This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/A0000D2CC91A11F08D74C673C4F9AE02.roa File: A0000D2CC91A11F08D74C673C4F9AE02.roa (raw, json) Hash identifier: 3apnTYZUuA7N2cNukLCN12qI42VG+eaxv1WLiU5/scg= Subject key identifier: 0C:A2:8D:11:7C:1F:64:3A:AA:68:EC:7F:8D:70:D5:9D:A5:CB:68:98 Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Certificate serial: 21 Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/A0000D2CC91A11F08D74C673C4F9AE02.roa Signing time: Mon 24 Nov 2025 09:47:44 +0000 ROA not before: Mon 24 Nov 2025 09:47:44 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 4652 IP address blocks: 122.155.252.0/24 maxlen: 24 122.155.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Validity Not Before: Nov 24 09:47:44 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692429c0-f042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bc:f3:94:47:c0:8f:81:a0:2f:7b:c2:99:78: 64:04:20:a8:40:dd:8e:ed:55:b8:2a:75:73:d3:73: 63:43:9e:2a:30:58:ca:ad:1d:a1:2a:99:4c:8a:c2: eb:ab:44:a7:f3:b3:f6:36:01:ba:54:a8:32:85:ea: 47:4c:4e:89:38:ef:87:f2:93:d4:28:60:19:f1:ca: 0b:65:b3:1d:9a:6a:64:9d:86:04:d1:dc:e8:c0:dc: 0b:0d:7b:57:59:12:2f:89:e5:b9:1e:e1:8b:40:a8: bc:1a:d3:ab:f3:64:74:e0:9e:c8:51:82:4e:34:b5: c2:46:69:5f:16:63:28:35:7c:a0:41:7c:c5:28:01: fe:12:d0:f1:b8:1c:c9:fc:44:d8:51:cc:27:43:2c: 7a:d1:ec:62:c4:14:14:b6:82:f6:99:24:ba:ca:86: 4a:44:23:ec:07:1a:23:51:62:d3:30:3b:5f:6b:8d: 9b:93:4f:69:47:3a:28:85:6a:e6:d9:ef:79:b7:71: f7:80:84:ca:31:32:88:82:e1:c5:9e:42:a6:c5:04: 41:88:3b:ed:74:b3:37:d1:1b:2d:7c:aa:57:6d:16: 31:08:08:e0:8e:9b:e7:71:71:91:92:fc:8d:e8:86: 85:c1:f8:37:48:ab:d3:f4:fb:40:fa:a8:ec:56:f1: db:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A2:8D:11:7C:1F:64:3A:AA:68:EC:7F:8D:70:D5:9D:A5:CB:68:98 X509v3 Authority Key Identifier: keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/A0000D2CC91A11F08D74C673C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.155.252.0/23 Signature Algorithm: sha256WithRSAEncryption 85:e2:ab:8a:8a:c5:4b:52:d3:cc:4a:18:ce:06:3c:1a:aa:08: c0:18:28:e6:e5:41:19:8a:40:e9:aa:0f:29:96:88:79:cf:cc: 5b:0a:70:39:0b:6f:95:27:6e:2b:c0:db:48:c9:54:97:71:43: ae:7e:ea:b5:56:46:f7:97:52:0d:07:e1:4e:f7:c5:67:ac:27: 8a:0b:50:53:f6:9b:99:c0:77:a8:44:e1:df:0e:cb:55:aa:7c: cd:93:59:6e:34:70:d0:bf:c7:a0:4c:fa:05:03:07:03:01:ff: dc:69:23:dc:92:f1:f6:53:ff:9f:75:1c:95:76:6a:80:9e:a9: 90:a5:7d:6f:2f:f7:da:2b:91:53:c0:ca:15:ac:0c:fb:2f:8d: b7:e9:83:19:57:93:8c:8f:c4:89:5e:0a:16:fa:b1:ae:6f:14: c1:78:17:7f:5c:07:af:ac:36:cd:c8:bc:56:5d:a1:0c:0d:51: 03:36:1f:8a:5e:f1:b6:02:bf:d2:a3:d1:58:bd:df:e0:ff:ae: 0d:9b:0a:fe:23:fa:37:00:ed:5d:a1:3e:2c:04:dd:37:b3:c8: f6:48:7b:98:cf:98:92:88:79:df:8b:c3:26:77:d7:1d:ef:cb: e9:c4:f1:8f:01:cc:28:b5:9c:39:89:ba:03:9d:25:df:4b:d3: f6:95:e4:34 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoOUEzQTY3RUREQ0QwOTc3NTMzQTlBMEI4QzQ5RjRDMDEw MEM4NTM5MTAeFw0yNTExMjQwOTQ3NDRaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjQyOWMwLWYwNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBvPOUR8CPgaAve8KZeGQEIKhA3Y7tVbgqdXPTc2NDniowWMqtHaEqmUyKwuur RKfzs/Y2AbpUqDKF6kdMTok474fyk9QoYBnxygtlsx2aamSdhgTR3OjA3AsNe1dZ Ei+J5bke4YtAqLwa06vzZHTgnshRgk40tcJGaV8WYyg1fKBBfMUoAf4S0PG4HMn8 RNhRzCdDLHrR7GLEFBS2gvaZJLrKhkpEI+wHGiNRYtMwO19rjZuTT2lHOiiFaubZ 73m3cfeAhMoxMoiC4cWeQqbFBEGIO+10szfRGy18qldtFjEICOCOm+dxcZGS/I3o hoXB+DdIq9P0+0D6qOxW8dsZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUDKKNEXwf ZDqqaOx/jXDVnaXLaJgwHwYDVR0jBBgwFoAUmjpn7dzQl3UzqaC4xJ9MAQDIU5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0I4ODUzMUNBQzhF QzExRjBBMzQ0QUI0NUM0RjlBRTAyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWpwbjdkelFsM1V6cWFDNHhKOU1BUURJVTVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9CODg1MzFDQUM4RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi9BMDAwMEQyQ0M5 MUExMUYwOEQ3NEM2NzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAXqb/DANBgkqhkiG9w0BAQsFAAOCAQEAheKriorFS1LTzEoY zgY8GqoIwBgo5uVBGYpA6aoPKZaIec/MWwpwOQtvlSduK8DbSMlUl3FDrn7qtVZG 95dSDQfhTvfFZ6wnigtQU/abmcB3qETh3w7LVap8zZNZbjRw0L/HoEz6BQMHAwH/ 3Gkj3JLx9lP/n3UclXZqgJ6pkKV9by/32iuRU8DKFawM+y+Nt+mDGVeTjI/EiV4K Fvqxrm8UwXgXf1wHr6w2zci8Vl2hDA1RAzYfil7xtgK/0qPRWL3f4P+uDZsK/iP6 NwDtXaE+LATdN7PI9kh7mM+Ykoh534vDJnfXHe/L6cTxjwHMKLWcOYm6A50l30vT 9pXkNA== -----END CERTIFICATE-----Generated at Sat Dec 6 04:35:05 2025 by rpki-client