This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/D008EA4AC92211F0AD92BA21C4F9AE02.roa File: D008EA4AC92211F0AD92BA21C4F9AE02.roa (raw, json) Hash identifier: 4PFl+djOCvc8xGyc3NA3mOXdB4cbVSoZGtyLfcbiQvA= Subject key identifier: 57:23:CD:66:43:01:55:08:21:12:22:C5:79:19:2F:54:57:25:F6:98 Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Certificate serial: 46 Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/D008EA4AC92211F0AD92BA21C4F9AE02.roa Signing time: Mon 24 Nov 2025 10:59:55 +0000 ROA not before: Mon 24 Nov 2025 10:59:55 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 9464 IP address blocks: 122.154.60.0/23 maxlen: 23 2001:c38:9718::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Validity Not Before: Nov 24 10:59:55 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69243aaa-2e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:37:25:9a:e4:0d:c0:2c:2d:0d:ed:2b:75:42: 00:07:4a:24:aa:7e:75:19:07:01:5e:fc:2d:e4:f1: 4f:52:e2:8b:f9:7e:88:98:15:52:85:25:16:83:05: 40:d0:e8:b5:b0:03:9a:eb:3a:d7:dd:81:ab:c0:2a: 23:4e:5b:3a:25:a8:95:63:e6:37:41:1d:85:ec:9d: 81:1b:e2:75:06:75:1a:93:a2:8b:b1:ab:9e:eb:b5: f0:cb:5e:32:45:fa:0e:f5:f6:e6:6b:57:1b:bd:ba: 5b:74:0a:34:50:b1:0e:34:9f:6a:cb:99:0c:62:88: f8:7d:a1:13:32:01:51:b9:79:10:61:f8:f2:16:32: 9f:f8:6f:0f:63:db:ab:f0:63:6e:9c:aa:fc:b9:c8: 9e:af:93:2d:78:2c:0c:97:16:42:b4:d6:c5:14:89: fd:16:28:5f:45:d4:59:fd:0b:ac:4d:45:b3:99:5b: a8:7e:1c:5a:32:6a:b8:55:35:5f:89:9d:90:ff:38: 41:7c:f1:6d:30:cb:83:ab:b5:6a:0d:73:3d:e3:84: 4a:6f:ef:e2:14:33:a0:32:5e:05:22:c1:af:0e:d8: c8:c4:dd:30:04:b0:77:52:bb:91:71:39:f6:89:d1: 14:af:e5:fd:3e:df:7c:e8:b4:99:80:93:77:10:65: 9b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:23:CD:66:43:01:55:08:21:12:22:C5:79:19:2F:54:57:25:F6:98 X509v3 Authority Key Identifier: keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/D008EA4AC92211F0AD92BA21C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.154.60.0/23 IPv6: 2001:c38:9718::/48 Signature Algorithm: sha256WithRSAEncryption 8e:16:98:81:f5:bf:35:6d:51:50:56:95:6e:29:4c:7d:5f:73: ef:c1:50:4d:b0:97:d2:1f:06:3c:60:72:31:32:e5:33:80:19: f1:90:c8:22:fc:0a:8d:87:96:92:23:a6:84:a4:92:22:5b:64: 96:0c:23:a5:16:a3:17:ad:de:9e:a0:c2:17:b8:ef:6f:57:eb: 00:0a:41:82:e9:54:3a:2d:c4:52:40:ee:0d:47:8c:ae:e6:a0: 6e:a1:1c:19:30:41:82:8d:1a:6e:d6:ca:d3:4e:95:84:57:fd: 9a:53:2d:da:e5:48:83:82:30:c8:af:b4:af:91:44:f8:d3:4a: 56:46:44:56:e3:ff:f8:16:a7:e9:d1:71:4b:5c:c2:35:9f:2f: 6f:61:88:2c:c2:63:6d:ef:2d:2d:4e:67:be:ca:f2:88:35:af: 2f:f8:e9:c9:4f:d6:dc:ab:b9:67:99:75:6d:97:ce:32:54:0f: 47:d4:28:7e:7a:e4:f2:83:c4:91:d6:51:ad:72:a2:1c:cc:21: d8:9a:61:f5:74:d7:d9:62:e3:3d:b8:21:58:0c:79:d5:83:1f: ad:a5:72:5a:83:f4:b8:11:ba:92:38:91:73:c3:54:32:c2:57: 1c:32:09:5d:bd:40:01:3f:52:6e:9a:30:78:95:ba:a3:6b:14: c7:f0:a7:d8 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoOUEzQTY3RUREQ0QwOTc3NTMzQTlBMEI4QzQ5RjRDMDEw MEM4NTM5MTAeFw0yNTExMjQxMDU5NTVaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjQzYWFhLTJlOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxNyWa5A3ALC0N7St1QgAHSiSqfnUZBwFe/C3k8U9S4ov5foiYFVKFJRaDBUDQ 6LWwA5rrOtfdgavAKiNOWzolqJVj5jdBHYXsnYEb4nUGdRqToouxq57rtfDLXjJF +g719uZrVxu9ult0CjRQsQ40n2rLmQxiiPh9oRMyAVG5eRBh+PIWMp/4bw9j26vw Y26cqvy5yJ6vky14LAyXFkK01sUUif0WKF9F1Fn9C6xNRbOZW6h+HFoyarhVNV+J nZD/OEF88W0wy4OrtWoNcz3jhEpv7+IUM6AyXgUiwa8O2MjE3TAEsHdSu5FxOfaJ 0RSv5f0+33zotJmAk3cQZZuHAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUVyPNZkMB VQghEiLFeRkvVFcl9pgwHwYDVR0jBBgwFoAUmjpn7dzQl3UzqaC4xJ9MAQDIU5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0I4ODUzMUNBQzhF QzExRjBBMzQ0QUI0NUM0RjlBRTAyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWpwbjdkelFsM1V6cWFDNHhKOU1BUURJVTVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9CODg1MzFDQUM4RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi9EMDA4RUE0QUM5 MjIxMUYwQUQ5MkJBMjFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAXqaPDAPBAIAAjAJAwcAIAEMOJcYMA0GCSqGSIb3DQEBCwUA A4IBAQCOFpiB9b81bVFQVpVuKUx9X3PvwVBNsJfSHwY8YHIxMuUzgBnxkMgi/AqN h5aSI6aEpJIiW2SWDCOlFqMXrd6eoMIXuO9vV+sACkGC6VQ6LcRSQO4NR4yu5qBu oRwZMEGCjRpu1srTTpWEV/2aUy3a5UiDgjDIr7SvkUT400pWRkRW4//4Fqfp0XFL XMI1ny9vYYgswmNt7y0tTme+yvKINa8v+OnJT9bcq7lnmXVtl84yVA9H1Ch+euTy g8SR1lGtcqIczCHYmmH1dNfZYuM9uCFYDHnVgx+tpXJag/S4EbqSOJFzw1Qywlcc MgldvUABP1JumjB4lbqjaxTH8KfY -----END CERTIFICATE-----Generated at Sat Dec 6 04:35:05 2025 by rpki-client