This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/4524F69EF73211EE8BA96C65C4F9AE02.roa File: 4524F69EF73211EE8BA96C65C4F9AE02.roa (raw, json) Hash identifier: gIT+6sEWqKyJWc5kNdozRIfXa8WY5C7Dl8hRoEYWoso= Subject key identifier: 10:D1:D5:6F:87:42:4E:D3:CA:D8:FD:66:D8:1E:6E:07:C4:6B:CE:C3 Certificate issuer: /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91 Certificate serial: 1A35 Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/4524F69EF73211EE8BA96C65C4F9AE02.roa Signing time: Thu 08 Jan 2026 17:14:00 +0000 ROA not before: Thu 08 Jan 2026 17:14:00 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 7470 IP address blocks: 118.214.2.0/24 maxlen: 24 118.215.120.0/21 maxlen: 21 125.56.198.0/24 maxlen: 24 125.252.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 16:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6709 (0x1a35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91 Validity Not Before: Jan 8 17:14:00 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=695fe5d8-8cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5f:71:71:ae:06:3b:02:83:02:57:dd:86:82: ac:94:69:74:c3:9e:8d:2f:a8:4c:b2:2d:6c:0b:01: 8c:72:44:b2:17:b5:a7:60:6e:01:a9:6b:24:95:f2: 7f:63:f5:7a:4d:ee:ec:89:d4:2c:4a:cd:3b:57:88: 64:ce:72:41:69:b2:7a:29:95:45:df:b8:c0:09:03: ec:4b:b2:80:60:d1:db:ad:a9:7e:1c:95:96:b4:8b: 3e:80:b5:38:5e:23:c2:13:27:9e:0e:12:9f:cf:e4: df:45:f4:fe:3c:0c:83:ed:36:dd:bc:1c:01:dc:01: de:74:6a:fd:01:8e:c9:0b:f9:92:b7:94:cf:0b:90: 2a:f4:6f:7b:f5:67:b9:03:ef:0c:8c:61:ec:dc:f4: 0c:e9:6f:89:70:57:31:f6:08:61:42:fc:d3:ff:30: f0:b5:d3:b0:d1:54:b1:fa:93:a2:73:9c:90:04:b9: b5:a7:0b:a2:28:d4:a0:2d:69:e4:34:b0:4b:f2:2c: b5:7c:6d:52:0a:b4:07:fe:ce:8a:92:58:9a:0a:19: a7:ad:f3:72:30:13:fa:0e:49:92:96:c4:b2:49:d5: cf:67:d3:60:45:6a:d9:c8:d3:2f:bf:2b:44:62:7f: 82:98:72:57:94:ff:2b:f4:2b:ae:f9:e5:00:bf:63: 7f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D1:D5:6F:87:42:4E:D3:CA:D8:FD:66:D8:1E:6E:07:C4:6B:CE:C3 X509v3 Authority Key Identifier: keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/4524F69EF73211EE8BA96C65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.214.2.0/24 118.215.120.0/21 125.56.198.0/24 125.252.240.0/21 Signature Algorithm: sha256WithRSAEncryption 85:90:e5:c7:73:8b:9c:33:14:d0:c9:27:5c:9c:91:d8:45:4f: a2:3c:73:57:60:7e:0c:5d:98:50:2a:38:28:7e:f8:42:50:68: 92:3c:04:4f:d2:20:5c:4e:92:15:7d:7f:14:3b:39:7a:f9:af: 63:8a:bd:1e:ad:26:7d:0c:51:5a:ba:3b:10:4b:2e:7b:ec:f7: 01:91:ec:61:44:8e:0f:87:b8:75:2c:36:b2:c4:44:1c:fc:06: 8d:ad:f3:c3:42:a0:99:ba:3d:41:e9:70:f4:ba:b3:92:fc:dc: 0a:92:42:20:8f:59:31:ad:13:fd:fe:9e:b8:5c:dc:6d:5a:74: 09:f9:bf:02:31:fd:9b:6d:dc:98:a4:14:f7:6c:42:c8:3b:53: 57:9f:99:2d:32:8e:21:75:2f:83:a6:a1:0f:54:64:63:49:9a: c9:ac:ea:8f:c7:e1:d0:6a:d1:fa:65:f7:78:35:c5:36:a2:49: 30:f1:09:ee:01:0f:c7:0d:59:86:f7:6d:4a:e7:16:f6:85:00: 45:f7:4c:1e:b3:32:11:44:f1:b2:25:b7:a4:22:53:b3:90:f2: 85:8b:28:9b:25:a1:67:33:e0:08:91:96:34:21:e8:e4:60:5f: f6:8f:78:95:40:93:89:b3:b5:c7:53:f2:36:a1:f0:55:42:05: 25:3c:f1:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICGjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NUQwM0ExMTAvBgNVBAUTKDYxNUVEODRDNDRFNjU3RjcwOTVFMDIxMkFGRUEwNTJD NTQyQTBEOTEwHhcNMjYwMTA4MTcxNDAwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVmZTVkOC04Y2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxV9xca4GOwKDAlfdhoKslGl0w56NL6hMsi1sCwGMckSyF7WnYG4BqWsklfJ/ Y/V6Te7sidQsSs07V4hkznJBabJ6KZVF37jACQPsS7KAYNHbral+HJWWtIs+gLU4 XiPCEyeeDhKfz+TfRfT+PAyD7TbdvBwB3AHedGr9AY7JC/mSt5TPC5Aq9G979We5 A+8MjGHs3PQM6W+JcFcx9ghhQvzT/zDwtdOw0VSx+pOic5yQBLm1pwuiKNSgLWnk NLBL8iy1fG1SCrQH/s6KkliaChmnrfNyMBP6DkmSlsSySdXPZ9NgRWrZyNMvvytE Yn+CmHJXlP8r9Cuu+eUAv2N/hQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFBDR1W+H Qk7Tytj9ZtgebgfEa87DMB8GA1UdIwQYMBaAFGFe2ExE5lf3CV4CEq/qBSxUKg2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDAzQS8xQjY0NzcxMDky NDYxMUU3OUFBRUJFMTBDNEY5QUUwMi9ZVjdZVEVUbVZfY0pYZ0lTci1vRkxGUXFE WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lWN1lURVRtVl9jSlhnSVNyLW9GTEZRcURaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQwM0EvMUI2NDc3MTA5MjQ2MTFFNzlBQUVCRTEwQzRGOUFFMDIvNDUyNEY2OUVG NzMyMTFFRThCQTk2QzY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAB21gIDBAN213gDBAB9OMYDBAN9/PAwDQYJKoZIhvcNAQEL BQADggEBAIWQ5cdzi5wzFNDJJ1yckdhFT6I8c1dgfgxdmFAqOCh++EJQaJI8BE/S IFxOkhV9fxQ7OXr5r2OKvR6tJn0MUVq6OxBLLnvs9wGR7GFEjg+HuHUsNrLERBz8 Bo2t88NCoJm6PUHpcPS6s5L83AqSQiCPWTGtE/3+nrhc3G1adAn5vwIx/Ztt3Jik FPdsQsg7U1efmS0yjiF1L4OmoQ9UZGNJmsms6o/H4dBq0fpl93g1xTaiSTDxCe4B D8cNWYb3bUrnFvaFAEX3TB6zMhFE8bIlt6QiU7OQ8oWLKJsloWcz4AiRljQh6ORg X/aPeJVAk4mztcdT8jah8FVCBSU88a0= -----END CERTIFICATE-----Generated at Mon Jan 12 13:45:31 2026 by rpki-client