This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/AAFD18A2C41311F09C475973C4F9AE02.roa File: AAFD18A2C41311F09C475973C4F9AE02.roa (raw, json) Hash identifier: ciJooJ3mDrhc/pQ9MZIEsIxfLRTfAb/7w1io7xpnDfU= Subject key identifier: F5:B4:95:6E:46:33:96:16:93:41:24:F5:07:D7:B4:BC:A8:41:FD:9C Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3B0A Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/AAFD18A2C41311F09C475973C4F9AE02.roa Signing time: Tue 18 Nov 2025 00:18:08 +0000 ROA not before: Tue 18 Nov 2025 00:18:08 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 395793 IP address blocks: 101.53.80.0/24 maxlen: 24 101.53.86.0/24 maxlen: 24 101.53.93.0/24 maxlen: 24 182.237.53.0/24 maxlen: 24 182.237.63.0/24 maxlen: 24 203.173.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15114 (0x3b0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Nov 18 00:18:08 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=691bbb40-b8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d1:8a:48:c0:53:53:1a:61:a9:b9:97:45:45: 80:35:19:b9:88:3a:cf:33:da:41:24:f9:5c:44:c7: c9:82:b1:28:ae:7c:3d:7f:2c:f3:ae:83:fe:22:98: 5f:95:d3:1a:9b:4e:23:b4:36:ea:8b:d0:bd:eb:dc: 84:6c:27:48:cc:d3:28:99:ca:fd:70:69:8b:40:dd: f6:38:16:4a:7b:c1:c9:c1:3e:b5:e5:b3:f5:1d:53: 71:03:f5:d1:09:b3:fc:ab:46:27:18:f5:42:39:14: a8:16:37:87:4a:45:4a:ad:ce:17:07:d9:5a:f2:cd: 9d:1a:1a:66:b8:99:32:b0:81:68:8c:b3:aa:38:f2: 74:ab:7a:2a:18:0e:f0:e6:b4:1b:f8:fa:e8:0c:e5: 52:d7:9b:39:b8:3b:29:69:f8:08:2b:71:46:f7:b4: 54:e0:63:47:bd:0f:23:29:a9:7c:07:61:ec:7b:99: bf:2a:03:e5:ff:82:b9:31:a7:46:9d:8e:8b:2c:2d: ab:76:c8:ab:00:40:b5:6f:fa:2d:8e:fd:6c:a0:65: 0e:d0:40:49:f3:7e:7e:eb:12:68:dd:ad:cf:6f:9d: e0:e5:84:4f:92:f1:88:29:ca:b0:84:0f:54:67:ed: 35:48:67:9c:f8:04:d1:a1:9d:29:7e:d4:03:88:6d: 79:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B4:95:6E:46:33:96:16:93:41:24:F5:07:D7:B4:BC:A8:41:FD:9C X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/AAFD18A2C41311F09C475973C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.53.80.0/24 101.53.86.0/24 101.53.93.0/24 182.237.53.0/24 182.237.63.0/24 203.173.106.0/24 Signature Algorithm: sha256WithRSAEncryption 01:8d:ce:00:d6:f3:d3:fb:ca:af:29:82:bd:28:d0:8a:d4:28: e8:8c:d1:e1:b6:29:f9:9c:fc:2b:1c:06:5f:49:27:d6:05:5a: 55:3f:11:f7:88:e1:38:f4:8a:c3:fc:bd:45:ca:12:a4:0a:d2: b5:dd:7a:75:68:43:40:87:4c:ca:45:86:da:4e:7e:22:43:32: d7:6c:fe:34:ec:06:32:c2:c5:00:60:53:59:dc:24:8e:db:ea: ca:84:b6:2e:b4:4d:22:21:b9:69:56:df:2e:e8:e9:20:fa:e9: 71:c7:f7:58:b0:5d:3e:fc:ea:62:61:f1:0d:6d:84:90:42:bb: 74:21:3d:da:e0:88:a6:db:39:31:21:f8:e1:e1:21:16:76:0e: 4d:f4:ea:00:8a:91:85:a3:2a:c5:d6:92:1f:cf:9d:e3:03:d6: 6f:d4:c1:32:8d:91:c1:2e:42:f1:1a:2c:4e:8e:63:fa:63:20: ef:cb:c0:c1:2b:58:af:3f:3d:15:99:d2:ed:35:f2:17:6e:f5: 87:2d:25:c6:0d:c4:2b:8b:ca:74:34:c8:96:24:65:39:44:d1: 5b:bd:5b:ca:a0:87:00:a0:5c:b1:76:a4:64:da:94:14:02:31: ab:97:bb:3d:d5:bc:96:0d:84:f1:2b:c2:84:ec:ec:c5:d7:36: 3f:1b:18:6c -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICOwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjUxMTE4MDAxODA4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFiYmI0MC1iOGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NGKSMBTUxphqbmXRUWANRm5iDrPM9pBJPlcRMfJgrEornw9fyzzroP+Iphf ldMam04jtDbqi9C969yEbCdIzNMomcr9cGmLQN32OBZKe8HJwT615bP1HVNxA/XR CbP8q0YnGPVCORSoFjeHSkVKrc4XB9la8s2dGhpmuJkysIFojLOqOPJ0q3oqGA7w 5rQb+ProDOVS15s5uDspafgIK3FG97RU4GNHvQ8jKal8B2Hse5m/KgPl/4K5MadG nY6LLC2rdsirAEC1b/otjv1soGUO0EBJ835+6xJo3a3Pb53g5YRPkvGIKcqwhA9U Z+01SGec+ATRoZ0pftQDiG15cQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFPW0lW5G M5YWk0Ek9QfXtLyoQf2cMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvQUFGRDE4QTJD NDEzMTFGMDlDNDc1OTczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBABlNVADBABlNVYDBABlNV0DBAC27TUDBAC27T8DBADLrWow DQYJKoZIhvcNAQELBQADggEBAAGNzgDW89P7yq8pgr0o0IrUKOiM0eG2Kfmc/Csc Bl9JJ9YFWlU/EfeI4Tj0isP8vUXKEqQK0rXdenVoQ0CHTMpFhtpOfiJDMtds/jTs BjLCxQBgU1ncJI7b6sqEti60TSIhuWlW3y7o6SD66XHH91iwXT786mJh8Q1thJBC u3QhPdrgiKbbOTEh+OHhIRZ2Dk306gCKkYWjKsXWkh/PneMD1m/UwTKNkcEuQvEa LE6OY/pjIO/LwMErWK8/PRWZ0u018hdu9YctJcYNxCuLynQ0yJYkZTlE0Vu9W8qg hwCgXLF2pGTalBQCMauXuz3VvJYNhPErwoTs7MXXNj8bGGw= -----END CERTIFICATE-----Generated at Wed Dec 3 18:52:38 2025 by rpki-client