This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/B40A9A4EC92411F09FAB8126C4F9AE02.roa File: B40A9A4EC92411F09FAB8126C4F9AE02.roa (raw, json) Hash identifier: MIjlw2AczUDY3cA2K0ShhfW4ijFo/ptiKrc7rq/4vDM= Subject key identifier: D3:CD:4A:38:80:D7:AF:BB:0F:06:BB:A0:33:FA:FE:42:FB:B9:8C:C1 Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Certificate serial: 44 Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/B40A9A4EC92411F09FAB8126C4F9AE02.roa Signing time: Mon 24 Nov 2025 10:59:53 +0000 ROA not before: Mon 24 Nov 2025 10:59:53 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 38265 IP address blocks: 122.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Validity Not Before: Nov 24 10:59:53 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69243aa8-a2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d7:46:e1:8f:ca:bb:41:0a:f3:7e:40:2c:14: a0:7c:38:3f:9e:13:26:92:5a:8b:2f:41:f8:b8:83: 71:2a:ff:21:03:2b:f0:78:2b:51:bd:98:50:e9:1a: 22:97:11:85:cf:90:9b:ab:0e:6d:65:1e:52:65:5b: 1a:b4:55:0c:1b:0e:82:7e:cb:69:20:19:e3:52:4f: ea:89:2b:93:e7:2c:a9:03:8a:77:cb:e2:93:e3:2f: 75:c0:90:04:f9:50:89:43:32:00:b8:49:ba:2b:df: 50:58:e7:56:49:82:80:c2:f0:a1:6d:8a:e4:17:54: 8a:29:9e:e9:eb:44:d2:f2:9d:29:f1:be:b6:8c:02: ac:94:a5:66:7f:36:82:7f:6f:1e:b3:0b:fb:45:e4: d4:12:e4:fe:c3:91:f8:81:44:72:80:e6:a1:93:c5: ee:8c:e8:74:53:f2:54:6a:b1:b3:fd:c6:d0:4d:7d: 4f:93:51:aa:d5:c2:64:8c:19:67:8d:27:96:74:57: f7:0b:15:28:83:a7:13:ca:49:5f:b9:a0:11:56:0b: 6f:9d:7f:88:79:c9:db:e1:fe:7d:4c:4e:42:ca:71: 8e:0f:21:12:f0:a6:9a:84:04:d4:07:4b:9c:21:8f: c8:c9:cb:cd:97:a7:49:9c:ca:d0:cf:0d:fb:dc:d4: 4e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CD:4A:38:80:D7:AF:BB:0F:06:BB:A0:33:FA:FE:42:FB:B9:8C:C1 X509v3 Authority Key Identifier: keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/B40A9A4EC92411F09FAB8126C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.154.153.0/24 Signature Algorithm: sha256WithRSAEncryption 81:58:9f:0f:c2:07:ef:eb:39:b8:38:fd:7d:3e:8f:c2:14:cb: ce:a9:07:db:0f:48:02:91:40:28:a9:0b:e5:0d:8b:7b:87:9c: 7c:c5:e9:d2:0f:72:d3:95:e7:4c:e8:9a:5a:3d:e8:54:58:d6: 83:5b:d3:16:5a:03:38:cb:9a:29:67:71:03:8a:83:79:43:da: c9:a5:da:1c:03:ea:dc:23:66:de:02:8a:11:0d:2a:ee:4f:86: 7b:c7:8b:16:47:fe:95:d0:a0:02:39:c0:6b:bc:e1:60:50:9d: bc:ae:d9:ee:b5:26:23:3c:86:2e:c5:ec:0e:55:a2:12:49:a4: 82:43:b9:02:65:d6:b1:60:bc:fc:35:86:7f:32:79:46:65:ba: 6b:4a:25:df:ca:d5:2e:b0:26:ba:4a:73:de:68:be:05:17:c5: 8e:9f:da:9b:80:3c:d8:c6:da:0b:e8:2b:d2:9b:33:c0:c7:ea: 04:c9:e5:27:cc:56:51:12:d4:f1:65:be:da:ce:5d:7d:c5:81: d3:f7:21:14:ab:d4:a7:51:0c:48:b5:28:f5:c9:10:fe:06:36: a5:d5:54:3b:84:02:04:e0:76:9e:42:9b:a0:3a:f5:b4:a2:ee: 74:07:d4:7b:50:ee:45:7d:48:6f:7a:e5:7b:7f:ef:9c:cb:53: b7:1a:f3:f3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoOUEzQTY3RUREQ0QwOTc3NTMzQTlBMEI4QzQ5RjRDMDEw MEM4NTM5MTAeFw0yNTExMjQxMDU5NTNaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjQzYWE4LWEyYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCc10bhj8q7QQrzfkAsFKB8OD+eEyaSWosvQfi4g3Eq/yEDK/B4K1G9mFDpGiKX EYXPkJurDm1lHlJlWxq0VQwbDoJ+y2kgGeNST+qJK5PnLKkDinfL4pPjL3XAkAT5 UIlDMgC4Sbor31BY51ZJgoDC8KFtiuQXVIopnunrRNLynSnxvraMAqyUpWZ/NoJ/ bx6zC/tF5NQS5P7DkfiBRHKA5qGTxe6M6HRT8lRqsbP9xtBNfU+TUarVwmSMGWeN J5Z0V/cLFSiDpxPKSV+5oBFWC2+df4h5ydvh/n1MTkLKcY4PIRLwppqEBNQHS5wh j8jJy82Xp0mcytDPDfvc1E6zAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU081KOIDX r7sPBrugM/r+Qvu5jMEwHwYDVR0jBBgwFoAUmjpn7dzQl3UzqaC4xJ9MAQDIU5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0I4ODUzMUNBQzhF QzExRjBBMzQ0QUI0NUM0RjlBRTAyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWpwbjdkelFsM1V6cWFDNHhKOU1BUURJVTVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9CODg1MzFDQUM4RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi9CNDBBOUE0RUM5 MjQxMUYwOUZBQjgxMjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAHqamTANBgkqhkiG9w0BAQsFAAOCAQEAgVifD8IH7+s5uDj9 fT6PwhTLzqkH2w9IApFAKKkL5Q2Le4ecfMXp0g9y05XnTOiaWj3oVFjWg1vTFloD OMuaKWdxA4qDeUPayaXaHAPq3CNm3gKKEQ0q7k+Ge8eLFkf+ldCgAjnAa7zhYFCd vK7Z7rUmIzyGLsXsDlWiEkmkgkO5AmXWsWC8/DWGfzJ5RmW6a0ol38rVLrAmukpz 3mi+BRfFjp/am4A82MbaC+gr0pszwMfqBMnlJ8xWURLU8WW+2s5dfcWB0/chFKvU p1EMSLUo9ckQ/gY2pdVUO4QCBOB2nkKboDr1tKLudAfUe1DuRX1Ib3rle3/vnMtT txrz8w== -----END CERTIFICATE-----Generated at Sat Dec 6 04:35:03 2025 by rpki-client