168.200.0/24 maxlen: 24 203.168.201.0/24 maxlen: 24 203.168.202.0/24 maxlen: 24 203.168.203.0/24 maxlen: 24 203.168.204.0/24 maxlen: 24 203.168.205.0/24 maxlen: 24 203.168.206.0/24 maxlen: 24 203.168.207.0/24 maxlen: 24 222.167.32.0/22 maxlen: 24 2001:df7:6e80::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1514 (0x5ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Dec 17 05:28:22 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69423f76-5e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d8:1d:5c:74:ba:fd:23:24:9b:2d:7c:e0:fc: cc:84:f4:ad:e0:b6:27:bc:c4:4b:71:c7:d9:2f:d7: 17:7a:5c:d8:35:cd:c9:67:95:53:f7:d7:03:79:24: 69:ee:57:53:ea:25:b0:a2:47:55:a3:83:8a:5e:37: 36:74:37:14:b7:77:e6:08:ea:a5:ed:06:5b:47:89: d2:d1:5e:23:b8:6f:5b:8a:c8:6c:7c:44:e5:22:9f: 6d:54:13:5c:46:b5:51:73:69:61:65:9a:40:ab:19: 65:5d:84:34:1c:1e:ed:81:bb:d6:b9:c5:1a:8b:2f: 26:8b:2a:3f:45:28:bd:3e:2b:26:af:70:0b:af:ab: b6:0c:62:c5:27:33:d0:c6:b5:46:d5:ca:7d:7f:f2: 6c:cd:7c:e8:b3:fa:f7:71:3e:2f:be:98:8e:e7:76: 25:00:43:f9:2f:ee:74:6d:c7:80:2e:ba:11:ad:a4: af:6e:05:fd:06:b9:71:da:06:7b:33:22:ab:c2:3b: 09:b2:32:41:53:ec:64:a6:93:88:40:0e:4a:b8:0b: f0:a3:63:e3:91:15:5a:b7:ed:3a:84:c8:f2:1b:85: 7e:e8:52:60:b1:9c:67:80:87:a7:44:bd:8d:bf:53: 6d:76:f3:c4:f8:62:bc:2e:45:eb:1f:b6:da:13:6b: 73:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D9:9B:98:02:3C:0C:1B:85:5D:BC:CF:9E:39:9C:7F:36:44:46:4A X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/0E33CCCADB0911F0A26F2FDC81D3641D.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.208.0/22 103.172.110.0/23 103.204.13.0/24 125.3.192.0/21 203.168.128.0/22 203.168.192.0/20 222.167.32.0/22 IPv6: 2001:df7:6e80::/47 Signature Algorithm: sha256WithRSAEncryption 55:af:02:66:18:ab:53:83:95:2f:33:f7:e5:6d:2f:b5:30:0d: 03:1e:5c:d5:93:8a:c3:20:fe:07:bd:01:b2:3e:4d:44:8c:d0: 3b:a0:47:10:52:23:41:8e:ab:97:fe:f3:88:ad:78:91:d6:b7: f2:c3:53:a8:dc:da:d2:5e:13:d1:c0:a1:9f:0c:a7:82:2c:e7: e2:da:c9:8e:fd:25:95:0e:af:49:b6:8a:0d:50:fb:58:5e:0a: e5:89:a5:2a:e6:c2:7b:97:64:fc:e9:d9:ac:0f:19:0a:ff:f3: 74:c0:ac:37:1d:27:a2:39:91:a9:69:91:51:76:82:91:91:27: a8:bd:b2:2f:03:b5:d6:8b:e4:6e:d3:15:79:10:cb:e3:ee:b1: ba:f1:26:af:dd:88:df:84:ce:69:9f:aa:f2:ca:48:41:9e:27: 92:c3:a7:61:28:4f:7d:45:78:91:e9:b0:a7:d3:08:8a:93:03: a3:50:68:1c:73:d5:f6:f2:9b:0d:92:2a:33:02:36:51:4f:a3: 4a:57:64:27:63:a0:ba:59:f3:53:2a:61:10:a2:31:a3:a5:8c: ef:10:27:a6:98:4d:af:2b:b6:20:f8:63:ac:03:7e:77:30:f9: 7d:de:34:5d:9a:02:3f:83:3a:6e:7c:49:f9:30:33:d3:2e:04: 51:5e:87:f9 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgICBeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjUxMjE3MDUyODIyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQyM2Y3Ni01ZTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdgdXHS6/SMkmy184PzMhPSt4LYnvMRLccfZL9cXelzYNc3JZ5VT99cDeSRp 7ldT6iWwokdVo4OKXjc2dDcUt3fmCOql7QZbR4nS0V4juG9bishsfETlIp9tVBNc RrVRc2lhZZpAqxllXYQ0HB7tgbvWucUaiy8miyo/RSi9Pismr3ALr6u2DGLFJzPQ xrVG1cp9f/JszXzos/r3cT4vvpiO53YlAEP5L+50bceALroRraSvbgX9Brlx2gZ7 MyKrwjsJsjJBU+xkppOIQA5KuAvwo2PjkRVat+06hMjyG4V+6FJgsZxngIenRL2N v1NtdvPE+GK8LkXrH7baE2tzgwIDAQABo4ICyjCCAsYwHQYDVR0OBBYEFNjZm5gC PAwbhV28z545nH82REZKMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDVEMjUvNjdGMkIwRDgwQkQyMTFFQ0JBQTQ4MDZBQzRGOUFFMDIvMEUzM0NDQ0FE QjA5MTFGMEEyNkYyRkRDODFEMzY0MUQucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVAYIKwYBBQUHAQcBAf8E RTBDMDAEAgABMCoDBAJnh9ADBAFnrG4DBABnzA0DBAN9A8ADBALLqIADBATLqMAD BALepyAwDwQCAAIwCQMHASABDfdugDANBgkqhkiG9w0BAQsFAAOCAQEAVa8CZhir U4OVLzP35W0vtTANAx5c1ZOKwyD+B70Bsj5NRIzQO6BHEFIjQY6rl/7ziK14kda3 8sNTqNza0l4T0cChnwyngizn4trJjv0llQ6vSbaKDVD7WF4K5YmlKubCe5dk/OnZ rA8ZCv/zdMCsNx0nojmRqWmRUXaCkZEnqL2yLwO11ovkbtMVeRDL4+6xuvEmr92I 34TOaZ+q8spIQZ4nksOnYShPfUV4kemwp9MIipMDo1BoHHPV9vKbDZIqMwI2UU+j SldkJ2OgulnzUyphEKIxo6WM7xAnpphNryu2IPhjrAN+dzD5fd40XZoCP4M6bnxJ +TAz0y4EUV6H+Q== -----END CERTIFICATE-----Generated at Sun Dec 21 02:56:13 2025 by rpki-client