This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/D17E9426B24211EFBBDC2164C4F9AE02.roa File: D17E9426B24211EFBBDC2164C4F9AE02.roa (raw, json) Hash identifier: 732T9uPwwK9ZGQYizjkN4dg8xKfMSmsajV4WXneqdWQ= Subject key identifier: 61:BF:8A:36:A3:AA:35:F7:0C:C3:D6:C1:BE:BD:E1:F8:AA:A0:C9:06 Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 1387 Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/D17E9426B24211EFBBDC2164C4F9AE02.roa Signing time: Sat 20 Dec 2025 17:14:31 +0000 ROA not before: Sat 20 Dec 2025 17:14:31 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 135134 IP address blocks: 103.131.188.0/24 maxlen: 24 103.131.190.0/24 maxlen: 24 2403:cfc0:1000::/48 maxlen: 48 2403:cfc0:1001::/48 maxlen: 48 2403:cfc0:1002::/48 maxlen: 48 2403:cfc0:1003::/48 maxlen: 48 2403:cfc0:1005::/48 maxlen: 48 2403:cfc0:1009::/48 maxlen: 48 2403:cfc0:100a::/48 maxlen: 48 2403:cfc0:100e::/48 maxlen: 48 2403:cfc0:100f::/48 maxlen: 48 2403:cfc0:1100::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4999 (0x1387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Validity Not Before: Dec 20 17:14:31 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6946d977-4b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ea:24:ed:ca:0a:f5:cf:9a:17:9e:0f:cf:31: 0f:fb:71:fd:be:ad:62:06:30:f5:b3:65:6a:0d:4c: 2c:bc:1d:37:20:2b:b7:0a:c4:76:db:6a:ff:4e:63: c6:4f:db:29:a9:2e:0c:6e:28:21:65:95:c8:f2:d9: b9:a0:fa:9f:c4:cb:3d:81:5d:72:a2:f0:45:b9:15: f6:8f:35:c6:8d:58:e9:2d:77:5d:ee:3c:94:d1:fd: 91:fd:17:aa:ff:5f:2d:ff:44:32:31:87:a9:c1:99: c0:96:6e:8e:d1:46:f9:73:60:87:47:76:fe:d4:b1: 8d:dc:1a:c4:df:5f:41:33:01:cd:84:b2:67:14:2d: c3:56:0d:ca:8d:18:da:3d:e8:d2:56:a3:77:cc:7f: a5:95:d1:64:9e:3f:2b:2d:02:92:6c:3c:a3:68:c1: 1a:c3:4c:61:14:57:27:2d:6c:21:b3:d6:6b:ca:63: a2:2b:00:c8:99:7f:70:07:df:ae:21:78:97:79:58: 10:85:a9:80:93:b3:ba:a7:47:89:eb:97:99:d0:00: d2:03:24:8b:0c:a6:e2:50:2b:0e:6f:c2:f7:c8:72: 91:32:9f:9d:5d:b9:76:8f:18:5e:64:25:c2:c7:af: 93:01:29:cf:4d:ba:19:9e:a6:f1:37:8f:a2:5e:cb: 19:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BF:8A:36:A3:AA:35:F7:0C:C3:D6:C1:BE:BD:E1:F8:AA:A0:C9:06 X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/D17E9426B24211EFBBDC2164C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.131.188.0/24 103.131.190.0/24 IPv6: 2403:cfc0:1000::/46 2403:cfc0:1005::/48 2403:cfc0:1009::-2403:cfc0:100a:ffff:ffff:ffff:ffff:ffff 2403:cfc0:100e::/47 2403:cfc0:1100::/44 Signature Algorithm: sha256WithRSAEncryption 12:79:d3:f4:89:77:67:17:d2:4f:79:da:95:c2:d7:b3:ba:2a: 43:2f:70:2c:fd:af:27:7e:9d:e9:01:06:8f:72:b5:0e:90:9e: 84:f2:4e:1b:52:10:11:ff:9b:e3:53:f0:53:ea:79:39:f9:0f: 8d:8b:77:80:dd:1e:e5:a3:45:db:c2:51:46:f7:05:20:ba:f1: 57:07:6b:ff:b8:7c:ea:37:dd:7c:20:82:b5:b2:87:0b:1b:f0: 5c:b2:cb:93:33:ce:d0:48:67:40:9e:19:d8:df:65:73:b7:00: 98:7e:39:6c:5d:46:26:cd:4a:c2:aa:f0:53:8d:c4:13:c4:f7: c8:0c:dd:b9:b8:44:e9:dd:08:18:5d:60:50:c7:25:3c:69:a9: ec:77:63:24:30:55:5c:7c:62:8d:47:08:2c:f7:57:ff:5c:3a: 24:5e:53:8a:bf:72:79:7c:78:52:53:19:e4:21:3f:9b:02:19: e3:48:9b:3c:cf:11:1c:56:c6:1a:71:78:6f:14:37:77:70:42: 5f:14:85:58:e5:2b:50:14:e0:e8:f8:2c:20:e8:bd:b1:fe:58: 8a:24:94:10:69:ff:43:51:a8:5e:82:b5:9f:39:36:9f:7c:61: b2:a4:1d:16:a0:e2:e1:04:12:65:79:09:6d:4d:ed:8a:c3:f3: 1c:cd:50:76 -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgICE4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjUxMjIwMTcxNDMxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ2ZDk3Ny00YjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouok7coK9c+aF54PzzEP+3H9vq1iBjD1s2VqDUwsvB03ICu3CsR222r/TmPG T9spqS4MbighZZXI8tm5oPqfxMs9gV1yovBFuRX2jzXGjVjpLXdd7jyU0f2R/Req /18t/0QyMYepwZnAlm6O0Ub5c2CHR3b+1LGN3BrE319BMwHNhLJnFC3DVg3KjRja PejSVqN3zH+lldFknj8rLQKSbDyjaMEaw0xhFFcnLWwhs9ZrymOiKwDImX9wB9+u IXiXeVgQhamAk7O6p0eJ65eZ0ADSAySLDKbiUCsOb8L3yHKRMp+dXbl2jxheZCXC x6+TASnPTboZnqbxN4+iXssZ8wIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFGG/ijaj qjX3DMPWwb694fiqoMkGMB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNjE2NjZDMEVENjg5MTFFOEI2ODExNDMzQzRGOUFFMDIvRDE3RTk0MjZC MjQyMTFFRkJCREMyMTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZQYIKwYBBQUHAQcBAf8E VjBUMBIEAgABMAwDBABng7wDBABng74wPgQCAAIwOAMHAiQDz8AQAAMHACQDz8AQ BTASAwcAJAPPwBAJAwcAJAPPwBAKAwcBJAPPwBAOAwcEJAPPwBEAMA0GCSqGSIb3 DQEBCwUAA4IBAQASedP0iXdnF9JPedqVwtezuipDL3As/a8nfp3pAQaPcrUOkJ6E 8k4bUhAR/5vjU/BT6nk5+Q+Ni3eA3R7lo0XbwlFG9wUguvFXB2v/uHzqN918IIK1 socLG/BcssuTM87QSGdAnhnY32VztwCYfjlsXUYmzUrCqvBTjcQTxPfIDN25uETp 3QgYXWBQxyU8aansd2MkMFVcfGKNRwgs91f/XDokXlOKv3J5fHhSUxnkIT+bAhnj SJs8zxEcVsYacXhvFDd3cEJfFIVY5StQFODo+Cwg6L2x/liKJJQQaf9DUahegrWf OTaffGGypB0WoOLhBBJleQltTe2Kw/MczVB2 -----END CERTIFICATE-----Generated at Sun Dec 21 07:25:10 2025 by rpki-client