This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/25A5300C885B11F09F3C8013C4F9AE02.roa File: 25A5300C885B11F09F3C8013C4F9AE02.roa (raw, json) Hash identifier: jEy5mGpRcDiG535zpLFqdR0ZcEyr+sIUSNOpXCEOcn8= Subject key identifier: 9C:69:CD:B4:E7:4A:A5:EF:5A:56:84:00:93:C5:AD:52:DC:88:2E:F0 Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Certificate serial: 0495 Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/25A5300C885B11F09F3C8013C4F9AE02.roa Signing time: Wed 17 Dec 2025 02:44:11 +0000 ROA not before: Wed 17 Dec 2025 02:44:11 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 401783 IP address blocks: 202.155.24.0/24 maxlen: 24 202.155.25.0/24 maxlen: 24 202.155.26.0/24 maxlen: 24 202.155.27.0/24 maxlen: 24 218.33.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Validity Not Before: Dec 17 02:44:11 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=694218fb-04bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:26:10:b2:49:f6:32:2d:2c:e3:b1:84:e1: 4e:00:8b:40:29:52:82:86:17:de:4a:0c:dd:6a:0a: d3:7f:c9:dd:04:79:43:a2:51:8b:73:e1:b9:8f:58: 74:de:15:75:35:29:2b:a2:6e:af:82:2b:2f:95:dc: ae:36:fa:5a:cf:ad:ef:ce:a4:de:e1:68:06:b3:cf: 0b:d2:d2:b0:13:fc:0a:f1:fe:2a:6e:e4:08:81:8d: c5:8f:72:a1:0b:7c:39:49:4b:38:7a:22:25:8e:13: bc:4f:6d:17:25:de:59:2a:77:7e:b2:22:6b:03:7a: e5:ad:a9:d2:0f:c1:f2:c1:3a:62:24:b4:f0:b6:b2: 1a:7a:64:68:49:74:cc:32:9e:24:ef:b2:67:c1:f3: 96:88:3f:0a:85:51:38:50:24:be:70:ed:34:e8:22: fd:23:27:a4:5f:a2:66:20:cd:e4:ea:5e:fc:13:80: 4d:7e:ac:99:fd:7c:82:e7:77:18:28:7e:67:f1:88: 55:af:b0:79:91:9c:85:72:cc:79:d5:6f:9c:bb:df: a7:a1:5c:60:9f:3a:1a:17:02:75:3a:0c:d8:cb:c4: 1f:5d:97:c4:3f:e9:f0:57:25:0d:4a:4e:78:03:78: c6:2d:12:32:65:a8:67:c7:c8:80:f5:3c:9e:44:6f: 61:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:69:CD:B4:E7:4A:A5:EF:5A:56:84:00:93:C5:AD:52:DC:88:2E:F0 X509v3 Authority Key Identifier: keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/25A5300C885B11F09F3C8013C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.155.24.0/22 218.33.96.0/22 Signature Algorithm: sha256WithRSAEncryption b5:1e:37:e9:d7:9b:85:7d:12:53:3a:21:7f:07:34:5d:27:04: a7:9c:9b:6f:f1:c7:5e:26:04:04:0d:ae:07:a5:82:62:63:cf: e2:d3:cf:8a:4d:a6:17:d1:46:de:d2:85:44:11:f6:6e:af:ac: f5:4a:d3:ac:84:b9:dc:62:47:70:e0:99:db:7f:99:11:fa:a6: d1:f1:4f:09:9f:ab:36:a5:73:88:12:35:65:86:76:90:5f:3f: 8f:99:a5:3d:14:5a:b9:71:ca:fe:2a:62:3f:00:2e:1f:9d:7e: bc:e2:09:18:8b:a6:4d:ae:07:d4:bb:fc:b2:96:b3:01:04:d3: 29:6a:93:ae:1a:98:b4:56:10:fc:a3:82:4a:7b:cb:28:1e:c3: 5c:52:bb:5c:36:2e:62:6e:59:da:35:45:cc:f8:cf:7d:19:9d: 24:ed:d3:6f:9f:3c:21:ad:ca:d7:fd:4e:78:26:b7:29:4f:08: 9c:41:11:c7:a6:99:0c:95:96:62:62:43:af:df:aa:8c:b0:70: d0:27:bd:c6:b9:79:a9:71:de:c9:f0:59:88:b3:53:52:b1:d1: ed:15:4e:75:ea:e8:b5:6d:bf:5a:67:80:59:ab:bd:7c:77:48: 17:b4:0d:ad:85:87:f6:2a:2b:98:a0:0f:a4:11:29:33:a2:6d: 84:ff:a8:bf -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD MDMyOUQxMzgwHhcNMjUxMjE3MDI0NDExWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQyMThmYi0wNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseEmELJJ9jItLOOxhOFOAItAKVKChhfeSgzdagrTf8ndBHlDolGLc+G5j1h0 3hV1NSkrom6vgisvldyuNvpaz63vzqTe4WgGs88L0tKwE/wK8f4qbuQIgY3Fj3Kh C3w5SUs4eiIljhO8T20XJd5ZKnd+siJrA3rlranSD8HywTpiJLTwtrIaemRoSXTM Mp4k77JnwfOWiD8KhVE4UCS+cO006CL9IyekX6JmIM3k6l78E4BNfqyZ/XyC53cY KH5n8YhVr7B5kZyFcsx51W+cu9+noVxgnzoaFwJ1OgzYy8QfXZfEP+nwVyUNSk54 A3jGLRIyZahnx8iA9TyeRG9hGQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJxpzbTn SqXvWlaEAJPFrVLciC7wMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvMjVBNTMwMEM4 ODVCMTFGMDlGM0M4MDEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBALKmxgDBALaIWAwDQYJKoZIhvcNAQELBQADggEBALUeN+nX m4V9ElM6IX8HNF0nBKecm2/xx14mBAQNrgelgmJjz+LTz4pNphfRRt7ShUQR9m6v rPVK06yEudxiR3Dgmdt/mRH6ptHxTwmfqzalc4gSNWWGdpBfP4+ZpT0UWrlxyv4q Yj8ALh+dfrziCRiLpk2uB9S7/LKWswEE0ylqk64amLRWEPyjgkp7yygew1xSu1w2 LmJuWdo1Rcz4z30ZnSTt02+fPCGtytf9TngmtylPCJxBEcemmQyVlmJiQ6/fqoyw cNAnvca5ealx3snwWYizU1Kx0e0VTnXq6LVtv1pngFmrvXx3SBe0Da2Fh/YqK5ig D6QRKTOibYT/qL8= -----END CERTIFICATE-----Generated at Sat Dec 20 23:39:32 2025 by rpki-client