This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/0D16F5F4933211EEA5AC155DC4F9AE02.roa File: 0D16F5F4933211EEA5AC155DC4F9AE02.roa (raw, json) Hash identifier: zSsG83d8FqsO0FFU6G7h/1mbeWgrrTkoAgSAzhspooQ= Subject key identifier: AA:06:0D:0D:F3:11:1C:9F:F2:E5:AA:84:49:27:E0:A4:8A:33:24:C4 Certificate issuer: /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Certificate serial: 01C3 Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/0D16F5F4933211EEA5AC155DC4F9AE02.roa Signing time: Fri 05 Dec 2025 02:12:19 +0000 ROA not before: Fri 05 Dec 2025 02:12:19 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 55832 IP address blocks: 27.123.216.0/22 maxlen: 22 27.123.216.0/24 maxlen: 24 27.123.217.0/24 maxlen: 24 27.123.218.0/24 maxlen: 24 27.123.219.0/24 maxlen: 24 45.64.12.0/24 maxlen: 24 45.64.13.0/24 maxlen: 24 45.64.14.0/24 maxlen: 24 45.64.15.0/24 maxlen: 24 103.4.208.0/22 maxlen: 22 103.4.208.0/24 maxlen: 24 103.4.209.0/24 maxlen: 24 103.4.210.0/24 maxlen: 24 103.4.211.0/24 maxlen: 24 120.88.176.0/20 maxlen: 20 120.88.176.0/24 maxlen: 24 120.88.177.0/24 maxlen: 24 120.88.178.0/24 maxlen: 24 120.88.179.0/24 maxlen: 24 120.88.180.0/24 maxlen: 24 120.88.181.0/24 maxlen: 24 120.88.182.0/23 maxlen: 24 120.88.184.0/24 maxlen: 24 120.88.185.0/24 maxlen: 24 120.88.186.0/24 maxlen: 24 120.88.187.0/24 maxlen: 24 120.88.188.0/24 maxlen: 24 120.88.189.0/24 maxlen: 24 120.88.190.0/24 maxlen: 24 120.88.191.0/24 maxlen: 24 2407:2a00::/32 maxlen: 32 2407:2a00::/44 maxlen: 44 2407:2a00::/48 maxlen: 48 2407:2a00:1::/48 maxlen: 48 2407:2a00:2::/48 maxlen: 48 2407:2a00:3::/48 maxlen: 48 2407:2a00:4::/48 maxlen: 48 2407:2a00:5::/48 maxlen: 48 2407:2a00:6::/48 maxlen: 48 2407:2a00:7::/48 maxlen: 48 2407:2a00:8::/48 maxlen: 48 2407:2a00:10::/44 maxlen: 44 2407:2a00:20::/44 maxlen: 44 2407:2a00:30::/44 maxlen: 44 2407:2a00:40::/44 maxlen: 44 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Validity Not Before: Dec 5 02:12:19 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69323f83-e4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f8:e5:c6:c6:bc:fa:e6:47:6a:e6:6e:6e:bf: 05:99:5c:76:35:7a:79:ba:e9:4e:41:88:a2:d1:3c: d9:64:e2:fd:0f:5e:a2:64:b2:28:42:2a:05:51:c0: 88:4e:68:9f:19:77:46:b1:91:c3:52:91:36:44:86: f2:69:45:c0:4e:1f:c0:92:5b:81:c6:7e:fb:fd:b0: 4e:85:85:ed:1e:7d:63:94:cd:94:dc:67:cf:32:08: e1:8b:93:6f:ca:a7:03:44:7d:a5:19:1f:f1:47:dd: 41:0e:fc:3c:e9:40:1e:74:33:a1:2f:c1:a0:6d:9f: cb:0a:67:81:21:b8:52:bc:1b:36:e3:29:50:eb:5b: 9b:ea:59:57:c4:3c:04:f2:73:d6:69:32:93:76:b0: 87:6a:05:7d:c9:58:9f:e8:2a:d3:c9:d8:95:e8:c1: 23:98:55:b0:fb:34:9a:38:f9:84:fe:14:b6:28:f2: 46:82:66:14:28:09:59:2e:d8:83:3d:41:17:d3:a4: ab:66:d1:9b:0a:68:83:2f:59:99:0d:00:d8:88:a7: 89:20:32:04:6a:6d:05:3f:e5:cd:85:4b:83:2a:e6: 02:86:01:bd:45:7f:95:c7:bf:57:f4:0c:bc:13:62: f4:96:03:93:36:89:7b:27:c4:e4:d3:15:18:a4:80: a3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:06:0D:0D:F3:11:1C:9F:F2:E5:AA:84:49:27:E0:A4:8A:33:24:C4 X509v3 Authority Key Identifier: keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/0D16F5F4933211EEA5AC155DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.123.216.0/22 45.64.12.0/22 103.4.208.0/22 120.88.176.0/20 IPv6: 2407:2a00::/32 Signature Algorithm: sha256WithRSAEncryption 74:8b:19:59:70:5b:6a:be:0b:78:dd:87:88:48:dd:61:eb:bd: b3:a7:48:ec:3d:cc:cb:73:41:1d:c5:a2:7e:54:d0:99:79:4b: 94:1f:27:23:3e:00:c2:9a:04:1f:f3:5b:32:5d:99:38:b2:8e: 05:e0:ee:c1:4f:ee:2f:27:f8:8f:14:a4:3c:0f:40:f2:e3:04: 0d:64:25:fc:c4:da:ef:71:d0:be:22:b3:ad:e3:5d:18:9c:e5: 05:34:d5:a4:f4:97:38:b4:2c:85:26:b7:6e:4d:4d:c8:0f:f3: 72:d8:29:b0:9e:ac:1a:af:06:56:f0:ea:6f:f8:a6:55:5b:37: 79:43:c1:75:48:b0:41:93:6c:17:e0:b9:82:84:bb:43:47:97: b5:6a:54:59:6a:d4:04:f9:05:22:58:bc:cd:ca:9f:dc:4d:0e: b9:f3:a5:d3:c5:b7:bd:cf:07:18:50:08:e5:af:f4:1b:86:de: 9b:97:c5:41:9f:a5:ec:97:85:45:17:4e:40:fc:be:f9:d0:28: f0:d2:68:d8:5b:4e:f2:e5:c2:b4:b3:99:ba:4d:7f:d1:d7:f7: ac:16:cf:43:c6:21:32:5d:86:64:ff:f2:db:3d:9a:d4:11:78: 7f:a4:89:61:d8:70:6e:18:1b:ba:85:7c:9f:05:11:a7:1c:aa: 2d:e2:94:b6 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCMjQxMTAvBgNVBAUTKDM5MThEODBCQ0I3MDJFQ0FDRjg0Q0I3QUNBODgwRjg3 OEExNEZFNDgwHhcNMjUxMjA1MDIxMjE5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMyM2Y4My1lNGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfjlxsa8+uZHauZubr8FmVx2NXp5uulOQYii0TzZZOL9D16iZLIoQioFUcCI TmifGXdGsZHDUpE2RIbyaUXATh/AkluBxn77/bBOhYXtHn1jlM2U3GfPMgjhi5Nv yqcDRH2lGR/xR91BDvw86UAedDOhL8GgbZ/LCmeBIbhSvBs24ylQ61ub6llXxDwE 8nPWaTKTdrCHagV9yVif6CrTydiV6MEjmFWw+zSaOPmE/hS2KPJGgmYUKAlZLtiD PUEX06SrZtGbCmiDL1mZDQDYiKeJIDIEam0FP+XNhUuDKuYChgG9RX+Vx79X9Ay8 E2L0lgOTNol7J8Tk0xUYpICjlwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFKoGDQ3z ERyf8uWqhEkn4KSKMyTEMB8GA1UdIwQYMBaAFDkY2AvLcC7Kz4TLesqID4eKFP5I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkIyNC9CNDczQzRCRTkz MzAxMUVFODIzMDgwNTlDNEY5QUUwMi9PUmpZQzh0d0xzclBoTXQ2eW9nUGg0b1Vf a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09SallDOHR3THNyUGhNdDZ5b2dQaDRvVV9rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZCMjQvQjQ3M0M0QkU5MzMwMTFFRTgyMzA4MDU5QzRGOUFFMDIvMEQxNkY1RjQ5 MzMyMTFFRUE1QUMxNTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAIbe9gDBAItQAwDBAJnBNADBAR4WLAwDQQCAAIwBwMFACQH KgAwDQYJKoZIhvcNAQELBQADggEBAHSLGVlwW2q+C3jdh4hI3WHrvbOnSOw9zMtz QR3Fon5U0Jl5S5QfJyM+AMKaBB/zWzJdmTiyjgXg7sFP7i8n+I8UpDwPQPLjBA1k JfzE2u9x0L4is63jXRic5QU01aT0lzi0LIUmt25NTcgP83LYKbCerBqvBlbw6m/4 plVbN3lDwXVIsEGTbBfguYKEu0NHl7VqVFlq1AT5BSJYvM3Kn9xNDrnzpdPFt73P BxhQCOWv9BuG3puXxUGfpeyXhUUXTkD8vvnQKPDSaNhbTvLlwrSzmbpNf9HX96wW z0PGITJdhmT/8ts9mtQReH+kiWHYcG4YG7qFfJ8FEaccqi3ilLY= -----END CERTIFICATE-----Generated at Thu Jan 1 07:35:44 2026 by rpki-client