This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/25CC4486C5B811F092EE2F29C4F9AE02.roa File: 25CC4486C5B811F092EE2F29C4F9AE02.roa (raw, json) Hash identifier: j0WmWd/YQ/ExSA0i6w+NpW9jRurtYn/dmfUGXmMo7EU= Subject key identifier: 99:75:B5:80:BA:C1:65:F7:8A:BA:44:9E:7F:F6:B9:3B:C9:E9:7C:82 Certificate issuer: /CN=A9152705/serialNumber=6BEBC0212D6FED8321C8D6F0C5C9C4A66ED7117C Certificate serial: 24 Authority key identifier: 6B:EB:C0:21:2D:6F:ED:83:21:C8:D6:F0:C5:C9:C4:A6:6E:D7:11:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/25CC4486C5B811F092EE2F29C4F9AE02.roa Signing time: Thu 20 Nov 2025 02:25:15 +0000 ROA not before: Thu 20 Nov 2025 02:25:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 103.111.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152705, serialNumber=6BEBC0212D6FED8321C8D6F0C5C9C4A66ED7117C Validity Not Before: Nov 20 02:25:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=691e7c0b-6914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:55:39:18:08:48:92:ed:a0:fb:f9:7a:13:07: f1:c1:60:85:27:96:7e:3b:13:ea:65:0b:95:00:a9: f2:4f:b5:9b:0b:2b:51:11:4c:87:2f:52:f0:a2:6d: 8b:66:ad:d6:cb:83:a0:49:8f:fc:1c:c7:88:da:d0: c8:c5:50:1d:7b:03:76:d2:4f:ca:9c:ab:e2:ef:65: 2d:0f:cc:e0:03:0b:08:79:9a:70:f1:b2:49:48:58: 38:33:58:44:2d:c8:77:b4:95:96:44:bb:d3:04:d8: 57:9b:04:d3:7a:62:dd:f4:03:57:fa:d3:25:59:a4: 6f:16:76:45:a1:88:38:be:32:85:17:1e:ab:bd:da: bc:22:8e:1d:bc:24:8e:2a:b7:8b:b8:7e:39:01:ea: 7d:50:4a:46:19:c8:25:30:e6:4f:41:02:5b:b3:e2: 8a:38:6d:49:45:7b:26:70:4e:52:3d:ee:bf:df:b2: 06:00:0e:d5:00:76:6f:61:05:39:96:27:3e:2d:7d: a4:9a:eb:75:e5:cb:62:ee:70:4e:63:83:c9:68:fa: a1:d7:d3:38:54:a3:18:8c:f2:26:db:21:ad:21:84: bc:9d:6e:bf:44:b0:f0:8e:ba:af:fb:6d:8a:5b:2c: 5a:81:52:c6:7c:3a:73:58:c4:2d:45:73:19:cc:9d: ba:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:75:B5:80:BA:C1:65:F7:8A:BA:44:9E:7F:F6:B9:3B:C9:E9:7C:82 X509v3 Authority Key Identifier: keyid:6B:EB:C0:21:2D:6F:ED:83:21:C8:D6:F0:C5:C9:C4:A6:6E:D7:11:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/25CC4486C5B811F092EE2F29C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.32.0/24 Signature Algorithm: sha256WithRSAEncryption 41:2c:6a:16:f2:c9:83:bb:c8:28:71:65:0a:b0:33:32:19:ab: 77:05:7b:e0:2f:60:c7:8e:b8:67:b2:26:d8:13:66:53:84:d7: a6:a1:bd:78:29:a6:77:90:08:10:1f:01:e5:ac:bf:72:d9:15: 01:f8:ab:1c:1a:02:3a:3e:bb:34:06:33:66:b5:16:06:0b:a3: 58:b7:9f:71:cc:48:3c:40:d0:4e:f4:06:aa:38:9a:32:c5:2f: 34:81:9f:96:77:7e:5f:b2:8f:62:ac:c9:8e:91:c0:be:5d:48: fd:a1:37:d9:52:a1:d4:da:ce:28:2c:76:13:e8:f5:25:b6:3f: 5c:22:2e:3e:57:18:d9:c0:e8:20:d2:f3:b2:02:9a:fa:82:b6: 99:1e:5e:9c:16:a2:55:55:57:8e:6a:e7:e2:08:65:93:25:6e: 92:18:47:d2:07:c4:02:16:2c:2a:fc:85:76:ed:c8:73:92:9d: 22:1e:cf:d9:9c:37:27:65:e4:94:fe:e7:e0:78:b7:41:77:06: b4:73:cb:e8:a5:51:28:48:82:22:37:23:4e:ac:2b:a2:44:e7: 95:67:a4:f6:e3:55:1d:c7:a9:93:09:80:03:cf:c9:8e:c8:92: 8b:eb:d0:6b:3e:ca:47:81:4c:67:9d:7e:07:d9:3d:b6:1c:4e: f8:41:56:5d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjcwNTExMC8GA1UEBRMoNkJFQkMwMjEyRDZGRUQ4MzIxQzhENkYwQzVDOUM0QTY2 RUQ3MTE3QzAeFw0yNTExMjAwMjI1MTVaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWU3YzBiLTY5MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTVTkYCEiS7aD7+XoTB/HBYIUnln47E+plC5UAqfJPtZsLK1ERTIcvUvCibYtm rdbLg6BJj/wcx4ja0MjFUB17A3bST8qcq+LvZS0PzOADCwh5mnDxsklIWDgzWEQt yHe0lZZEu9ME2FebBNN6Yt30A1f60yVZpG8WdkWhiDi+MoUXHqu92rwijh28JI4q t4u4fjkB6n1QSkYZyCUw5k9BAluz4oo4bUlFeyZwTlI97r/fsgYADtUAdm9hBTmW Jz4tfaSa63Xly2LucE5jg8lo+qHX0zhUoxiM8ibbIa0hhLydbr9EsPCOuq/7bYpb LFqBUsZ8OnNYxC1FcxnMnbp7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUmXW1gLrB ZfeKukSef/a5O8npfIIwHwYDVR0jBBgwFoAUa+vAIS1v7YMhyNbwxcnEpm7XEXww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyNzA1LzYyNzYwRDI2OTJC RjExRjA5OUFDMTMyM0M0RjlBRTAyL2EtdkFJUzF2N1lNaHlOYnd4Y25FcG03WEVY dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYS12QUlTMXY3WU1oeU5id3hjbkVwbTdYRVh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjcwNS82Mjc2MEQyNjkyQkYxMUYwOTlBQzEzMjNDNEY5QUUwMi8yNUNDNDQ4NkM1 QjgxMUYwOTJFRTJGMjlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGdvIDANBgkqhkiG9w0BAQsFAAOCAQEAQSxqFvLJg7vIKHFl CrAzMhmrdwV74C9gx464Z7Im2BNmU4TXpqG9eCmmd5AIEB8B5ay/ctkVAfirHBoC Oj67NAYzZrUWBgujWLefccxIPEDQTvQGqjiaMsUvNIGflnd+X7KPYqzJjpHAvl1I /aE32VKh1NrOKCx2E+j1JbY/XCIuPlcY2cDoINLzsgKa+oK2mR5enBaiVVVXjmrn 4ghlkyVukhhH0gfEAhYsKvyFdu3Ic5KdIh7P2Zw3J2XklP7n4Hi3QXcGtHPL6KVR KEiCIjcjTqwrokTnlWek9uNVHcepkwmAA8/JjsiSi+vQaz7KR4FMZ51+B9k9thxO +EFWXQ== -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:53 2025 by rpki-client