This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/3130332e3135322e33342e302f32332d3234203d3e203134363138.roa File: 3130332e3135322e33342e302f32332d3234203d3e203134363138.roa (raw, json) Hash identifier: keOiZDcjlwbciwToj1zQSKIg8xd1cvE8dyAYL8Y+rXA= Subject key identifier: 3F:89:9F:EC:47:8B:97:52:2C:E5:98:F7:D1:01:DA:7A:63:B9:A8:52 Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Certificate serial: 0CB76F97190EDC6F8E739E5E377984A7BB73AF55 Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/3130332e3135322e33342e302f32332d3234203d3e203134363138.roa Signing time: Mon 26 Jan 2026 21:00:00 +0000 ROA not before: Mon 26 Jan 2026 20:55:00 +0000 ROA not after: Tue 26 Jan 2027 21:00:00 +0000 asID: 14618 IP address blocks: 103.152.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b7:6f:97:19:0e:dc:6f:8e:73:9e:5e:37:79:84:a7:bb:73:af:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Validity Not Before: Jan 26 20:55:00 2026 GMT Not After : Jan 26 21:00:00 2027 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:eb:64:3c:f3:6f:e8:9b:0b:aa:05:f6:49:42: 30:72:cd:19:27:02:40:30:14:12:76:2a:6a:26:6c: 61:23:3b:1f:49:d7:c4:4e:6b:5b:71:37:50:c2:3b: 81:95:17:c2:db:0f:66:0c:2e:a0:f1:f1:d8:01:b5: 12:7e:3c:60:c9:db:d2:76:a4:dc:cb:34:c8:05:04: 20:f6:15:ce:25:5e:30:4e:db:d6:6d:6c:1b:32:60: cd:07:5c:95:92:44:e2:7b:79:ca:ac:c6:0f:2b:98: 39:08:f1:48:40:ed:00:d0:b7:d1:74:c1:4a:61:e9: 0e:a4:19:74:ce:b9:d2:13:70:f9:4e:2a:77:b8:c2: 08:af:73:bf:61:e0:7d:25:05:a9:14:65:4d:e7:d3: 59:4f:c0:36:03:dd:c6:05:10:42:63:cb:5a:44:c7: 85:66:de:b6:ff:0a:5e:a4:79:6d:2e:0a:42:c3:7c: 6a:0d:1b:da:86:2c:09:ce:8c:88:49:7b:0b:18:38: 56:93:07:f1:11:45:08:f7:60:ba:6c:12:e9:28:d1: 43:13:df:fe:ab:9a:2e:82:5e:ae:31:2e:58:ce:98: bf:e4:24:d7:bb:21:8d:16:61:e6:05:6b:5e:a1:79: 97:d0:22:73:09:83:83:14:a9:90:84:b2:83:bc:a4: 2a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:89:9F:EC:47:8B:97:52:2C:E5:98:F7:D1:01:DA:7A:63:B9:A8:52 X509v3 Authority Key Identifier: keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject Information Access: Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/3130332e3135322e33342e302f32332d3234203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.34.0/23 Signature Algorithm: sha256WithRSAEncryption 02:03:f9:c1:ac:86:ce:3d:4f:a5:62:c2:fb:82:29:45:a8:bd: d8:89:b2:02:35:68:e6:cf:b5:57:d4:b3:6b:6f:df:d8:8f:b1: 7b:a7:8e:30:1e:6d:70:88:01:89:57:94:f4:26:00:bf:7a:79: cf:48:ac:7d:09:de:9a:7e:a4:77:96:94:e3:38:bb:37:6b:9d: 7a:ae:d8:a4:1b:ee:b2:d5:75:a5:2c:fb:51:9d:5f:39:ba:12: 4c:91:b9:34:f0:e0:5a:aa:bd:01:f4:b6:cf:34:99:1a:cd:b7: 18:1a:75:24:4f:42:a3:6b:62:26:64:2b:61:b4:10:1b:8e:29: 95:1c:9b:73:4f:e3:f8:7f:a4:e3:0a:2a:ea:19:31:0a:3e:e9: 44:97:43:09:3d:f3:6c:2a:5c:8a:59:58:73:09:1f:de:cc:06: 2a:f7:00:cc:37:4a:01:f2:05:9c:5b:ee:48:71:ff:02:40:9c: 92:d2:5a:ac:c9:eb:94:e5:c3:fe:17:46:fd:fd:e1:c4:ca:b5: 9d:84:be:10:c2:6d:88:0f:e4:93:f3:4c:28:fc:4d:0b:13:ae: 1e:70:53:3d:17:e6:02:c0:ea:fa:40:a5:42:c5:3f:9b:7d:22: 4d:5d:91:4a:35:b5:ee:f0:5d:12:63:bc:03:b7:2c:8f:cf:3c: 7d:2d:b2:7d -----BEGIN CERTIFICATE----- MIIG1TCCBb2gAwIBAgIUDLdvlxkO3G+Oc55eN3mEp7tzr1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNCMTgwNUZBN0FFMjJENTY1RTBBNTAyRDA4RDM3RUIy QkQ4MzdBNzAeFw0yNjAxMjYyMDU1MDBaFw0yNzAxMjYyMTAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzBFQjY0M0NGMzZGRTg5QjBC QUEwNUY2NDk0MjMwNzJDRDE5MjcwMjQwMzAxNDEyNzYyQTZBMjY2QzYxMjMzQjFG NDlEN0M0NEU2QjVCNzEzNzUwQzIzQjgxOTUxN0MyREIwRjY2MEMyRUEwRjFGMUQ4 MDFCNTEyN0UzQzYwQzlEQkQyNzZBNERDQ0IzNEM4MDUwNDIwRjYxNUNFMjU1RTMw NEVEQkQ2NkQ2QzFCMzI2MENEMDc1Qzk1OTI0NEUyN0I3OUNBQUNDNjBGMkI5ODM5 MDhGMTQ4NDBFRDAwRDBCN0QxNzRDMTRBNjFFOTBFQTQxOTc0Q0VCOUQyMTM3MEY5 NEUyQTc3QjhDMjA4QUY3M0JGNjFFMDdEMjUwNUE5MTQ2NTRERTdEMzU5NEZDMDM2 MDNEREM2MDUxMDQyNjNDQjVBNDRDNzg1NjZERUI2RkYwQTVFQTQ3OTZEMkUwQTQy QzM3QzZBMEQxQkRBODYyQzA5Q0U4Qzg4NDk3QjBCMTgzODU2OTMwN0YxMTE0NTA4 Rjc2MEJBNkMxMkU5MjhEMTQzMTNERkZFQUI5QTJFODI1RUFFMzEyRTU4Q0U5OEJG RTQyNEQ3QkIyMThEMTY2MUU2MDU2QjVFQTE3OTk3RDAyMjczMDk4MzgzMTRBOTkw ODRCMjgzQkNBNDJBQUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAwOtkPPNv6JsLqgX2SUIwcs0ZJwJAMBQSdipqJmxhIzsfSdfETmtb cTdQwjuBlRfC2w9mDC6g8fHYAbUSfjxgydvSdqTcyzTIBQQg9hXOJV4wTtvWbWwb MmDNB1yVkkTie3nKrMYPK5g5CPFIQO0A0LfRdMFKYekOpBl0zrnSE3D5Tip3uMII r3O/YeB9JQWpFGVN59NZT8A2A93GBRBCY8taRMeFZt62/wpepHltLgpCw3xqDRva hiwJzoyISXsLGDhWkwfxEUUI92C6bBLpKNFDE9/+q5ougl6uMS5Yzpi/5CTXuyGN FmHmBWteoXmX0CJzCYODFKmQhLKDvKQqrwIDAQABo4IB4zCCAd8wHQYDVR0OBBYE FD+Jn+xHi5dSLOWY99EB2npjuahSMB8GA1UdIwQYMBaAFPyxgF+nriLVZeClAtCN N+sr2DenMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMS9GQ0IxODA1RkE3QUUyMkQ1 NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS9G Q0IxODA1RkE3QUUyMkQ1NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNlcjB9Bggr BgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuGYXJzeW5jOi8vcnBraS5hcGVybmV0Lmlv L3JlcG8vQVBFUk5FVC8xLzMxMzAzMzJlMzEzNTMyMmUzMzM0MmUzMDJmMzIzMzJk MzIzNDIwM2QzZTIwMzEzNDM2MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeYIjANBgkqhkiG9w0B AQsFAAOCAQEAAgP5wayGzj1PpWLC+4IpRai92ImyAjVo5s+1V9Sza2/f2I+xe6eO MB5tcIgBiVeU9CYAv3p5z0isfQnemn6kd5aU4zi7N2udeq7YpBvustV1pSz7UZ1f OboSTJG5NPDgWqq9AfS2zzSZGs23GBp1JE9Co2tiJmQrYbQQG44plRybc0/j+H+k 4woq6hkxCj7pRJdDCT3zbCpcillYcwkf3swGKvcAzDdKAfIFnFvuSHH/AkCcktJa rMnrlOXD/hdG/f3hxMq1nYS+EMJtiA/kk/NMKPxNCxOuHnBTPRfmAsDq+kClQsU/ m30iTV2RSjW17vBdEmO8A7csj888fS2yfQ== -----END CERTIFICATE-----Generated at Thu Jan 29 20:52:23 2026 by rpki-client