This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/6DCD9050DCB011F09F01EF94466F56BC.roa File: 6DCD9050DCB011F09F01EF94466F56BC.roa (raw, json) Hash identifier: 7DK+tVxrbc+F4WWee1kH7dGPoKIU0F+nqV3+jMxDG5g= Subject key identifier: C7:42:13:4E:39:BC:5E:D1:73:C6:98:64:11:5B:6D:83:D4:C0:C8:BD Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Certificate serial: 32C2 Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/6DCD9050DCB011F09F01EF94466F56BC.roa Signing time: Fri 19 Dec 2025 07:57:56 +0000 ROA not before: Fri 19 Dec 2025 07:57:56 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149528 IP address blocks: 121.242.31.0/24 maxlen: 24 121.244.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12994 (0x32c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Validity Not Before: Dec 19 07:57:56 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69450584-dcf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:0d:e1:75:ad:91:77:a7:ee:46:10:00:db: ff:00:3f:a3:c4:1a:65:fe:5b:4c:1c:6d:f9:3d:55: 40:fc:cc:23:99:f3:d6:17:d0:51:c5:e3:07:41:69: 1a:72:4e:2c:c3:93:5d:20:af:87:3d:88:8b:68:ff: 06:f5:de:6b:f3:83:9e:29:7a:8d:eb:fb:62:2f:f9: 2f:0a:3f:17:81:6e:e1:ab:fc:77:02:fc:03:22:4d: a6:5a:72:52:a9:97:e3:06:76:c6:27:90:74:0e:59: 12:e7:65:c3:62:4f:42:4e:a3:a8:97:2b:17:32:68: 64:ff:09:85:c2:e0:7a:e1:ee:c3:b2:d1:d7:51:b0: fd:bc:5a:d3:88:f5:2c:f9:74:22:87:0d:43:89:e0: d4:d6:68:c8:6e:dc:6d:60:cd:c4:09:f4:28:73:c1: 38:f7:69:37:44:3b:2d:97:8b:99:38:79:b5:2c:7d: 32:43:7c:0c:31:d5:6b:6f:7e:74:77:8c:be:32:e9: df:e7:f3:c9:cb:20:41:3d:13:c6:c2:56:06:f7:34: b9:50:9a:24:78:bd:d8:9c:77:e2:ce:59:7a:c2:b7: c2:d3:6b:29:1a:b4:e3:db:4b:42:a4:68:bf:e2:78: 0d:7f:0d:11:7e:0a:a0:3b:8a:62:a1:fa:30:a3:b5: ce:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:42:13:4E:39:BC:5E:D1:73:C6:98:64:11:5B:6D:83:D4:C0:C8:BD X509v3 Authority Key Identifier: keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/6DCD9050DCB011F09F01EF94466F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.242.31.0/24 121.244.174.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:6f:b2:2b:00:07:d7:43:3b:3c:e0:8b:6c:37:44:90:f7:94: 1e:a1:b2:c7:81:10:d3:36:9e:ba:05:0d:c2:29:a2:00:5b:41: e3:da:3b:b6:9f:df:ca:a9:ac:24:16:03:66:a0:ee:4f:07:cc: c5:b0:7f:a2:b5:d0:cd:dc:d3:14:db:e7:05:6c:bc:cf:16:79: 50:9f:82:36:ab:6c:76:98:ee:06:2b:a1:f7:ab:bd:1c:4c:62: 82:a5:59:0f:f9:2d:99:2f:ab:ee:db:b5:09:30:d3:65:bc:7e: b1:bb:1b:91:3a:ff:bd:55:40:c4:8b:47:93:0e:20:a6:10:c2: d8:01:2c:88:49:80:6e:4b:40:d2:b7:1f:94:d5:dc:0c:d0:8c: f9:4b:f3:55:48:4a:c5:7d:9b:7e:ec:23:28:16:91:0d:99:d9: 78:01:03:8b:e2:78:c6:9e:04:04:07:f2:45:32:53:00:d8:63: 9b:e6:cd:9f:c3:ba:6d:97:ce:dd:10:4f:3e:3b:cf:29:ea:a0: 14:0e:db:d5:63:05:42:3e:4e:c0:0b:09:d8:b4:55:25:97:e3: 4f:70:79:d0:27:e3:9b:0a:50:bd:23:68:51:fb:bd:12:c4:fe: 55:53:80:ce:70:98:e8:84:95:4c:40:23:03:b3:3b:76:53:de: c0:15:a9:50 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICMsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3 OUJFQTZBODUwHhcNMjUxMjE5MDc1NzU2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ1MDU4NC1kY2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCwN4XWtkXen7kYQANv/AD+jxBpl/ltMHG35PVVA/MwjmfPWF9BRxeMHQWka ck4sw5NdIK+HPYiLaP8G9d5r84OeKXqN6/tiL/kvCj8XgW7hq/x3AvwDIk2mWnJS qZfjBnbGJ5B0DlkS52XDYk9CTqOolysXMmhk/wmFwuB64e7DstHXUbD9vFrTiPUs +XQihw1DieDU1mjIbtxtYM3ECfQoc8E492k3RDstl4uZOHm1LH0yQ3wMMdVrb350 d4y+Munf5/PJyyBBPRPGwlYG9zS5UJokeL3YnHfizll6wrfC02spGrTj20tCpGi/ 4ngNfw0RfgqgO4piofowo7XOwwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMdCE045 vF7Rc8aYZBFbbYPUwMi9MB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NENFNzUvRDIyRUYzRDZGRjRCMTFFMjgxQkUwNjYyNTkxMUVBMzIvNkRDRDkwNTBE Q0IwMTFGMDlGMDFFRjk0NDY2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAB58h8DBAB59K4wDQYJKoZIhvcNAQELBQADggEBAD1vsisA B9dDOzzgi2w3RJD3lB6hsseBENM2nroFDcIpogBbQePaO7af38qprCQWA2ag7k8H zMWwf6K10M3c0xTb5wVsvM8WeVCfgjarbHaY7gYrofervRxMYoKlWQ/5LZkvq+7b tQkw02W8frG7G5E6/71VQMSLR5MOIKYQwtgBLIhJgG5LQNK3H5TV3AzQjPlL81VI SsV9m37sIygWkQ2Z2XgBA4vieMaeBAQH8kUyUwDYY5vmzZ/Dum2Xzt0QTz47zynq oBQO29VjBUI+TsALCdi0VSWX409wedAn45sKUL0jaFH7vRLE/lVTgM5wmOiElUxA IwOzO3ZT3sAVqVA= -----END CERTIFICATE-----Generated at Sat Dec 20 10:30:52 2025 by rpki-client