This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/DE6603CAEBD711F092381BAE6B6F56BC.roa File: DE6603CAEBD711F092381BAE6B6F56BC.roa (raw, json) Hash identifier: gxvlMyGwQL7lw0xk2eyh8DpmMAWrA6M1mpFv6N2AMeI= Subject key identifier: 30:77:90:2F:A7:28:12:7D:3B:5A:3A:D8:B5:FA:48:9E:CF:2F:7D:43 Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 05F8 Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/DE6603CAEBD711F092381BAE6B6F56BC.roa Signing time: Wed 07 Jan 2026 14:48:03 +0000 ROA not before: Wed 07 Jan 2026 14:48:03 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 401160 IP address blocks: 103.135.208.0/22 maxlen: 24 103.172.110.0/23 maxlen: 24 125.3.192.0/21 maxlen: 24 203.168.128.0/22 maxlen: 24 203.168.192.0/20 maxlen: 24 222.167.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Jan 2026 22:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1528 (0x5f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Jan 7 14:48:03 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=695e7223-9024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7f:d7:16:0d:93:b4:ef:64:f8:4d:7d:26:4c: 5c:ff:d9:d7:16:db:9b:04:03:9b:41:ef:c5:7a:f6: d4:a4:c6:59:3e:8c:72:07:98:c0:96:81:80:f9:9b: 5a:b6:e3:9f:1e:b3:f4:56:0f:35:bf:9e:ee:9f:6f: ce:7d:2d:32:84:03:a2:cd:70:2d:7e:ff:be:28:87: f8:52:34:03:bd:45:56:2d:a0:01:ef:3a:2a:71:06: 20:15:33:97:16:bd:88:2c:64:44:bc:6d:01:a3:b5: 16:33:39:18:a8:2b:90:aa:81:19:be:01:c8:96:6d: 5a:59:10:33:ad:ef:9a:5c:ca:0d:7c:ec:ca:ae:c6: 26:c5:e8:c3:36:ac:43:57:69:b0:0c:1a:a3:db:23: bf:ec:6e:53:52:b2:c4:90:a2:5a:43:19:4c:79:1c: 51:8d:3b:be:ad:d7:70:91:1f:04:98:99:f4:43:b7: 65:20:29:b4:18:14:2c:89:a7:bb:ff:27:f7:fa:3e: 50:f6:00:8c:1f:70:07:11:7b:1a:99:47:b7:98:0e: 8f:ee:5a:e2:34:12:c2:39:46:da:ce:2a:5b:f3:25: aa:ec:8d:f1:7a:0a:96:3d:42:87:fa:17:61:6a:19: 53:e3:41:9f:be:e6:1e:1b:46:fe:0e:00:b2:7e:6e: 6b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:77:90:2F:A7:28:12:7D:3B:5A:3A:D8:B5:FA:48:9E:CF:2F:7D:43 X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/DE6603CAEBD711F092381BAE6B6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.208.0/22 103.172.110.0/23 125.3.192.0/21 203.168.128.0/22 203.168.192.0/20 222.167.32.0/22 Signature Algorithm: sha256WithRSAEncryption 87:3c:29:6e:a4:5f:b3:ab:f5:6e:73:ba:4e:31:ed:49:17:e3: 41:30:cd:ae:d0:51:17:32:dd:6e:b0:00:c9:3f:7f:30:38:e8: ca:b0:7f:7c:32:b5:7c:33:e0:d7:d7:37:ee:f9:b0:8e:a2:ab: ed:a8:d8:41:11:1d:e6:20:c5:3c:85:b3:e5:2b:d9:3d:fc:ba: 08:77:f0:e3:d4:86:7d:c3:4e:b6:85:90:8b:e3:b2:7a:98:6c: f4:25:ce:2a:f9:08:8c:69:c9:7e:86:86:4e:71:bd:f6:8d:00: 9f:f0:dc:c0:78:93:95:49:b7:de:56:a7:6e:07:8a:12:45:3a: e3:88:2a:14:cb:ad:94:44:63:08:1f:f1:6b:ae:d0:3c:02:1f: 99:1b:37:99:bc:5f:d2:2b:5a:ee:82:09:aa:b4:22:76:ed:e8: 20:ce:e2:a6:ec:d0:9e:bf:82:bf:09:f7:99:75:66:2a:4e:21: 2d:14:5f:25:8a:ce:ee:ff:b1:11:b4:c6:57:59:47:4b:b3:96: 17:54:1c:0c:7d:f6:69:51:07:47:fd:8a:0a:75:d5:18:d8:31: 33:86:ab:1c:bf:87:6d:21:df:33:6a:e8:b4:76:18:84:ca:c8: 31:a0:80:c2:24:a4:c1:a1:b1:bc:14:30:3f:4e:b6:fd:e0:5d: 41:11:d5:0e -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjYwMTA3MTQ0ODAzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVlNzIyMy05MDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03/XFg2TtO9k+E19Jkxc/9nXFtubBAObQe/FevbUpMZZPoxyB5jAloGA+Zta tuOfHrP0Vg81v57un2/OfS0yhAOizXAtfv++KIf4UjQDvUVWLaAB7zoqcQYgFTOX Fr2ILGREvG0Bo7UWMzkYqCuQqoEZvgHIlm1aWRAzre+aXMoNfOzKrsYmxejDNqxD V2mwDBqj2yO/7G5TUrLEkKJaQxlMeRxRjTu+rddwkR8EmJn0Q7dlICm0GBQsiae7 /yf3+j5Q9gCMH3AHEXsamUe3mA6P7lriNBLCOUbazipb8yWq7I3xegqWPUKH+hdh ahlT40GfvuYeG0b+DgCyfm5rBwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFDB3kC+n KBJ9O1o62LX6SJ7PL31DMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDVEMjUvNjdGMkIwRDgwQkQyMTFFQ0JBQTQ4MDZBQzRGOUFFMDIvREU2NjAzQ0FF QkQ3MTFGMDkyMzgxQkFFNkI2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAJnh9ADBAFnrG4DBAN9A8ADBALLqIADBATLqMADBALepyAw DQYJKoZIhvcNAQELBQADggEBAIc8KW6kX7Or9W5zuk4x7UkX40Ewza7QURcy3W6w AMk/fzA46Mqwf3wytXwz4NfXN+75sI6iq+2o2EERHeYgxTyFs+Ur2T38ugh38OPU hn3DTraFkIvjsnqYbPQlzir5CIxpyX6Ghk5xvfaNAJ/w3MB4k5VJt95Wp24HihJF OuOIKhTLrZREYwgf8Wuu0DwCH5kbN5m8X9IrWu6CCaq0Inbt6CDO4qbs0J6/gr8J 95l1ZipOIS0UXyWKzu7/sRG0xldZR0uzlhdUHAx99mlRB0f9igp11RjYMTOGqxy/ h20h3zNq6LR2GITKyDGggMIkpMGhsbwUMD9Otv3gXUER1Q4= -----END CERTIFICATE-----Generated at Sat Jan 10 08:53:22 2026 by rpki-client