This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/B3994B8CC92411F0928E8126C4F9AE02.roa File: B3994B8CC92411F0928E8126C4F9AE02.roa (raw, json) Hash identifier: AH7IPsSFFEPRn+zV12YskMymoNAR9h6j8zf44NNZ4tM= Subject key identifier: 00:92:AB:10:61:13:F5:44:0D:0B:F5:B7:60:8F:C1:C8:2F:32:2A:D4 Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Certificate serial: 43 Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/B3994B8CC92411F0928E8126C4F9AE02.roa Signing time: Mon 24 Nov 2025 10:59:52 +0000 ROA not before: Mon 24 Nov 2025 10:59:52 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 24328 IP address blocks: 122.154.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Validity Not Before: Nov 24 10:59:52 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69243aa8-4e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:26:19:42:ec:8b:e1:35:51:ed:82:cf:db:cf: 5c:54:8c:18:23:a7:26:22:66:80:12:23:3a:f9:be: 88:3f:aa:d4:7e:d7:11:db:f5:09:4b:49:c0:77:1a: e0:31:3c:2d:c5:5b:2f:7c:aa:6b:36:45:ad:45:5e: 8a:20:0f:f2:e4:2a:10:a5:c1:69:de:ec:97:9d:7e: 5f:9c:84:d2:7f:63:6c:09:9b:1f:df:f6:fc:c5:16: 48:e9:3e:69:d7:7a:72:d8:e4:aa:d7:87:18:ca:19: 39:04:01:09:30:61:26:ae:2f:ee:cf:b5:43:de:8d: 8b:f1:0c:3f:bd:47:f9:a5:7a:84:5b:4a:60:c1:29: d7:e5:58:e6:5c:62:c6:34:6b:f1:b2:13:5e:4b:eb: af:a6:01:9b:3a:de:83:3c:14:b2:45:8f:3f:87:64: e1:e3:3a:a4:60:55:9c:82:4f:13:01:97:0b:aa:6f: 38:5c:30:57:7d:b7:0d:5c:6e:7c:ae:61:07:33:c7: bc:5d:f3:89:44:5c:5b:f4:5e:30:7a:2c:73:66:8f: 6c:85:70:0e:af:f4:60:f7:6b:77:fa:75:03:5f:46: f1:2a:46:cd:16:4e:f5:99:01:be:5a:d9:e8:9a:ff: 16:70:52:df:df:48:a9:a9:04:65:1f:85:d2:1f:22: 4e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:92:AB:10:61:13:F5:44:0D:0B:F5:B7:60:8F:C1:C8:2F:32:2A:D4 X509v3 Authority Key Identifier: keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/B3994B8CC92411F0928E8126C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.154.50.0/24 Signature Algorithm: sha256WithRSAEncryption 57:1d:7d:40:8a:69:b5:5f:2a:5b:61:e4:57:5d:83:c7:e3:0f: 51:cb:4d:a6:dd:a3:da:c7:73:d5:d8:c5:71:7c:e3:09:46:2e: e2:6d:92:12:ed:2a:07:15:a9:be:cc:2e:ef:cf:29:ce:e0:07: 82:6f:16:19:a5:ae:50:02:cb:82:84:b0:1f:22:7a:4d:f4:5c: 92:06:8d:c3:48:54:d9:f8:9e:5d:03:93:36:da:b1:71:82:9c: fd:32:9b:46:58:b7:3c:c2:89:d4:ab:86:71:73:09:89:d4:15: fc:99:fc:6c:f9:00:9d:c3:0b:5d:9e:e6:78:36:5e:f7:1a:fb: a0:7c:37:94:d2:57:be:5c:0f:fe:73:c8:5e:d1:37:4f:75:6d: 55:d8:7a:d0:3f:e8:7f:44:6e:93:b3:4b:f6:15:b6:26:64:cd: 0a:90:b9:3c:30:12:2b:a8:67:87:7f:b0:b9:6e:6c:87:c6:61: c5:ed:c3:76:c7:73:ad:bf:e0:21:be:bc:e2:2a:74:d6:a5:41: ad:5c:24:a7:92:c5:13:e1:2b:75:6d:4b:5f:dd:73:df:f4:8b: 08:7d:a8:43:e7:2e:8e:d0:a1:bd:4f:06:9a:72:27:bb:08:de: f5:77:cd:21:3e:92:15:2e:c7:1e:b6:db:a0:ff:56:16:55:18: 59:88:67:9b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoOUEzQTY3RUREQ0QwOTc3NTMzQTlBMEI4QzQ5RjRDMDEw MEM4NTM5MTAeFw0yNTExMjQxMDU5NTJaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjQzYWE4LTRlNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFJhlC7IvhNVHtgs/bz1xUjBgjpyYiZoASIzr5vog/qtR+1xHb9QlLScB3GuAx PC3FWy98qms2Ra1FXoogD/LkKhClwWne7Jedfl+chNJ/Y2wJmx/f9vzFFkjpPmnX enLY5KrXhxjKGTkEAQkwYSauL+7PtUPejYvxDD+9R/mleoRbSmDBKdflWOZcYsY0 a/GyE15L66+mAZs63oM8FLJFjz+HZOHjOqRgVZyCTxMBlwuqbzhcMFd9tw1cbnyu YQczx7xd84lEXFv0XjB6LHNmj2yFcA6v9GD3a3f6dQNfRvEqRs0WTvWZAb5a2eia /xZwUt/fSKmpBGUfhdIfIk7dAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUAJKrEGET 9UQNC/W3YI/ByC8yKtQwHwYDVR0jBBgwFoAUmjpn7dzQl3UzqaC4xJ9MAQDIU5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0I4ODUzMUNBQzhF QzExRjBBMzQ0QUI0NUM0RjlBRTAyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWpwbjdkelFsM1V6cWFDNHhKOU1BUURJVTVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9CODg1MzFDQUM4RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi9CMzk5NEI4Q0M5 MjQxMUYwOTI4RTgxMjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAHqaMjANBgkqhkiG9w0BAQsFAAOCAQEAVx19QIpptV8qW2Hk V12Dx+MPUctNpt2j2sdz1djFcXzjCUYu4m2SEu0qBxWpvswu788pzuAHgm8WGaWu UALLgoSwHyJ6TfRckgaNw0hU2fieXQOTNtqxcYKc/TKbRli3PMKJ1KuGcXMJidQV /Jn8bPkAncMLXZ7meDZe9xr7oHw3lNJXvlwP/nPIXtE3T3VtVdh60D/of0Ruk7NL 9hW2JmTNCpC5PDASK6hnh3+wuW5sh8Zhxe3Ddsdzrb/gIb684ip01qVBrVwkp5LF E+ErdW1LX91z3/SLCH2oQ+cujtChvU8GmnInuwje9XfNIT6SFS7HHrbboP9WFlUY WYhnmw== -----END CERTIFICATE-----Generated at Sat Dec 6 04:35:03 2025 by rpki-client