This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/0009F0B0EB4011F0804B8821426F56BC.roa File: 0009F0B0EB4011F0804B8821426F56BC.roa (raw, json) Hash identifier: bewmclnmrJWEsHLDmCXH14/YujDcIGWpfsGeSMRrytw= Subject key identifier: 83:42:E8:65:1B:94:70:4D:5D:C7:73:57:A9:D1:01:71:E5:09:F9:09 Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Certificate serial: 090C Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/0009F0B0EB4011F0804B8821426F56BC.roa Signing time: Tue 06 Jan 2026 20:40:56 +0000 ROA not before: Tue 06 Jan 2026 20:40:56 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 14618 IP address blocks: 202.173.24.0/24 maxlen: 24 202.173.25.0/24 maxlen: 24 202.173.26.0/24 maxlen: 24 202.173.27.0/24 maxlen: 24 202.173.28.0/24 maxlen: 24 202.173.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Jan 2026 20:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2316 (0x90c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Validity Not Before: Jan 6 20:40:56 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=695d7358-2493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4d:63:74:1c:8e:93:20:16:74:85:4e:43:99: 2a:07:5f:33:f0:91:3a:b8:9a:cd:ce:32:30:6f:8e: 02:64:7e:de:85:fb:65:85:37:0a:fd:2c:ce:97:be: c4:4a:11:e6:cf:0f:5b:6e:01:26:0d:1e:ff:ea:99: ce:bd:75:49:f9:78:ef:33:af:b3:a2:11:f3:85:79: 9c:41:af:99:cf:da:47:b0:f7:da:aa:53:75:cb:0c: 52:f3:cf:10:e0:d7:83:fc:31:4c:c9:16:1d:c6:9e: d1:af:88:42:82:e6:f8:33:b0:36:6d:83:31:4e:1b: 82:5b:10:05:98:b1:73:cb:68:0b:da:75:99:10:ce: 7d:87:8c:58:f0:04:ed:b5:9e:89:f1:3e:80:e4:1b: da:8e:4f:b9:b2:82:01:60:5a:16:40:d3:c0:ad:a0: a9:4b:be:11:b5:ac:22:32:85:d6:3b:25:c0:87:72: bb:22:6b:32:be:04:36:3f:98:01:53:cc:ee:b5:16: d5:a2:e5:5e:94:a9:ec:81:58:66:4c:f4:44:05:c2: 56:e8:02:5b:41:b9:52:63:d5:5c:f6:a9:0a:ed:b3: 97:d3:ff:97:33:9a:3d:35:3a:a9:83:b4:58:3e:2c: 3a:9d:06:74:ef:a6:fc:87:69:d1:6d:8e:bb:0f:25: 06:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:42:E8:65:1B:94:70:4D:5D:C7:73:57:A9:D1:01:71:E5:09:F9:09 X509v3 Authority Key Identifier: keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/0009F0B0EB4011F0804B8821426F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.173.24.0-202.173.28.255 202.173.31.0/24 Signature Algorithm: sha256WithRSAEncryption 72:ab:86:8e:96:b2:99:ee:e4:88:17:9f:c1:77:b7:70:73:37: b1:54:ce:aa:f9:84:4b:73:9b:9b:77:f8:05:42:76:42:9b:70: 8b:25:88:92:a9:d3:d2:c6:2b:e0:27:88:3a:19:4a:49:57:65: 55:9c:d7:46:71:0f:b2:51:6f:15:e8:f9:17:0a:4b:fe:16:66: 4f:4b:d4:fc:b0:f5:f2:b3:32:e1:1c:82:d9:d2:64:e3:09:4d: a0:f5:c2:1f:18:70:95:de:c1:10:12:04:dc:27:9c:7a:8f:69: f2:ca:b4:e3:4b:50:94:ff:7d:82:80:fb:46:0b:37:6a:e3:7d: 93:63:6a:a6:30:ac:91:27:f9:11:12:5f:d9:23:60:f6:4a:c7: 08:d8:bd:05:66:eb:95:08:bb:42:34:7a:f0:74:80:a5:52:51: 4c:64:82:5b:d7:59:ee:f2:c8:10:ec:22:e1:ea:11:6e:6b:e0: d1:57:1d:49:0e:a2:d3:ab:43:09:af:09:c4:6f:7f:3e:26:f1: 86:a2:95:39:3f:31:5c:77:9c:52:9a:d4:a0:45:3a:6b:90:81: a7:c8:cd:e3:17:59:22:18:5d:31:a4:1f:2d:64:9e:45:40:bf: c2:64:4a:34:fc:43:a9:10:3d:11:07:9a:0e:98:ea:25:f8:6c: 97:c8:61:0d -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICCQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1 NDE0MTNFRDAwHhcNMjYwMTA2MjA0MDU2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVkNzM1OC0yNDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkk1jdByOkyAWdIVOQ5kqB18z8JE6uJrNzjIwb44CZH7ehftlhTcK/SzOl77E ShHmzw9bbgEmDR7/6pnOvXVJ+XjvM6+zohHzhXmcQa+Zz9pHsPfaqlN1ywxS888Q 4NeD/DFMyRYdxp7Rr4hCgub4M7A2bYMxThuCWxAFmLFzy2gL2nWZEM59h4xY8ATt tZ6J8T6A5Bvajk+5soIBYFoWQNPAraCpS74RtawiMoXWOyXAh3K7ImsyvgQ2P5gB U8zutRbVouVelKnsgVhmTPREBcJW6AJbQblSY9Vc9qkK7bOX0/+XM5o9NTqpg7RY Piw6nQZ076b8h2nRbY67DyUGXwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFINC6GUb lHBNXcdzV6nRAXHlCfkJMB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1 RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDIyNDEvNEY3Qjk4NjZDNUY3MTFFQUJBOUQyMDgxQzRGOUFFMDIvMDAwOUYwQjBF QjQwMTFGMDgwNEI4ODIxNDI2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQwDAMEA8qtGAMEAMqtHAMEAMqtHzANBgkqhkiG9w0BAQsFAAOC AQEAcquGjpayme7kiBefwXe3cHM3sVTOqvmES3Obm3f4BUJ2QptwiyWIkqnT0sYr 4CeIOhlKSVdlVZzXRnEPslFvFej5FwpL/hZmT0vU/LD18rMy4RyC2dJk4wlNoPXC Hxhwld7BEBIE3Ceceo9p8sq040tQlP99goD7Rgs3auN9k2NqpjCskSf5ERJf2SNg 9krHCNi9BWbrlQi7QjR68HSApVJRTGSCW9dZ7vLIEOwi4eoRbmvg0VcdSQ6i06tD Ca8JxG9/PibxhqKVOT8xXHecUprUoEU6a5CBp8jN4xdZIhhdMaQfLWSeRUC/wmRK NPxDqRA9EQeaDpjqJfhsl8hhDQ== -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:38 2026 by rpki-client