This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/65B31BB6DA5211F0861FF2DE92D3641D.roa File: 65B31BB6DA5211F0861FF2DE92D3641D.roa (raw, json) Hash identifier: yJpC0M10CBhXIzsUkj8CGYDPhI1WNZAMAJ0V5iRWHlg= Subject key identifier: F1:00:D5:72:7D:AD:8B:5A:F8:26:CB:C4:3A:3A:34:14:7A:BA:D4:F7 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 05C3 Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/65B31BB6DA5211F0861FF2DE92D3641D.roa Signing time: Tue 16 Dec 2025 07:39:48 +0000 ROA not before: Tue 16 Dec 2025 07:39:48 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 9009 IP address blocks: 43.226.228.0/24 maxlen: 24 43.226.230.0/24 maxlen: 24 103.46.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1475 (0x5c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Dec 16 07:39:48 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=69410cc4-cdbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:80:16:8a:b0:9c:25:7e:ad:5d:7a:0e:6a:b5: 04:5e:df:48:18:59:1a:2b:8b:8d:eb:d6:f7:24:da: e6:dd:f9:14:64:07:13:00:44:9d:66:5d:c9:8c:45: 48:3a:53:a9:bd:a0:2d:43:0e:6f:f2:97:bc:52:ea: 61:22:a2:e2:3b:d2:cb:66:18:e5:1e:00:cc:c0:19: 00:e2:f8:2d:0f:91:13:4a:71:de:ce:e9:68:bf:e9: 64:27:1e:f9:96:01:88:74:05:ff:d0:1d:0d:78:19: 5c:89:8a:28:72:cd:c5:49:9e:9f:ca:d8:a0:d8:b6: 1d:34:74:dd:20:88:ee:1a:35:ab:03:5f:48:69:d2: d8:91:5b:b4:dd:37:c6:71:9d:2b:a8:dd:d5:d5:45: 1d:5a:00:0d:a5:64:12:76:26:a1:37:5b:ac:2d:aa: 4f:e3:68:a3:42:e6:9a:26:a2:e6:8b:7b:8b:bd:41: d8:c8:a4:b1:19:13:9b:a0:c2:d2:3d:3a:ba:b9:36: 75:5c:73:b3:a5:7c:89:bf:fe:4f:b6:6e:a9:1b:ea: d0:c9:10:3d:a8:4e:2d:35:2c:d7:00:a1:69:3d:c4: 4e:3e:73:2f:3f:d0:3b:a9:bc:04:9d:7d:7d:1b:30: d2:4b:58:8a:d0:4e:06:a8:e5:5b:3e:1c:16:b7:a4: fc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:00:D5:72:7D:AD:8B:5A:F8:26:CB:C4:3A:3A:34:14:7A:BA:D4:F7 X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/65B31BB6DA5211F0861FF2DE92D3641D.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.226.228.0/24 43.226.230.0/24 103.46.143.0/24 Signature Algorithm: sha256WithRSAEncryption 22:43:93:8c:03:f7:f8:f1:2a:3c:c0:cd:bc:43:d6:33:54:4a: 99:99:23:6f:32:cd:96:72:18:90:1b:d3:bf:eb:df:01:e3:5a: 94:9d:3a:84:cc:f2:54:64:2e:eb:d8:46:6c:da:de:be:57:02: 6b:6d:c4:90:d9:91:7c:a3:25:83:a3:9b:84:ba:41:8a:19:fb: 0c:01:d7:ee:96:d5:d8:06:f5:cf:25:c2:64:db:91:dc:cc:a1: b7:ba:b0:ec:80:c7:95:29:98:8b:95:15:df:4e:02:fa:67:24: a4:e1:3d:c1:5e:04:b5:94:2c:2d:fe:60:32:94:db:0e:34:5a: ea:9a:55:a1:ec:36:8f:45:2d:e1:1e:62:9e:64:74:07:8e:e7: f7:8f:9e:0e:08:26:9f:6d:31:62:ec:3e:57:cd:7a:dd:05:ec: fb:43:f3:05:4e:8a:7f:00:62:e2:93:09:db:1d:27:b7:66:35: fe:82:b6:9b:fe:9a:8d:9d:d8:f9:a8:43:5e:1c:95:c2:36:7e: 9f:d0:0b:1e:4f:03:10:eb:6c:75:fd:69:e5:6e:7e:e8:d6:7c: 0a:0e:8b:88:bf:e6:b8:82:f6:66:2c:36:de:a4:81:ce:ea:42: 0c:48:75:b2:4c:42:01:c5:5d:a6:07:1c:d5:d1:26:e0:62:77: 5f:12:69:5c -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjUxMjE2MDczOTQ4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQxMGNjNC1jZGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoAWirCcJX6tXXoOarUEXt9IGFkaK4uN69b3JNrm3fkUZAcTAESdZl3JjEVI OlOpvaAtQw5v8pe8UuphIqLiO9LLZhjlHgDMwBkA4vgtD5ETSnHezulov+lkJx75 lgGIdAX/0B0NeBlciYoocs3FSZ6fytig2LYdNHTdIIjuGjWrA19IadLYkVu03TfG cZ0rqN3V1UUdWgANpWQSdiahN1usLapP42ijQuaaJqLmi3uLvUHYyKSxGROboMLS PTq6uTZ1XHOzpXyJv/5Ptm6pG+rQyRA9qE4tNSzXAKFpPcROPnMvP9A7qbwEnX19 GzDSS1iK0E4GqOVbPhwWt6T8KQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFPEA1XJ9 rYta+CbLxDo6NBR6utT3MB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhCRkEvMDRBMjRDMzQxMTQzMTFFQzk3MzY5RjczQzRGOUFFMDIvNjVCMzFCQjZE QTUyMTFGMDg2MUZGMkRFOTJEMzY0MUQucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAAr4uQDBAAr4uYDBABnLo8wDQYJKoZIhvcNAQELBQADggEB ACJDk4wD9/jxKjzAzbxD1jNUSpmZI28yzZZyGJAb07/r3wHjWpSdOoTM8lRkLuvY Rmza3r5XAmttxJDZkXyjJYOjm4S6QYoZ+wwB1+6W1dgG9c8lwmTbkdzMobe6sOyA x5UpmIuVFd9OAvpnJKThPcFeBLWULC3+YDKU2w40WuqaVaHsNo9FLeEeYp5kdAeO 5/ePng4IJp9tMWLsPlfNet0F7PtD8wVOin8AYuKTCdsdJ7dmNf6Ctpv+mo2d2Pmo Q14clcI2fp/QCx5PAxDrbHX9aeVufujWfAoOi4i/5riC9mYsNt6kgc7qQgxIdbJM QgHFXaYHHNXRJuBid18SaVw= -----END CERTIFICATE-----Generated at Sat Dec 20 11:09:55 2025 by rpki-client