This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/DA505546B74C11ED916B5A6AC4F9AE02.roa File: DA505546B74C11ED916B5A6AC4F9AE02.roa (raw, json) Hash identifier: bQXgreOQfjcZIW7Fs2Nd+z0T7ScPCTCPY8Qz24HcTtw= Subject key identifier: E6:92:5F:E3:B6:09:84:58:17:E3:03:D1:1B:44:CE:F7:FB:A9:07:AE Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 12C5 Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/DA505546B74C11ED916B5A6AC4F9AE02.roa Signing time: Tue 09 Dec 2025 05:48:56 +0000 ROA not before: Tue 09 Dec 2025 05:48:56 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 0 IP address blocks: 103.104.19.0/24 maxlen: 24 103.125.244.0/22 maxlen: 22 103.125.245.0/24 maxlen: 24 103.125.246.0/24 maxlen: 24 116.89.244.0/24 maxlen: 24 2401:fdc0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4805 (0x12c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Validity Not Before: Dec 9 05:48:56 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6937b848-6cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c3:a9:4c:a3:0e:52:f0:d2:46:f1:e1:f0:ef: 47:63:d0:17:c0:90:a0:0c:86:12:9a:e2:0e:17:c3: 03:02:a5:29:9b:3c:87:36:e3:13:e7:ae:7d:75:db: 04:d4:a6:b3:88:78:15:61:05:a1:ec:5f:00:08:28: 18:13:a0:a7:ad:77:4d:c9:c0:d9:5f:84:9c:da:31: 77:f4:d4:7b:63:fb:04:e7:47:76:ac:0a:16:e5:95: 24:4c:91:ce:28:c0:c3:55:11:06:d7:12:49:b2:8a: 4d:01:2e:5e:3d:af:65:47:90:9d:fc:63:5a:47:3e: e7:13:9a:44:71:cb:60:09:a3:b6:84:24:83:41:ee: c7:8d:d8:7c:9b:11:41:a7:d4:6a:a8:f8:52:87:e6: 5e:1f:9f:bc:c4:8e:45:a5:49:01:3b:ce:c3:b9:3e: 90:b4:9d:c7:60:73:98:19:a9:4f:7a:37:ed:f9:ff: 3a:55:d1:39:e2:e1:47:c4:fa:36:c7:2d:8d:5e:b3: 03:3c:e1:aa:e1:ec:1d:98:33:c3:58:16:c8:28:f0: 12:ca:73:d5:a4:70:4c:e6:cb:e9:a2:01:60:dd:a3: d2:64:2a:38:10:ee:5d:1c:a5:02:71:e4:5d:7b:8e: b5:62:0a:da:de:88:1d:f3:dc:1b:a7:6f:79:5c:5a: ab:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:92:5F:E3:B6:09:84:58:17:E3:03:D1:1B:44:CE:F7:FB:A9:07:AE X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/DA505546B74C11ED916B5A6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.19.0/24 103.125.244.0/22 116.89.244.0/24 IPv6: 2401:fdc0::/44 Signature Algorithm: sha256WithRSAEncryption 07:dc:5f:9e:ce:96:7e:03:62:2e:20:c6:9a:62:c4:41:0a:b8: 83:6b:c3:22:70:3a:5a:e4:83:c6:05:f8:3f:7a:b8:93:ab:35: f8:82:c1:7f:7b:d2:9e:78:f3:d4:ce:6e:b9:0a:78:ea:40:0d: 97:48:e8:0b:fe:ee:1d:a4:63:84:38:8b:d5:6e:3a:f8:ba:10: 27:60:c3:43:ef:92:ff:d4:a6:8d:54:ce:22:9b:e2:1c:1d:f4: cc:70:10:56:ce:64:f6:f4:88:c5:13:32:48:3b:ce:08:83:a5: e4:ef:c5:aa:72:71:ff:ba:91:36:1e:2b:da:59:2b:aa:4c:54: f4:f3:f0:2f:ed:20:aa:da:39:17:2c:28:56:38:c7:8b:60:b1: 7e:ef:17:ac:89:81:b3:0e:ed:bf:f2:64:27:45:30:d7:db:17: 72:ca:ee:5b:b9:a7:aa:65:6a:10:d9:91:43:d4:06:be:e2:37: 64:a9:66:01:1f:2c:b4:1a:49:1a:b4:d2:8b:ed:0b:10:be:16: 4a:d5:a9:36:e7:e9:70:95:57:f5:30:87:d3:d3:b9:d4:a8:cc: 15:76:6f:2a:35:82:ca:7b:9b:52:69:0a:16:ea:8b:00:69:89: 65:20:6f:25:81:18:09:14:28:b1:d4:52:fe:c2:fa:09:12:cb: b6:ad:74:bf -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICEsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjUxMjA5MDU0ODU2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM3Yjg0OC02Y2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMOpTKMOUvDSRvHh8O9HY9AXwJCgDIYSmuIOF8MDAqUpmzyHNuMT5659ddsE 1KaziHgVYQWh7F8ACCgYE6CnrXdNycDZX4Sc2jF39NR7Y/sE50d2rAoW5ZUkTJHO KMDDVREG1xJJsopNAS5ePa9lR5Cd/GNaRz7nE5pEcctgCaO2hCSDQe7Hjdh8mxFB p9RqqPhSh+ZeH5+8xI5FpUkBO87DuT6QtJ3HYHOYGalPejft+f86VdE54uFHxPo2 xy2NXrMDPOGq4ewdmDPDWBbIKPASynPVpHBM5svpogFg3aPSZCo4EO5dHKUCceRd e461Ygra3ogd89wbp295XFqrdwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFOaSX+O2 CYRYF+MD0RtEzvf7qQeuMB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjQ4NjAvQjQwMUM5ODJFOTcwMTFFOEIwMzU5MzU5QzRGOUFFMDIvREE1MDU1NDZC NzRDMTFFRDkxNkI1QTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBABnaBMDBAJnffQDBAB0WfQwDwQCAAIwCQMHBCQB/cAAADAN BgkqhkiG9w0BAQsFAAOCAQEAB9xfns6WfgNiLiDGmmLEQQq4g2vDInA6WuSDxgX4 P3q4k6s1+ILBf3vSnnjz1M5uuQp46kANl0joC/7uHaRjhDiL1W46+LoQJ2DDQ++S /9SmjVTOIpviHB30zHAQVs5k9vSIxRMySDvOCIOl5O/FqnJx/7qRNh4r2lkrqkxU 9PPwL+0gqto5FywoVjjHi2Cxfu8XrImBsw7tv/JkJ0Uw19sXcsruW7mnqmVqENmR Q9QGvuI3ZKlmAR8stBpJGrTSi+0LEL4WStWpNufpcJVX9TCH09O51KjMFXZvKjWC ynubUmkKFuqLAGmJZSBvJYEYCRQosdRS/sL6CRLLtq10vw== -----END CERTIFICATE-----Generated at Mon Dec 22 12:50:04 2025 by rpki-client