This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/D36F0B6ECF4411ECB6B61825C4F9AE02.roa File: D36F0B6ECF4411ECB6B61825C4F9AE02.roa (raw, json) Hash identifier: DmIrGfhktKfgLCQnjaBl110FFfgBFAV9ezdr8MQEUXY= Subject key identifier: 3F:16:2E:04:A8:21:DC:DE:55:70:49:67:E7:90:29:1F:1A:8D:14:F6 Certificate issuer: /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Certificate serial: 04D1 Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/D36F0B6ECF4411ECB6B61825C4F9AE02.roa Signing time: Sat 20 Dec 2025 17:14:46 +0000 ROA not before: Sat 20 Dec 2025 17:14:46 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 48266 IP address blocks: 45.129.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1233 (0x4d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Validity Not Before: Dec 20 17:14:46 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6946d986-3cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:7c:50:31:e4:2e:15:4d:1b:af:b6:a8:c0: ea:f5:fa:3c:e4:a1:3d:5b:7e:db:65:11:88:d8:f4: ce:ef:58:10:4e:b4:6e:6c:fe:5a:f9:ac:24:6c:64: 4f:e3:4a:fa:50:03:db:55:1a:c0:37:d7:10:b6:5c: 93:5b:4f:e8:f3:79:7b:74:22:d7:f3:a5:ab:5e:9e: cd:52:36:f0:7f:f3:d5:5b:25:d4:c1:11:6d:da:10: cb:26:f0:24:98:d8:3b:72:b1:46:14:d2:c1:61:16: 58:73:4a:96:45:a0:a3:5f:8d:a9:54:45:d2:85:34: 4a:1e:9e:ea:96:e2:49:01:62:1f:69:f8:17:2d:94: d6:70:6b:5c:ef:9f:77:e5:27:b3:30:98:c7:2a:bd: 48:e9:ed:49:f4:36:c6:72:ad:aa:43:bd:10:67:38: 83:f7:89:a0:ed:06:8c:fc:00:9d:04:af:13:df:0a: 71:5a:7a:fa:8a:19:cc:c0:d2:f1:45:5f:8e:96:a2: 3d:ad:8e:50:d8:33:79:f2:e1:d4:4b:4a:99:8b:8b: 00:7d:f7:82:0c:69:fa:2a:f0:1b:be:30:f5:70:e1: 2f:81:9e:54:b2:ba:da:da:73:f9:79:82:94:e1:ad: e5:a4:71:84:bf:4a:93:1d:86:e9:7e:40:bb:f3:d8: 0b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:16:2E:04:A8:21:DC:DE:55:70:49:67:E7:90:29:1F:1A:8D:14:F6 X509v3 Authority Key Identifier: keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/D36F0B6ECF4411ECB6B61825C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.129.228.0/24 Signature Algorithm: sha256WithRSAEncryption b8:7f:79:df:e2:ae:70:11:10:0e:85:73:d7:68:2a:b2:da:1f: 69:9a:8c:ca:3c:0e:2c:91:4b:31:8f:ff:3f:c9:40:06:e7:a4: 96:66:16:dd:d0:20:5f:97:ad:ae:e8:5a:34:eb:e7:bb:e5:ed: 59:9d:5d:7e:74:6a:59:2a:92:f1:38:81:d1:02:1a:ae:97:71: 4b:12:3c:d0:1e:a9:4e:30:47:14:b0:4e:a9:a2:24:c5:6e:16: 53:7d:f0:48:12:bb:23:f1:fa:63:0a:98:39:49:d8:78:71:27: f1:e2:f5:73:ef:d9:ff:86:a1:eb:c4:a9:67:36:cf:2a:ba:4f: f8:04:d5:2a:48:a4:01:85:3d:bc:1a:0b:29:fa:d2:1c:2f:9a: 60:2d:12:72:ee:71:f0:21:b8:91:14:c9:83:d2:bb:df:c6:6d: 47:75:52:e5:dd:2f:46:c3:60:31:67:bc:a3:97:80:3a:7e:6d: 37:66:6d:d7:c8:d7:93:0e:ec:ea:27:9c:b0:7c:af:59:5e:38: fc:4c:45:a4:c1:52:fe:f9:52:86:09:4e:08:cf:a5:a2:dc:36: 74:92:b6:6c:e3:a9:2a:bb:80:71:97:a1:c0:e2:b3:be:71:82: ed:a5:70:25:ba:24:a5:b6:f3:28:37:3c:80:e7:52:71:81:89: 12:a7:e3:9c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NTdEQUUxMTAvBgNVBAUTKDc2MEU2QTdGMDhCNzJGRjgwRUI1NkY2NzUwMzIzQjE2 NEE3MERBMUQwHhcNMjUxMjIwMTcxNDQ2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ2ZDk4Ni0zY2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTZ8UDHkLhVNG6+2qMDq9fo85KE9W37bZRGI2PTO71gQTrRubP5a+awkbGRP 40r6UAPbVRrAN9cQtlyTW0/o83l7dCLX86WrXp7NUjbwf/PVWyXUwRFt2hDLJvAk mNg7crFGFNLBYRZYc0qWRaCjX42pVEXShTRKHp7qluJJAWIfafgXLZTWcGtc7593 5SezMJjHKr1I6e1J9DbGcq2qQ70QZziD94mg7QaM/ACdBK8T3wpxWnr6ihnMwNLx RV+OlqI9rY5Q2DN58uHUS0qZi4sAffeCDGn6KvAbvjD1cOEvgZ5Usrra2nP5eYKU 4a3lpHGEv0qTHYbpfkC789gLSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFD8WLgSo IdzeVXBJZ+eQKR8ajRT2MB8GA1UdIwQYMBaAFHYOan8Ity/4DrVvZ1AyOxZKcNod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS81QjRDNEUzNjU5 NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xfZ090VzluVURJN0ZrcHcy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RnNXFmd2kzTF9nT3RXOW5VREk3RmtwdzJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNUI0QzRFMzY1OTY5MTFFQzk0QTNFNzcwQzRGOUFFMDIvRDM2RjBCNkVD RjQ0MTFFQ0I2QjYxODI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAtgeQwDQYJKoZIhvcNAQELBQADggEBALh/ed/irnAREA6F c9doKrLaH2majMo8DiyRSzGP/z/JQAbnpJZmFt3QIF+Xra7oWjTr57vl7VmdXX50 alkqkvE4gdECGq6XcUsSPNAeqU4wRxSwTqmiJMVuFlN98EgSuyPx+mMKmDlJ2Hhx J/Hi9XPv2f+GoevEqWc2zyq6T/gE1SpIpAGFPbwaCyn60hwvmmAtEnLucfAhuJEU yYPSu9/GbUd1UuXdL0bDYDFnvKOXgDp+bTdmbdfI15MO7OonnLB8r1leOPxMRaTB Uv75UoYJTgjPpaLcNnSStmzjqSq7gHGXocDis75xgu2lcCW6JKW28yg3PIDnUnGB iRKn45w= -----END CERTIFICATE-----Generated at Sun Dec 21 09:06:35 2025 by rpki-client