This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/71CCFDEEB52311F0BF19FE49C4F9AE02.roa File: 71CCFDEEB52311F0BF19FE49C4F9AE02.roa (raw, json) Hash identifier: FaDUf+6+r+7SzkH11GwV5QLOZLzNKdPVadb8WWGD93Y= Subject key identifier: 33:56:1A:47:45:F4:0D:16:E3:DB:52:50:69:1B:94:DD:67:D0:7E:8B Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3B45 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/71CCFDEEB52311F0BF19FE49C4F9AE02.roa Signing time: Mon 08 Dec 2025 02:11:10 +0000 ROA not before: Mon 08 Dec 2025 02:11:10 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 18328 IP address blocks: 45.120.65.0/24 maxlen: 24 103.31.180.0/24 maxlen: 24 103.31.181.0/24 maxlen: 24 103.31.182.0/24 maxlen: 24 121.0.96.0/24 maxlen: 24 121.0.97.0/24 maxlen: 24 203.210.16.0/24 maxlen: 24 203.210.20.0/24 maxlen: 24 203.210.21.0/24 maxlen: 24 203.210.22.0/24 maxlen: 24 203.210.23.0/24 maxlen: 24 203.210.26.0/24 maxlen: 24 203.210.27.0/24 maxlen: 24 203.210.31.0/24 maxlen: 24 210.87.198.0/24 maxlen: 24 210.87.200.0/24 maxlen: 24 210.87.201.0/24 maxlen: 24 210.87.202.0/24 maxlen: 24 210.87.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 00:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15173 (0x3b45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Dec 8 02:11:10 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=693633be-2676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:00:52:b5:46:d8:a7:2c:91:a0:ba:1f:3c:7a: 11:29:03:04:f0:13:fc:11:fd:0a:b3:f5:11:47:95: c9:d2:1f:bb:68:d3:32:47:06:89:17:ab:cc:c5:0d: 9a:21:82:4e:56:90:30:55:8c:19:ad:43:0e:51:78: ae:96:d9:0c:98:b1:cb:2f:58:8c:b8:b1:30:3c:5a: de:47:e1:6d:4a:71:51:ac:0f:4a:a3:b0:ed:ec:db: 87:fd:05:4f:32:e2:8e:a9:c0:60:a8:9f:c6:eb:4d: c1:3c:80:13:e1:ad:77:04:7a:48:cd:c0:46:bb:5f: 66:e3:ff:ed:bd:c4:da:95:0d:37:6d:4f:b9:23:3c: f1:f1:e4:db:37:8e:67:28:06:95:fd:4e:b3:35:7d: bc:c0:7e:47:c9:9d:8a:81:8d:a8:17:13:36:00:89: 8a:8e:be:ce:0a:7e:61:bf:63:c7:11:be:eb:ee:ef: 61:7f:0c:bc:84:a0:02:0d:1e:be:c0:d1:39:2c:d0: 92:7b:33:eb:0b:10:3a:a3:12:dc:9a:9e:9f:1e:02: 35:c4:06:a1:81:60:3c:b8:19:79:89:5e:78:3f:f7: e5:0f:d8:1a:6a:43:6b:4f:6b:30:35:06:cd:44:3a: 6f:b7:3c:57:a3:81:16:9b:5b:fa:cc:a4:4e:d7:70: 1b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:56:1A:47:45:F4:0D:16:E3:DB:52:50:69:1B:94:DD:67:D0:7E:8B X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/71CCFDEEB52311F0BF19FE49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.120.65.0/24 103.31.180.0-103.31.182.255 121.0.96.0/23 203.210.16.0/24 203.210.20.0/22 203.210.26.0/23 203.210.31.0/24 210.87.198.0/24 210.87.200.0-210.87.202.255 210.87.207.0/24 Signature Algorithm: sha256WithRSAEncryption 71:e2:26:a6:65:69:8c:51:4f:8d:e4:36:19:93:5f:97:92:4e: 71:59:d1:b9:bf:b3:50:a6:45:c6:10:ee:d7:f3:4b:87:90:f5: d6:21:94:94:0e:b5:36:da:6f:d5:03:39:4c:7e:84:33:db:a2: bf:59:d8:b3:f8:8a:2d:20:4b:9f:6e:60:3e:25:3f:43:ac:31: 50:77:38:c9:62:9b:b9:ba:0c:00:0d:ce:7a:48:0f:06:df:2a: 36:f9:65:4b:eb:5a:a9:a5:9d:0b:36:a1:c6:b3:96:74:30:1c: be:ee:4f:5b:ae:0c:62:42:cb:f6:04:bf:d0:18:cf:50:8e:34: 19:a0:47:e9:e1:8f:d4:4e:d8:d5:c8:ff:f0:59:8f:96:9a:e2: 72:b7:0e:05:c7:73:9a:e2:7f:ab:b3:7c:12:57:46:80:3d:af: 0f:14:3b:0a:24:9d:9e:8e:98:10:82:f8:5e:be:b0:4f:fd:76: 57:73:dd:3c:b7:d1:7d:37:be:bd:ec:57:50:13:6d:25:7b:c8: d1:64:99:92:02:f8:ca:76:a1:4b:9c:a2:0f:6e:ff:92:7e:de: ac:12:b5:18:7f:e3:14:45:42:4c:85:6a:ea:a4:a4:2d:69:dc: 1b:e7:0c:d4:b2:6d:59:1e:ef:ee:bd:7c:64:2f:84:73:63:67: c9:4d:81:7c -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgICO0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjUxMjA4MDIxMTEwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM2MzNiZS0yNjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygBStUbYpyyRoLofPHoRKQME8BP8Ef0Ks/URR5XJ0h+7aNMyRwaJF6vMxQ2a IYJOVpAwVYwZrUMOUXiultkMmLHLL1iMuLEwPFreR+FtSnFRrA9Ko7Dt7NuH/QVP MuKOqcBgqJ/G603BPIAT4a13BHpIzcBGu19m4//tvcTalQ03bU+5Izzx8eTbN45n KAaV/U6zNX28wH5HyZ2KgY2oFxM2AImKjr7OCn5hv2PHEb7r7u9hfwy8hKACDR6+ wNE5LNCSezPrCxA6oxLcmp6fHgI1xAahgWA8uBl5iV54P/flD9gaakNrT2swNQbN RDpvtzxXo4EWm1v6zKRO13Ab1wIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFDNWGkdF 9A0W49tSUGkblN1n0H6LMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNzFDQ0ZERUVC NTIzMTFGMEJGMTlGRTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZQYIKwYBBQUHAQcBAf8E VjBUMFIEAgABMEwDBAAteEEwDAMEAmcftAMEAGcftgMEAXkAYAMEAMvSEAMEAsvS FAMEAcvSGgMEAMvSHwMEANJXxjAMAwQD0lfIAwQA0lfKAwQA0lfPMA0GCSqGSIb3 DQEBCwUAA4IBAQBx4iamZWmMUU+N5DYZk1+Xkk5xWdG5v7NQpkXGEO7X80uHkPXW IZSUDrU22m/VAzlMfoQz26K/Wdiz+IotIEufbmA+JT9DrDFQdzjJYpu5ugwADc56 SA8G3yo2+WVL61qppZ0LNqHGs5Z0MBy+7k9brgxiQsv2BL/QGM9QjjQZoEfp4Y/U TtjVyP/wWY+WmuJytw4Fx3Oa4n+rs3wSV0aAPa8PFDsKJJ2ejpgQgvhevrBP/XZX c908t9F9N7697FdQE20le8jRZJmSAvjKdqFLnKIPbv+Sft6sErUYf+MURUJMhWrq pKQtadwb5wzUsm1ZHu/uvXxkL4RzY2fJTYF8 -----END CERTIFICATE-----Generated at Tue Dec 9 18:12:35 2025 by rpki-client