This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/0038D872072E11EB8914E540C4F9AE02.roa File: 0038D872072E11EB8914E540C4F9AE02.roa (raw, json) Hash identifier: Sm2BWR/x62V1ChSVqLl9qtUU2JtttSVmIcQ57lBV/yg= Subject key identifier: FA:96:92:CC:B9:01:AF:20:04:A9:71:98:87:9E:05:8B:ED:4C:F4:42 Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 1392 Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/0038D872072E11EB8914E540C4F9AE02.roa Signing time: Sat 20 Dec 2025 17:14:42 +0000 ROA not before: Sat 20 Dec 2025 17:14:42 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 9678 IP address blocks: 103.131.189.0/24 maxlen: 24 2403:cfc0:1004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5010 (0x1392) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Validity Not Before: Dec 20 17:14:42 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6946d982-5c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5a:7e:3f:ac:9c:ef:d8:a1:ec:45:06:fc:62: 69:10:2e:2b:0a:4b:70:2d:4d:65:ff:c0:3b:82:50: 69:7d:55:f7:94:ae:7d:8f:7a:b4:74:a4:56:3b:bd: 6b:62:d5:28:81:78:dd:ed:09:93:78:18:7e:c4:31: e1:01:cb:91:ca:76:95:8b:8d:78:32:93:db:2c:bf: 17:0d:8b:87:c3:29:a9:cb:d6:a4:38:78:b1:04:07: 8b:3c:49:62:30:e4:e2:0c:71:78:02:e0:25:35:98: ef:d1:11:a5:fa:09:00:55:43:2c:2e:2a:f4:a8:77: dd:f1:4e:19:45:38:89:d9:61:b4:9f:b8:b0:17:b2: 39:55:5a:db:72:b4:4e:81:38:dc:32:69:d4:cf:9a: 80:08:6b:ba:f8:63:2a:60:1b:0b:d0:fa:66:67:28: 33:1a:18:50:9c:44:7f:a8:2a:83:d7:55:16:b1:dd: 03:49:7f:8a:5e:ac:0e:a9:df:59:8b:f5:af:f4:32: d5:72:76:12:ce:70:a3:fb:8d:b3:f9:c4:12:78:51: 10:e1:72:e6:82:d9:f2:52:83:1b:2a:5b:e6:99:3c: 6d:ed:d4:ec:73:49:97:91:37:99:4b:4e:27:38:c5: 3a:4b:34:26:96:2f:4c:19:9d:30:b6:ae:7a:b7:c7: 86:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:96:92:CC:B9:01:AF:20:04:A9:71:98:87:9E:05:8B:ED:4C:F4:42 X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/0038D872072E11EB8914E540C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.131.189.0/24 IPv6: 2403:cfc0:1004::/48 Signature Algorithm: sha256WithRSAEncryption 50:1a:c3:92:4e:c3:46:75:1e:c2:ba:ed:06:be:1d:8f:0c:9b: 20:90:b6:00:bd:84:5b:99:f5:33:27:5f:d2:06:cb:bd:c6:e1: be:38:35:9a:ad:8c:e2:f0:e7:b5:31:0b:c1:2a:7c:36:20:61: 17:86:b1:5d:19:41:b9:c8:0d:1e:b7:d6:2c:d4:e7:8f:39:b3: 47:e6:fe:cd:36:bf:9a:96:eb:b2:34:ef:0b:ff:cd:09:33:3d: 05:0b:e8:ab:e3:2b:30:c5:ba:a2:75:97:98:c8:c7:d1:09:b3: 6c:c9:30:73:49:f6:8b:63:a5:42:c2:68:6c:fc:89:b3:eb:67: 75:00:6d:ff:5a:14:0d:17:a1:f1:d7:ef:9f:c4:74:6d:3f:0c: 28:32:e8:b7:1d:8b:70:6c:77:9e:6d:29:e0:b5:e4:2f:d2:47: 70:8c:f4:ad:f3:73:88:92:78:7d:12:50:e1:73:25:ac:fd:11: 3b:a6:19:0a:de:58:3d:ba:e8:a2:34:39:fc:dd:8e:0c:b8:19: 16:c4:17:a4:c0:65:53:24:9a:0b:e4:00:19:ed:00:05:c1:8f: 29:a5:38:e8:ef:f4:1e:41:a2:3a:d4:b7:40:28:a3:e4:94:1a: 1a:83:fb:d5:4d:77:45:6a:5d:4b:53:57:44:4d:f7:93:19:00: 55:72:5f:7e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICE5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjUxMjIwMTcxNDQyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ2ZDk4Mi01YzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1p+P6yc79ih7EUG/GJpEC4rCktwLU1l/8A7glBpfVX3lK59j3q0dKRWO71r YtUogXjd7QmTeBh+xDHhAcuRynaVi414MpPbLL8XDYuHwympy9akOHixBAeLPEli MOTiDHF4AuAlNZjv0RGl+gkAVUMsLir0qHfd8U4ZRTiJ2WG0n7iwF7I5VVrbcrRO gTjcMmnUz5qACGu6+GMqYBsL0PpmZygzGhhQnER/qCqD11UWsd0DSX+KXqwOqd9Z i/Wv9DLVcnYSznCj+42z+cQSeFEQ4XLmgtnyUoMbKlvmmTxt7dTsc0mXkTeZS04n OMU6SzQmli9MGZ0wtq56t8eGGwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPqWksy5 Aa8gBKlxmIeeBYvtTPRCMB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNjE2NjZDMEVENjg5MTFFOEI2ODExNDMzQzRGOUFFMDIvMDAzOEQ4NzIw NzJFMTFFQjg5MTRFNTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABng70wDwQCAAIwCQMHACQDz8AQBDANBgkqhkiG9w0BAQsF AAOCAQEAUBrDkk7DRnUewrrtBr4djwybIJC2AL2EW5n1Mydf0gbLvcbhvjg1mq2M 4vDntTELwSp8NiBhF4axXRlBucgNHrfWLNTnjzmzR+b+zTa/mpbrsjTvC//NCTM9 BQvoq+MrMMW6onWXmMjH0QmzbMkwc0n2i2OlQsJobPyJs+tndQBt/1oUDReh8dfv n8R0bT8MKDLotx2LcGx3nm0p4LXkL9JHcIz0rfNziJJ4fRJQ4XMlrP0RO6YZCt5Y PbroojQ5/N2ODLgZFsQXpMBlUySaC+QAGe0ABcGPKaU46O/0HkGiOtS3QCij5JQa GoP71U13RWpdS1NXRE33kxkAVXJffg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:36:58 2025 by rpki-client