This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/B3C00B80CD6111ED9BB1B571C4F9AE02.roa File: B3C00B80CD6111ED9BB1B571C4F9AE02.roa (raw, json) Hash identifier: a4QeVTUghMPokMsT32TYxSsVAo+1747ZLYMIJKsi7Xs= Subject key identifier: AE:F4:3B:14:FC:92:1B:D7:16:1F:DF:7F:F8:AD:52:30:BD:30:20:F5 Certificate issuer: /CN=A9196E05/serialNumber=7FFBDC3F779A8F9965305E7DEE51E6A6C535FFB8 Certificate serial: 08C3 Authority key identifier: 7F:FB:DC:3F:77:9A:8F:99:65:30:5E:7D:EE:51:E6:A6:C5:35:FF:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/B3C00B80CD6111ED9BB1B571C4F9AE02.roa Signing time: Fri 12 Dec 2025 19:57:09 +0000 ROA not before: Fri 12 Dec 2025 19:57:09 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132295 IP address blocks: 103.129.32.0/22 maxlen: 22 103.129.32.0/23 maxlen: 23 103.129.32.0/24 maxlen: 24 103.129.33.0/24 maxlen: 24 103.129.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.crl rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2243 (0x8c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196E05, serialNumber=7FFBDC3F779A8F9965305E7DEE51E6A6C535FFB8 Validity Not Before: Dec 12 19:57:09 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=693c7395-049f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:1f:0f:ab:79:f0:7e:6e:7f:46:5a:90:84: a2:90:da:1e:48:db:c4:77:60:e9:5a:ff:7c:94:42: d6:8e:90:9c:91:7d:0d:04:00:f8:49:f2:aa:fe:63: 97:9b:03:62:46:7b:89:00:6f:0f:68:55:83:67:50: dc:ba:90:dd:8c:7d:87:cb:ba:6a:89:78:40:22:87: 31:ea:96:6f:f7:1f:90:6f:a2:c0:11:2c:4f:e2:f3: 99:e4:76:9c:06:be:7a:c3:be:63:35:56:af:8d:c0: f5:66:c2:d6:01:8d:92:b1:b1:02:3f:cf:62:2f:08: 87:d7:f3:0c:8a:69:af:39:17:eb:a2:0d:99:c7:e8: be:53:4d:42:f5:02:1d:bc:b6:fd:b6:78:2a:1f:cf: 02:2a:52:f9:f9:00:3a:e6:5f:b5:65:5e:15:61:74: 97:1f:a3:fd:63:53:de:b9:b6:40:8a:46:e6:7e:0b: 4d:2a:be:ec:88:2b:dd:1c:8f:37:a1:58:66:14:aa: 46:99:b6:21:fb:88:ac:9e:1b:71:6d:bb:6d:f5:7b: ab:8c:41:21:f7:b2:ba:2c:7f:2f:ee:9c:73:bf:33: 22:b4:f5:7a:24:46:8e:4d:95:3d:49:e0:1a:78:69: f6:7b:86:e3:fa:55:f4:52:1b:ca:91:f9:33:f4:56: 48:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F4:3B:14:FC:92:1B:D7:16:1F:DF:7F:F8:AD:52:30:BD:30:20:F5 X509v3 Authority Key Identifier: keyid:7F:FB:DC:3F:77:9A:8F:99:65:30:5E:7D:EE:51:E6:A6:C5:35:FF:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/B3C00B80CD6111ED9BB1B571C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.129.32.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:2c:b2:08:0f:00:8e:1c:f7:5a:68:08:5c:12:a6:a4:65:7d: bc:21:4f:46:b5:1a:dc:2f:40:13:d1:07:b6:e9:7a:01:e8:b0: 8e:64:89:3a:70:6b:ff:f9:80:93:ca:24:1c:55:df:5e:52:2e: eb:24:a5:bc:69:0b:27:d4:bb:37:d2:59:d7:0e:9d:49:09:f5: 17:49:0f:52:26:a4:7e:8c:f5:3a:1e:7f:a4:48:f9:f0:92:cd: cd:af:d3:d6:43:59:68:b8:48:2b:5e:6e:fd:2b:39:e3:51:8c: e4:ea:0a:37:3f:39:ce:67:3b:af:5a:12:2e:20:7b:80:bd:5b: 4d:8e:ca:32:01:4b:1c:e3:50:4d:b3:88:de:05:41:03:1b:71: b2:27:10:82:e8:d3:de:ad:88:f1:44:6e:89:49:13:08:98:00: 35:f7:10:51:89:ab:ef:fc:c9:16:35:a4:06:f5:60:cc:e9:ab: 7b:68:74:1e:eb:26:18:52:4d:5c:f3:7b:99:80:ec:31:4d:24: a7:51:a4:b8:80:c3:10:9e:95:2c:e9:e5:1f:4f:e2:d1:08:b5: 18:f4:2f:54:31:c9:18:5b:e5:42:e9:78:70:e8:1a:b5:00:31: 38:63:a9:d4:07:8d:46:f0:68:64:6a:bc:0e:e9:5b:85:73:57: 0b:3c:db:de -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZFMDUxMTAvBgNVBAUTKDdGRkJEQzNGNzc5QThGOTk2NTMwNUU3REVFNTFFNkE2 QzUzNUZGQjgwHhcNMjUxMjEyMTk1NzA5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNjNzM5NS0wNDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcsfD6t58H5uf0ZakISikNoeSNvEd2DpWv98lELWjpCckX0NBAD4SfKq/mOX mwNiRnuJAG8PaFWDZ1DcupDdjH2Hy7pqiXhAIocx6pZv9x+Qb6LAESxP4vOZ5Hac Br56w75jNVavjcD1ZsLWAY2SsbECP89iLwiH1/MMimmvORfrog2Zx+i+U01C9QId vLb9tngqH88CKlL5+QA65l+1ZV4VYXSXH6P9Y1PeubZAikbmfgtNKr7siCvdHI83 oVhmFKpGmbYh+4isnhtxbbtt9XurjEEh97K6LH8v7pxzvzMitPV6JEaOTZU9SeAa eGn2e4bj+lX0UhvKkfkz9FZIpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFK70OxT8 khvXFh/ff/itUjC9MCD1MB8GA1UdIwQYMBaAFH/73D93mo+ZZTBefe5R5qbFNf+4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkUwNS80Mjk1NTUxMENF NTMxMUVBOEU4QzkyNENDNEY5QUUwMi9mX3ZjUDNlYWo1bGxNRjU5N2xIbXBzVTFf N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfdmNQM2VhajVsbE1GNTk3bEhtcHNVMV83Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTZFMDUvNDI5NTU1MTBDRTUzMTFFQThFOEM5MjRDQzRGOUFFMDIvQjNDMDBCODBD RDYxMTFFRDlCQjFCNTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJngSAwDQYJKoZIhvcNAQELBQADggEBAA4ssggPAI4c91po CFwSpqRlfbwhT0a1GtwvQBPRB7bpegHosI5kiTpwa//5gJPKJBxV315SLuskpbxp CyfUuzfSWdcOnUkJ9RdJD1ImpH6M9Toef6RI+fCSzc2v09ZDWWi4SCtebv0rOeNR jOTqCjc/Oc5nO69aEi4ge4C9W02OyjIBSxzjUE2ziN4FQQMbcbInEILo096tiPFE bolJEwiYADX3EFGJq+/8yRY1pAb1YMzpq3todB7rJhhSTVzze5mA7DFNJKdRpLiA wxCelSzp5R9P4tEItRj0L1QxyRhb5ULpeHDoGrUAMThjqdQHjUbwaGRqvA7pW4Vz Vws8294= -----END CERTIFICATE-----Generated at Sun Dec 21 12:17:00 2025 by rpki-client