This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A311BCDEE07D11F0A337A81D3B6F56BC.roa File: A311BCDEE07D11F0A337A81D3B6F56BC.roa (raw, json) Hash identifier: ecqA5XHW3HLODFy+l3Fk/pb2sTbT8HU+pHG6U1aNVrw= Subject key identifier: 69:F0:82:BE:1B:C3:25:C0:21:33:A0:BD:AB:13:3C:47:B7:9B:19:19 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3743 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A311BCDEE07D11F0A337A81D3B6F56BC.roa Signing time: Wed 24 Dec 2025 04:04:26 +0000 ROA not before: Wed 24 Dec 2025 04:04:26 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 137289 IP address blocks: 103.146.244.0/24 maxlen: 24 103.146.245.0/24 maxlen: 24 103.146.246.0/24 maxlen: 24 103.146.247.0/24 maxlen: 24 103.147.2.0/24 maxlen: 24 103.147.3.0/24 maxlen: 24 103.147.4.0/24 maxlen: 24 103.147.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14147 (0x3743) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Dec 24 04:04:26 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=694b664a-2a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0b:42:4a:9d:a3:34:46:85:1c:58:23:fc:c4: 38:a3:ab:a4:e7:e8:22:6e:8b:a4:67:40:90:10:e1: 38:55:75:ac:32:97:19:9a:3f:80:51:0b:d5:d3:20: 77:85:f2:c7:17:38:54:da:ed:33:f3:24:7c:05:40: 65:d2:ef:1d:d5:94:6d:a9:fb:48:fd:9a:a0:39:ce: de:e3:3c:d6:ec:44:6a:6c:04:c5:06:56:16:38:a7: 22:40:49:12:38:2f:44:e2:6e:05:be:fd:f4:87:35: 9e:aa:97:bf:45:0f:82:7a:18:a2:02:3c:a6:67:8c: 3b:ab:f4:82:ad:66:19:d5:da:78:c2:77:19:5e:43: 56:79:90:1a:48:3d:dc:c5:1f:86:41:0b:0a:15:55: 32:31:44:63:3c:e6:71:41:6c:1b:d0:fe:57:0d:02: 63:ed:30:c5:fc:32:df:c1:ac:38:20:ed:1b:c7:97: 61:bc:31:4c:29:35:7d:70:c7:6c:46:14:cc:c5:8c: 55:75:87:24:23:4c:c8:ce:92:16:6c:d9:9b:57:c5: 4f:a4:ed:ed:f4:53:ee:aa:76:5b:89:a5:e4:1f:d7: 60:67:2b:14:b1:22:a0:d9:6f:27:5b:f9:f4:d6:f7: fd:10:fb:1f:f5:9c:7d:5c:1e:18:a0:6f:81:fd:0e: 7b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F0:82:BE:1B:C3:25:C0:21:33:A0:BD:AB:13:3C:47:B7:9B:19:19 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A311BCDEE07D11F0A337A81D3B6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.244.0/22 103.147.2.0-103.147.5.255 Signature Algorithm: sha256WithRSAEncryption 08:0e:13:9a:22:35:9e:8d:a9:9f:3b:ac:03:6f:5d:7a:e6:64: 39:0d:25:a4:60:d4:7d:ad:a4:88:6d:f6:78:58:16:da:72:5b: a4:85:43:3a:0b:54:27:9c:4e:fc:6b:67:05:b9:54:b2:23:e3: a7:df:f8:32:b1:f5:5a:77:93:75:57:db:2b:f6:ac:30:94:ca: 68:29:53:0c:86:12:f9:f5:e4:6f:18:28:e2:ac:5a:5c:d8:ca: 81:4c:6a:9b:8a:be:bc:1c:80:46:2e:f6:d8:5c:88:c4:11:9a: 63:bc:cb:4a:00:1e:df:b8:fa:2c:11:b5:ad:da:c9:92:94:bc: 9d:c3:69:17:bd:c7:8d:73:92:84:7e:eb:bd:2c:c6:fc:2f:d2: ee:0c:ff:91:bc:1b:04:46:ec:f4:45:0c:f4:27:cc:4a:b5:22: f4:8b:18:6a:42:46:f4:1c:f8:5d:98:8c:b8:cd:43:12:d1:83: 7a:ff:05:0d:f5:ba:72:1b:d2:1a:56:df:1f:12:13:d4:51:31: 04:73:7e:23:a3:fd:27:cc:10:a0:b3:1e:7c:8b:16:87:7a:00: 87:a8:c8:f2:1e:0f:f9:22:27:79:cf:6e:a0:c8:67:0f:7a:cd: 52:d8:4a:2e:4a:84:0e:6f:98:5a:f4:7c:30:6e:5b:90:81:bf: 12:b2:46:b5 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICN0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjUxMjI0MDQwNDI2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTRiNjY0YS0yYTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQtCSp2jNEaFHFgj/MQ4o6uk5+giboukZ0CQEOE4VXWsMpcZmj+AUQvV0yB3 hfLHFzhU2u0z8yR8BUBl0u8d1ZRtqftI/ZqgOc7e4zzW7ERqbATFBlYWOKciQEkS OC9E4m4Fvv30hzWeqpe/RQ+CehiiAjymZ4w7q/SCrWYZ1dp4wncZXkNWeZAaSD3c xR+GQQsKFVUyMURjPOZxQWwb0P5XDQJj7TDF/DLfwaw4IO0bx5dhvDFMKTV9cMds RhTMxYxVdYckI0zIzpIWbNmbV8VPpO3t9FPuqnZbiaXkH9dgZysUsSKg2W8nW/n0 1vf9EPsf9Zx9XB4YoG+B/Q57bQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFGnwgr4b wyXAITOgvasTPEe3mxkZMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvQTMxMUJDREVF MDdEMTFGMEEzMzdBODFEM0I2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBAJnkvQwDAMEAWeTAgMEAWeTBDANBgkqhkiG9w0BAQsFAAOC AQEACA4TmiI1no2pnzusA29deuZkOQ0lpGDUfa2kiG32eFgW2nJbpIVDOgtUJ5xO /GtnBblUsiPjp9/4MrH1WneTdVfbK/asMJTKaClTDIYS+fXkbxgo4qxaXNjKgUxq m4q+vByARi722FyIxBGaY7zLSgAe37j6LBG1rdrJkpS8ncNpF73HjXOShH7rvSzG /C/S7gz/kbwbBEbs9EUM9CfMSrUi9IsYakJG9Bz4XZiMuM1DEtGDev8FDfW6chvS GlbfHxIT1FExBHN+I6P9J8wQoLMefIsWh3oAh6jI8h4P+SInec9uoMhnD3rNUthK LkqEDm+YWvR8MG5bkIG/ErJGtQ== -----END CERTIFICATE-----Generated at Thu Dec 25 02:31:19 2025 by rpki-client