This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/06E8BCB4B3F411F0874AC55BC4F9AE02.roa File: 06E8BCB4B3F411F0874AC55BC4F9AE02.roa (raw, json) Hash identifier: Vp5etmm0b4cMTiOCVd/ik0duA4OhlC73XZbv5txdzNY= Subject key identifier: 53:0E:D2:7D:6B:CC:39:04:FA:EF:10:D4:EA:17:FD:54:9E:55:12:91 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 05A8 Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/06E8BCB4B3F411F0874AC55BC4F9AE02.roa Signing time: Tue 28 Oct 2025 11:48:32 +0000 ROA not before: Tue 28 Oct 2025 11:48:32 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 55154 IP address blocks: 43.226.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1448 (0x5a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Oct 28 11:48:32 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6900ad90-9c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:5b:a1:47:fe:bc:17:bc:2a:11:a0:5d:a7: cf:13:6a:d9:09:2b:5c:f2:36:e0:0d:0d:c9:ed:5b: 85:b2:5c:8c:b0:a6:8b:02:03:91:79:b1:40:60:0c: 2f:79:1a:39:40:c7:83:f1:81:a5:fe:09:c8:06:78: 79:26:a5:dc:88:d2:a9:41:b4:08:fc:76:2d:ec:92: 17:9a:3a:9d:82:c6:e4:33:56:98:ce:47:12:1c:90: a4:f4:5f:8a:68:74:28:05:dd:99:ac:76:a7:76:d7: ba:73:5f:2e:25:c1:7c:5b:7f:87:48:63:d2:5f:79: 0b:42:ef:4e:62:7c:0c:96:40:6d:af:6d:e0:33:f2: cb:5a:d7:7a:b6:26:fb:f6:ad:f1:f4:2a:d5:41:25: 9e:ff:6e:dc:0a:bd:57:30:28:da:d0:60:33:a7:a3: 51:5c:a8:97:99:38:08:15:5e:45:e2:41:8f:bc:78: 24:e0:67:41:97:69:9b:3e:73:7d:45:1a:d9:8c:47: 08:7f:a0:90:ce:51:57:23:7b:1c:55:ff:44:5d:54: e6:20:12:bb:18:43:f3:e1:df:f1:42:de:51:39:06: b1:72:cd:e4:ac:80:94:8b:fe:73:36:c3:e8:f4:21: b7:94:fa:8e:9a:9f:5e:67:ad:7e:ad:42:4b:d9:71: 2e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0E:D2:7D:6B:CC:39:04:FA:EF:10:D4:EA:17:FD:54:9E:55:12:91 X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/06E8BCB4B3F411F0874AC55BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.226.231.0/24 Signature Algorithm: sha256WithRSAEncryption 16:62:57:d0:80:88:84:69:60:55:dc:93:03:79:33:28:8c:94: 63:d8:66:4b:65:18:48:c4:11:8b:46:38:8c:31:13:d5:ef:d6: 67:76:1c:4e:e6:a1:c7:e1:ed:a4:b2:78:2f:1e:f9:81:76:cf: c0:03:49:21:fb:20:eb:90:1e:11:dc:4d:03:46:ef:41:71:65: ed:86:82:28:b3:20:70:0f:7e:d4:43:cc:84:98:67:6a:3b:b1: 7b:e9:fd:a1:f0:2b:31:fe:ed:11:dc:f3:83:85:2e:cb:be:35: f5:48:80:ec:44:de:49:bb:83:2e:0c:0e:ef:08:e7:b8:35:e2: 04:4d:50:6c:7f:ff:c1:ac:68:88:ae:0b:a3:da:67:79:1e:e8: 0e:23:40:5c:11:8c:d6:36:bc:3b:7d:c9:45:cd:0c:46:70:d9: 32:22:64:da:9c:6b:2d:38:bb:4f:dc:f5:c8:0f:02:cc:01:2e: 36:9d:66:60:e8:e1:d6:bd:e1:50:8f:4f:a1:59:cf:20:98:b6: a6:bd:b6:66:c3:8e:c1:f7:13:bf:8b:8d:78:a3:b8:be:aa:a5: 6e:0f:82:0a:38:2f:d2:c8:bd:93:32:19:ef:54:b0:00:33:ba: 80:85:6e:96:bc:54:4e:ec:35:00:a5:20:5d:ec:9b:54:02:b9: f1:48:a7:1c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjUxMDI4MTE0ODMyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAwYWQ5MC05YzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRdboUf+vBe8KhGgXafPE2rZCStc8jbgDQ3J7VuFslyMsKaLAgORebFAYAwv eRo5QMeD8YGl/gnIBnh5JqXciNKpQbQI/HYt7JIXmjqdgsbkM1aYzkcSHJCk9F+K aHQoBd2ZrHandte6c18uJcF8W3+HSGPSX3kLQu9OYnwMlkBtr23gM/LLWtd6tib7 9q3x9CrVQSWe/27cCr1XMCja0GAzp6NRXKiXmTgIFV5F4kGPvHgk4GdBl2mbPnN9 RRrZjEcIf6CQzlFXI3scVf9EXVTmIBK7GEPz4d/xQt5ROQaxcs3krICUi/5zNsPo 9CG3lPqOmp9eZ61+rUJL2XEu6wIDAQABo4IClTCCApEwHQYDVR0OBBYEFFMO0n1r zDkE+u8Q1OoX/VSeVRKRMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhCRkEvMDRBMjRDMzQxMTQzMTFFQzk3MzY5RjczQzRGOUFFMDIvMDZFOEJDQjRC M0Y0MTFGMDg3NEFDNTVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr4ucwDQYJKoZIhvcNAQELBQADggEBABZiV9CAiIRpYFXc kwN5MyiMlGPYZktlGEjEEYtGOIwxE9Xv1md2HE7mocfh7aSyeC8e+YF2z8ADSSH7 IOuQHhHcTQNG70FxZe2GgiizIHAPftRDzISYZ2o7sXvp/aHwKzH+7RHc84OFLsu+ NfVIgOxE3km7gy4MDu8I57g14gRNUGx//8GsaIiuC6PaZ3ke6A4jQFwRjNY2vDt9 yUXNDEZw2TIiZNqcay04u0/c9cgPAswBLjadZmDo4da94VCPT6FZzyCYtqa9tmbD jsH3E7+LjXijuL6qpW4Pggo4L9LIvZMyGe9UsAAzuoCFbpa8VE7sNQClIF3sm1QC ufFIpxw= -----END CERTIFICATE-----Generated at Sat Dec 6 16:19:06 2025 by rpki-client