This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/23D40B5049BC11EB98F78F66C4F9AE02.roa File: 23D40B5049BC11EB98F78F66C4F9AE02.roa (raw, json) Hash identifier: vSPmpKbfAxsmZ0szKr9FGYmBJXvGVcm1UTVCTBD8Wvs= Subject key identifier: 25:95:D8:A6:84:01:0C:7E:C4:68:7B:6B:71:84:BB:3F:6C:31:08:FC Certificate issuer: /CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686 Certificate serial: 0767 Authority key identifier: 3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/23D40B5049BC11EB98F78F66C4F9AE02.roa Signing time: Sat 20 Dec 2025 21:18:49 +0000 ROA not before: Sat 20 Dec 2025 21:18:49 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 136897 IP address blocks: 103.159.190.0/23 maxlen: 24 2001:df5:8480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 20:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1895 (0x767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C0AE, serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686 Validity Not Before: Dec 20 21:18:49 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=694712b8-972e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7a:d6:a5:5a:43:8f:6a:3d:74:b7:70:ed:81: 0b:8c:47:fb:2f:f9:50:08:99:29:a6:3f:83:25:ea: 1b:8f:b6:99:a2:af:6b:6d:70:e1:6a:81:a6:e7:32: c6:71:4a:b5:4b:09:4c:9c:8c:93:1f:37:aa:55:3e: f7:ef:21:c0:5f:3a:00:3e:e8:dc:99:b8:c4:f3:18: 63:19:82:b6:eb:9d:25:c3:f4:7a:e5:8f:59:db:f7: 5b:a3:93:e5:e2:3c:c0:64:0c:d0:ad:38:c5:78:b4: 74:46:a8:87:eb:1c:d4:b1:5b:61:dc:1d:1e:36:5f: 34:35:ad:09:0b:b1:88:e3:72:cf:a0:34:8a:39:e2: 4d:49:aa:5e:03:1b:23:be:ee:a4:d2:9f:e1:90:5c: 6e:e1:7a:09:09:d7:07:cf:e8:bf:a8:de:58:ae:c1: d7:74:23:5e:d1:87:42:c7:b1:e8:3d:f4:1a:a5:af: dc:19:e2:4e:05:f2:47:3b:fa:74:d7:29:df:18:d3: ba:f6:17:df:93:3a:e3:4b:a6:08:fa:af:c9:39:3c: 64:f3:9d:45:7f:36:ca:82:7e:bb:54:82:06:6e:cf: ef:d7:1c:00:67:6d:18:e4:57:04:3c:24:de:56:80: 76:97:6f:5d:ab:db:f7:52:2e:3d:15:72:2f:29:b5: 81:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:95:D8:A6:84:01:0C:7E:C4:68:7B:6B:71:84:BB:3F:6C:31:08:FC X509v3 Authority Key Identifier: keyid:3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/23D40B5049BC11EB98F78F66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.190.0/23 IPv6: 2001:df5:8480::/48 Signature Algorithm: sha256WithRSAEncryption 64:52:89:33:9c:a3:a2:8d:13:00:88:5c:1a:52:c4:ba:3b:93: a9:e1:10:91:d4:c8:4b:75:66:69:b3:0f:99:00:b1:68:d7:d7: 34:63:25:dc:9f:0a:fc:79:c3:5f:13:d6:68:86:b0:97:29:de: 78:de:ba:d8:27:f2:35:07:a0:c2:58:2e:e8:47:ca:37:27:69: fe:bb:d5:50:b9:b0:6d:1e:e0:d4:a7:b7:52:e9:3e:4a:85:36: 7f:0f:15:6d:d3:b7:85:8c:9e:1b:0d:c2:cb:f5:d2:a2:85:c3: 4b:98:14:b6:13:a9:32:fe:53:51:0b:0d:17:a4:ad:1e:da:2d: b2:f0:3d:e9:5e:f1:2b:44:64:8e:51:7d:5a:0d:e3:e6:40:1b: c5:c4:c3:6f:fb:a3:5c:67:45:79:42:5d:97:0b:9d:c7:69:43: c2:f1:73:5d:f4:0e:08:fb:cd:c2:72:2b:69:42:5a:32:95:f2: e8:dd:b7:cf:0a:6d:4f:af:cf:88:54:5b:31:f3:eb:99:b3:5b: 4f:49:7a:17:c4:a8:7c:da:52:73:9e:f0:7b:bf:98:54:92:dd: 59:cf:3e:81:83:74:09:63:cc:3e:16:77:40:73:d6:fe:6d:91: cc:4a:74:7f:2e:db:9c:d2:8b:15:01:d5:d2:f8:59:32:b4:0e: 74:3a:cb:6a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx OEMwQUUxMTAvBgNVBAUTKDNERDc5OEVCQkFFRjdFNzc0QjJGMkM3N0FFRkIyMkE0 Q0Q3QkQ2ODYwHhcNMjUxMjIwMjExODQ5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ3MTJiOC05NzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4HrWpVpDj2o9dLdw7YELjEf7L/lQCJkppj+DJeobj7aZoq9rbXDhaoGm5zLG cUq1SwlMnIyTHzeqVT737yHAXzoAPujcmbjE8xhjGYK2650lw/R65Y9Z2/dbo5Pl 4jzAZAzQrTjFeLR0RqiH6xzUsVth3B0eNl80Na0JC7GI43LPoDSKOeJNSapeAxsj vu6k0p/hkFxu4XoJCdcHz+i/qN5YrsHXdCNe0YdCx7HoPfQapa/cGeJOBfJHO/p0 1ynfGNO69hffkzrjS6YI+q/JOTxk851FfzbKgn67VIIGbs/v1xwAZ20Y5FcEPCTe VoB2l29dq9v3Ui49FXIvKbWBnwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCWV2KaE AQx+xGh7a3GEuz9sMQj8MB8GA1UdIwQYMBaAFD3XmOu67353Sy8sd677IqTNe9aG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzBBRS8wMUYwMDU5QTQ5 QkExMUVCOUMxMUQ0NjNDNEY5QUUwMi9QZGVZNjdydmZuZExMeXgzcnZzaXBNMTcx b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BkZVk2N3J2Zm5kTEx5eDNydnNpcE0xNzFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEMwQUUvMDFGMDA1OUE0OUJBMTFFQjlDMTFENDYzQzRGOUFFMDIvMjNENDBCNTA0 OUJDMTFFQjk4Rjc4RjY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnn74wDwQCAAIwCQMHACABDfWEgDANBgkqhkiG9w0BAQsF AAOCAQEAZFKJM5yjoo0TAIhcGlLEujuTqeEQkdTIS3VmabMPmQCxaNfXNGMl3J8K /HnDXxPWaIawlyneeN662CfyNQegwlgu6EfKNydp/rvVULmwbR7g1Ke3Uuk+SoU2 fw8VbdO3hYyeGw3Cy/XSooXDS5gUthOpMv5TUQsNF6StHtotsvA96V7xK0RkjlF9 Wg3j5kAbxcTDb/ujXGdFeUJdlwudx2lDwvFzXfQOCPvNwnIraUJaMpXy6N23zwpt T6/PiFRbMfPrmbNbT0l6F8SofNpSc57we7+YVJLdWc8+gYN0CWPMPhZ3QHPW/m2R zEp0fy7bnNKLFQHV0vhZMrQOdDrLag== -----END CERTIFICATE-----Generated at Sat Dec 27 15:57:25 2025 by rpki-client