This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/3F6A3A284F1C11EB9953172CC4F9AE02.roa File: 3F6A3A284F1C11EB9953172CC4F9AE02.roa (raw, json) Hash identifier: UkWaQah+jS/kZ5pdkE+s9p4TMaZE55JuiL7CS2ErqqA= Subject key identifier: B6:00:AB:7E:22:3C:52:D6:34:C3:95:AE:DE:4E:DD:ED:E7:7E:09:40 Certificate issuer: /CN=A9149CA9/serialNumber=C7A08672A8100DA330C122315115587BE6110DF1 Certificate serial: 0740 Authority key identifier: C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/3F6A3A284F1C11EB9953172CC4F9AE02.roa Signing time: Tue 18 Nov 2025 20:42:55 +0000 ROA not before: Tue 18 Nov 2025 20:42:55 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 38797 IP address blocks: 125.62.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1856 (0x740) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149CA9, serialNumber=C7A08672A8100DA330C122315115587BE6110DF1 Validity Not Before: Nov 18 20:42:55 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691cda4e-77b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:99:2d:9a:2d:18:d6:78:3e:0b:52:34:94:21: c4:21:77:4a:e1:4c:6d:6f:db:35:88:60:3c:13:cc: 6f:71:3e:1f:c1:ee:10:24:ea:02:05:06:85:ca:50: df:75:88:97:ba:50:93:1d:c9:ea:91:bb:b1:39:83: cd:50:1a:11:04:93:e9:fe:b2:db:86:5b:7d:0f:6e: bc:20:a3:60:42:35:d4:3a:91:35:f6:e3:b7:60:c8: 53:6b:ac:f3:99:f9:9f:1c:8b:e5:3e:f3:cd:a0:3b: 9e:49:52:da:b3:34:68:fe:57:8b:e4:b1:a1:aa:23: d3:09:42:40:72:49:f9:fc:43:88:59:b1:98:71:9a: fd:c3:32:ea:93:7c:fa:c5:79:8a:5d:ee:ef:91:52: 7b:40:a3:12:1a:e2:13:ea:b0:a3:c3:41:7d:5e:db: 9d:84:68:60:44:85:89:e3:5e:83:36:f2:7c:99:36: 6b:6a:7d:26:f2:ad:b2:00:35:cb:a3:ff:69:ea:4e: 60:b5:4e:76:d4:98:03:c1:3b:2c:02:4d:fc:2d:14: 76:d8:e2:69:8d:bf:34:0b:06:ac:11:2a:9b:d0:75: ed:49:60:fc:cf:b7:15:63:fe:4c:d0:6e:f0:24:3d: 8e:25:e4:42:df:b9:95:ad:82:94:ef:64:54:fe:79: 4f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:00:AB:7E:22:3C:52:D6:34:C3:95:AE:DE:4E:DD:ED:E7:7E:09:40 X509v3 Authority Key Identifier: keyid:C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/3F6A3A284F1C11EB9953172CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.62.224.0/20 Signature Algorithm: sha256WithRSAEncryption cf:87:cd:c1:a9:84:38:08:58:67:f9:74:c8:89:c8:dc:b5:ed: 67:00:90:4d:85:e8:ad:6f:df:bc:e6:12:17:02:08:30:d8:70: 34:99:6d:33:68:dd:8e:e3:9c:7b:43:f0:e8:44:3a:bb:42:a9: 7b:6e:0a:27:eb:d0:76:e4:9a:b9:4d:d4:fb:69:ac:94:c7:58: 4f:3e:af:eb:9a:3a:6c:b9:d6:18:0e:88:db:6d:9a:2c:82:89: b8:83:0c:71:a1:c1:0b:1c:4f:c5:18:07:da:4c:78:fd:f6:b7: 13:1f:19:9c:4c:5d:ae:1c:83:dd:62:18:da:c3:75:9d:7e:d7: 9b:52:9e:c9:02:3d:6b:f5:ce:a2:19:a6:59:19:65:b1:30:1d: 68:de:04:4c:29:56:7c:d0:8c:da:45:94:17:48:3f:8b:90:a1: 6d:85:9d:98:0b:f4:f3:20:33:8a:27:d8:3e:a9:e6:78:37:5d: 4f:3a:4a:5b:10:d9:e2:d8:29:c9:e8:02:06:3f:af:81:48:03: c8:3c:ec:77:cc:6b:75:05:a4:29:68:43:d3:08:20:5f:26:b9: 34:e5:59:94:e2:8c:cc:6f:bc:99:ab:df:83:a7:4d:0d:a4:e3: bd:32:5c:4c:49:54:ac:db:fe:db:39:c5:2a:67:70:ff:52:f7: 0a:7f:f0:c3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDQTkxMTAvBgNVBAUTKEM3QTA4NjcyQTgxMDBEQTMzMEMxMjIzMTUxMTU1ODdC RTYxMTBERjEwHhcNMjUxMTE4MjA0MjU1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFjZGE0ZS03N2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJktmi0Y1ng+C1I0lCHEIXdK4Uxtb9s1iGA8E8xvcT4fwe4QJOoCBQaFylDf dYiXulCTHcnqkbuxOYPNUBoRBJPp/rLbhlt9D268IKNgQjXUOpE19uO3YMhTa6zz mfmfHIvlPvPNoDueSVLaszRo/leL5LGhqiPTCUJAckn5/EOIWbGYcZr9wzLqk3z6 xXmKXe7vkVJ7QKMSGuIT6rCjw0F9XtudhGhgRIWJ416DNvJ8mTZran0m8q2yADXL o/9p6k5gtU521JgDwTssAk38LRR22OJpjb80CwasESqb0HXtSWD8z7cVY/5M0G7w JD2OJeRC37mVrYKU72RU/nlP4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFLYAq34i PFLWNMOVrt5O3e3nfglAMB8GA1UdIwQYMBaAFMeghnKoEA2jMMEiMVEVWHvmEQ3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUNBOS9FRUQ3NDhENjRG MTUxMUVCOEM3RUFCMUFDNEY5QUUwMi94NkNHY3FnUURhTXd3U0l4VVJWWWUtWVJE ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g2Q0djcWdRRGFNd3dTSXhVUlZZZS1ZUkRmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlDQTkvRUVENzQ4RDY0RjE1MTFFQjhDN0VBQjFBQzRGOUFFMDIvM0Y2QTNBMjg0 RjFDMTFFQjk5NTMxNzJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAR9PuAwDQYJKoZIhvcNAQELBQADggEBAM+HzcGphDgIWGf5 dMiJyNy17WcAkE2F6K1v37zmEhcCCDDYcDSZbTNo3Y7jnHtD8OhEOrtCqXtuCifr 0HbkmrlN1PtprJTHWE8+r+uaOmy51hgOiNttmiyCibiDDHGhwQscT8UYB9pMeP32 txMfGZxMXa4cg91iGNrDdZ1+15tSnskCPWv1zqIZplkZZbEwHWjeBEwpVnzQjNpF lBdIP4uQoW2FnZgL9PMgM4on2D6p5ng3XU86SlsQ2eLYKcnoAgY/r4FIA8g87HfM a3UFpCloQ9MIIF8muTTlWZTijMxvvJmr34OnTQ2k470yXExJVKzb/ts5xSpncP9S 9wp/8MM= -----END CERTIFICATE-----Generated at Tue Dec 23 03:18:07 2025 by rpki-client