This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/EEF3557C75A211EBBCD0587BC4F9AE02.roa File: EEF3557C75A211EBBCD0587BC4F9AE02.roa (raw, json) Hash identifier: b75OO6moLJ/LsRE3ZkAYlUImD8cqw/G/vg1FI9kPZGA= Subject key identifier: E3:61:21:95:12:E9:89:8B:DB:78:44:04:0E:F5:9C:22:3E:39:7B:2F Certificate issuer: /CN=A9130683/serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF Certificate serial: 07AF Authority key identifier: 9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/EEF3557C75A211EBBCD0587BC4F9AE02.roa Signing time: Mon 08 Dec 2025 20:32:25 +0000 ROA not before: Mon 08 Dec 2025 20:32:25 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 139811 IP address blocks: 103.145.144.0/23 maxlen: 23 103.145.144.0/24 maxlen: 24 103.145.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1967 (0x7af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130683, serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF Validity Not Before: Dec 8 20:32:25 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=693735d9-bcb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:6c:a3:1e:53:44:3e:87:34:e0:9d:e8:2a: 54:c2:7d:09:1f:51:9d:ea:88:55:1c:5d:32:2f:7c: 77:93:96:99:76:a0:3e:7a:9e:bf:ee:a4:ae:24:94: ea:93:8c:1c:47:ce:92:26:97:0b:5c:d1:05:a8:64: 90:a5:a9:73:24:1e:a0:a2:87:1b:bd:d8:ea:18:ba: 8e:59:cc:bb:3e:76:7e:2c:9b:8d:60:ba:4a:a4:90: 3d:63:c4:85:85:55:6a:b4:51:de:6c:21:6b:96:1a: 6b:96:87:e1:ec:d1:4c:a3:a0:0b:96:40:10:29:69: 98:30:cf:6f:06:c5:e2:de:ca:3f:7e:09:90:ac:d6: e1:43:34:3e:42:26:6c:2e:59:41:f3:5f:d0:a4:19: b2:93:62:a7:f7:18:59:68:d9:32:15:a9:cc:55:77: 10:92:e7:29:1f:ac:df:ec:9f:03:4e:fc:cc:b0:fe: 90:7d:11:f9:34:f4:21:53:bb:52:89:db:82:54:0a: b3:94:7c:d1:b7:65:0a:3f:05:c1:cd:2b:c7:2f:22: 7c:81:61:6b:0b:63:19:1a:fd:d7:65:71:58:66:f2: 2b:20:af:50:da:5c:c6:5b:28:d8:62:44:a2:ed:81: 8a:4f:27:ed:15:7e:68:48:11:80:40:76:f9:04:f3: d5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:61:21:95:12:E9:89:8B:DB:78:44:04:0E:F5:9C:22:3E:39:7B:2F X509v3 Authority Key Identifier: keyid:9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/EEF3557C75A211EBBCD0587BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.144.0/23 Signature Algorithm: sha256WithRSAEncryption 52:22:bc:7c:ee:f5:46:2e:c4:04:1d:52:94:64:c6:9e:cb:3e: 28:1d:20:d5:8b:79:19:0a:6e:dd:c0:e3:27:e2:3f:d1:0e:46: d5:19:6b:ed:18:b4:48:3c:0d:04:e6:82:74:34:31:ba:5a:09: 98:77:71:a4:25:58:32:0e:03:35:28:78:31:11:ca:7c:52:54: 66:5a:c1:df:fd:01:7a:d2:8b:cb:eb:9d:1d:c8:d9:a4:e3:11: 66:4d:61:37:7b:90:0b:3c:d7:3b:e7:44:df:d1:fa:21:78:8e: 35:f9:a1:65:fa:da:67:a9:16:97:06:f1:03:8c:53:c0:b2:9a: ec:3a:60:5a:f6:bc:df:09:2c:45:e9:57:f9:36:17:12:fc:5d: ac:43:dc:2b:25:64:f3:9b:c8:5c:92:a3:4f:58:de:9a:e4:e5: 60:3c:1d:19:b4:1d:8c:eb:fb:fe:07:5c:ca:e0:88:a3:95:48: d5:e6:ed:32:f4:d6:25:26:46:b1:77:85:b3:5f:51:1d:30:b3: a5:94:b6:30:76:20:10:e1:c0:8f:a6:e3:f5:50:01:e9:f2:91: 22:5e:ad:1a:47:3e:36:0b:bc:18:b6:44:f2:e3:00:36:c2:15: c9:66:05:e3:70:aa:93:79:09:5d:b7:a9:6c:ea:83:86:89:d9: 1e:b4:a0:5d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA2ODMxMTAvBgNVBAUTKDlDNTg3NjNBMkI0MzdDQjI5MkM0NjQxN0I4RDQ4RURG NkI1NzAxQ0YwHhcNMjUxMjA4MjAzMjI1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM3MzVkOS1iY2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugNsox5TRD6HNOCd6CpUwn0JH1Gd6ohVHF0yL3x3k5aZdqA+ep6/7qSuJJTq k4wcR86SJpcLXNEFqGSQpalzJB6goocbvdjqGLqOWcy7PnZ+LJuNYLpKpJA9Y8SF hVVqtFHebCFrlhprlofh7NFMo6ALlkAQKWmYMM9vBsXi3so/fgmQrNbhQzQ+QiZs LllB81/QpBmyk2Kn9xhZaNkyFanMVXcQkucpH6zf7J8DTvzMsP6QfRH5NPQhU7tS iduCVAqzlHzRt2UKPwXBzSvHLyJ8gWFrC2MZGv3XZXFYZvIrIK9Q2lzGWyjYYkSi 7YGKTyftFX5oSBGAQHb5BPPVBQIDAQABo4IClTCCApEwHQYDVR0OBBYEFONhIZUS 6YmL23hEBA71nCI+OXsvMB8GA1UdIwQYMBaAFJxYdjorQ3yyksRkF7jUjt9rVwHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDY4My81M0Q3NTRGRTJB NDIxMUVCOUM0NkNENENDNEY5QUUwMi9uRmgyT2l0RGZMS1N4R1FYdU5TTzMydFhB YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25GaDJPaXREZkxLU3hHUVh1TlNPMzJ0WEFjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA2ODMvNTNENzU0RkUyQTQyMTFFQjlDNDZDRDRDQzRGOUFFMDIvRUVGMzU1N0M3 NUEyMTFFQkJDRDA1ODdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnkZAwDQYJKoZIhvcNAQELBQADggEBAFIivHzu9UYuxAQd UpRkxp7LPigdINWLeRkKbt3A4yfiP9EORtUZa+0YtEg8DQTmgnQ0MbpaCZh3caQl WDIOAzUoeDERynxSVGZawd/9AXrSi8vrnR3I2aTjEWZNYTd7kAs81zvnRN/R+iF4 jjX5oWX62mepFpcG8QOMU8Cymuw6YFr2vN8JLEXpV/k2FxL8XaxD3CslZPObyFyS o09Y3prk5WA8HRm0HYzr+/4HXMrgiKOVSNXm7TL01iUmRrF3hbNfUR0ws6WUtjB2 IBDhwI+m4/VQAenykSJerRpHPjYLvBi2RPLjADbCFclmBeNwqpN5CV23qWzqg4aJ 2R60oF0= -----END CERTIFICATE-----Generated at Tue Dec 23 12:54:55 2025 by rpki-client