This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9D3B8A8AC91A11F0B4BFC673C4F9AE02.roa File: 9D3B8A8AC91A11F0B4BFC673C4F9AE02.roa (raw, json) Hash identifier: ZT5u+LiwEwXLyRnjvq/L61qw+MNZgpjnIsJ8w3vDTcA= Subject key identifier: 56:AF:4B:AA:99:D7:F9:76:87:18:3E:1C:63:DB:41:E8:F3:29:EA:DA Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Certificate serial: 1B Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9D3B8A8AC91A11F0B4BFC673C4F9AE02.roa Signing time: Mon 24 Nov 2025 09:47:39 +0000 ROA not before: Mon 24 Nov 2025 09:47:39 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133761 IP address blocks: 122.154.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Validity Not Before: Nov 24 09:47:39 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692429bb-30d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d1:09:55:5b:e8:5a:3e:12:69:03:39:b7:2f: d6:34:0d:b6:94:a6:f9:88:13:e8:e3:ff:cd:3e:26: 03:88:23:59:55:1f:cc:46:6f:58:1c:94:99:dc:74: 6d:d2:03:a0:f3:24:c0:7a:d2:98:c1:c4:f4:b0:05: 97:24:61:de:c5:a5:a4:f6:38:ea:1b:f8:41:8b:f7: 5a:57:b1:d8:03:18:be:6a:f2:5b:36:fa:e4:4e:84: 8a:72:1d:da:87:1e:7f:08:0e:59:f7:b3:8b:90:c6: 9d:b7:71:59:4a:97:6f:4a:ef:02:d0:49:92:23:45: e9:90:31:aa:ca:6d:2e:2e:74:d8:67:df:55:33:33: 2d:51:83:1d:32:88:c8:c5:80:c8:d3:9c:fb:80:82: 48:c7:d9:0d:d5:52:bf:f7:04:05:47:a3:36:cc:df: 7d:1f:b9:16:54:c4:53:56:0d:9c:dd:94:5b:f0:04: b1:45:05:b3:f0:4b:37:2a:a8:eb:0f:ed:76:3c:62: ed:80:21:b8:ea:72:ef:57:38:aa:ce:13:49:a0:21: aa:14:07:63:3b:f5:e6:87:27:81:10:96:69:91:f6: bd:62:cd:d3:54:05:b5:b4:27:bc:46:ef:8e:d9:78: 1e:49:b2:47:9a:fa:f9:54:b7:80:35:bb:d7:75:c4: 09:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AF:4B:AA:99:D7:F9:76:87:18:3E:1C:63:DB:41:E8:F3:29:EA:DA X509v3 Authority Key Identifier: keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9D3B8A8AC91A11F0B4BFC673C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.154.20.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:fb:f6:c7:56:d5:83:15:fa:96:53:0d:77:85:8c:90:8e:b7: 4e:7f:85:d3:82:4b:66:09:fd:f9:e6:52:9b:2c:53:5b:df:be: d2:83:f0:36:77:87:ad:8f:e1:ae:99:2c:a1:1b:9d:db:ab:69: 70:c2:5d:20:be:84:43:c2:d4:81:fc:e3:9e:91:9f:70:50:d9: f8:68:c6:83:96:4d:1a:51:4f:38:4d:e1:06:6a:b8:7c:d4:b5: 27:fc:b2:16:8c:32:5a:ee:6b:cf:ce:95:b0:46:85:bf:2c:a3: 07:32:f3:43:57:a7:cf:46:73:0c:63:30:62:6f:07:22:82:e1: 96:96:58:99:af:57:b2:f1:2f:8a:b2:29:16:0c:9c:2c:6d:4d: 6a:c0:83:5e:5e:0c:cb:a7:40:ec:13:e1:e6:19:30:1e:5f:a7: da:5d:a5:20:85:41:b2:e3:b4:7d:76:75:38:9d:37:57:f1:53: c8:2c:bf:63:c0:40:1a:de:b3:69:3b:6e:45:63:79:76:45:28: d3:98:7f:ab:46:ef:7a:dc:97:fe:f3:2a:c3:4a:77:89:61:12: eb:ce:8f:79:f4:21:30:30:e3:91:61:6a:99:77:4a:42:88:2d: 8f:1e:d7:5f:2d:d7:f0:0a:7e:95:a4:71:02:23:42:05:af:b3: d4:0f:4a:04 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoOUEzQTY3RUREQ0QwOTc3NTMzQTlBMEI4QzQ5RjRDMDEw MEM4NTM5MTAeFw0yNTExMjQwOTQ3MzlaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjQyOWJiLTMwZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY0QlVW+haPhJpAzm3L9Y0DbaUpvmIE+jj/80+JgOII1lVH8xGb1gclJncdG3S A6DzJMB60pjBxPSwBZckYd7FpaT2OOob+EGL91pXsdgDGL5q8ls2+uROhIpyHdqH Hn8IDln3s4uQxp23cVlKl29K7wLQSZIjRemQMarKbS4udNhn31UzMy1Rgx0yiMjF gMjTnPuAgkjH2Q3VUr/3BAVHozbM330fuRZUxFNWDZzdlFvwBLFFBbPwSzcqqOsP 7XY8Yu2AIbjqcu9XOKrOE0mgIaoUB2M79eaHJ4EQlmmR9r1izdNUBbW0J7xG747Z eB5Jskea+vlUt4A1u9d1xAlFAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUVq9LqpnX +XaHGD4cY9tB6PMp6towHwYDVR0jBBgwFoAUmjpn7dzQl3UzqaC4xJ9MAQDIU5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0I4ODUzMUNBQzhF QzExRjBBMzQ0QUI0NUM0RjlBRTAyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWpwbjdkelFsM1V6cWFDNHhKOU1BUURJVTVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9CODg1MzFDQUM4RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi85RDNCOEE4QUM5 MUExMUYwQjRCRkM2NzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAHqaFDANBgkqhkiG9w0BAQsFAAOCAQEAjPv2x1bVgxX6llMN d4WMkI63Tn+F04JLZgn9+eZSmyxTW9++0oPwNneHrY/hrpksoRud26tpcMJdIL6E Q8LUgfzjnpGfcFDZ+GjGg5ZNGlFPOE3hBmq4fNS1J/yyFowyWu5rz86VsEaFvyyj BzLzQ1enz0ZzDGMwYm8HIoLhlpZYma9XsvEvirIpFgycLG1NasCDXl4My6dA7BPh 5hkwHl+n2l2lIIVBsuO0fXZ1OJ03V/FTyCy/Y8BAGt6zaTtuRWN5dkUo05h/q0bv etyX/vMqw0p3iWES686PefQhMDDjkWFqmXdKQogtjx7XXy3X8Ap+laRxAiNCBa+z 1A9KBA== -----END CERTIFICATE-----Generated at Sat Dec 6 04:35:05 2025 by rpki-client