This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/9B5A7020522911ED9136DF2AC4F9AE02.roa File: 9B5A7020522911ED9136DF2AC4F9AE02.roa (raw, json) Hash identifier: U4HDqfVRPcSHheMLaU3ezzM8r/N6LqtqPG5x337fpE8= Subject key identifier: 03:4E:45:56:25:EB:06:8D:79:3D:07:40:94:F6:1C:7D:38:10:D2:CA Certificate issuer: /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70 Certificate serial: 07A5 Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/9B5A7020522911ED9136DF2AC4F9AE02.roa Signing time: Mon 22 Dec 2025 21:17:45 +0000 ROA not before: Mon 22 Dec 2025 21:17:45 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 141448 IP address blocks: 103.159.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D85E, serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70 Validity Not Before: Dec 22 21:17:45 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6949b578-b6cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:15:36:3d:17:10:2b:8a:b6:54:69:1a:fd:2b: 41:23:7c:f5:c3:b7:2a:59:c2:7b:a9:bc:c5:a1:07: 0d:f6:d6:37:8f:ad:d4:ae:83:80:39:56:e5:1c:c7: 93:32:a4:ed:d5:26:55:68:56:9c:53:dd:86:ea:3c: ea:1f:4c:b7:8a:00:3e:25:52:cf:7a:d2:f8:c9:7c: 3f:85:b9:c0:e3:48:98:90:af:a1:47:a7:b2:e9:66: d7:db:ff:aa:94:13:42:c7:46:32:f9:f4:62:7e:3e: 45:c8:23:18:78:e7:38:76:99:71:53:bb:17:97:76: 0b:c9:f5:08:46:ab:98:19:91:8f:24:0c:eb:a0:cc: ae:7e:c0:03:22:f2:05:80:83:40:2c:2a:b7:bb:e2: 76:2c:3c:8f:b9:d1:69:93:b1:30:7d:36:2d:cb:03: 08:9c:52:0c:b2:f2:49:88:d9:45:c2:a8:fe:99:9c: 8f:48:5e:15:0f:6c:a8:8e:ac:07:d3:b7:ca:ea:5c: 83:2e:2e:d5:4e:60:5c:aa:e8:71:22:eb:1c:5e:53: 95:ea:79:45:98:34:94:5a:bc:aa:5f:8e:fd:00:1b: 60:66:8d:2f:d5:54:23:95:17:b0:4b:62:bf:0d:09: b6:3c:e8:96:b3:df:2d:57:fa:06:c6:ca:ac:a6:0c: dd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4E:45:56:25:EB:06:8D:79:3D:07:40:94:F6:1C:7D:38:10:D2:CA X509v3 Authority Key Identifier: keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/9B5A7020522911ED9136DF2AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.170.0/24 Signature Algorithm: sha256WithRSAEncryption 48:68:b0:51:a6:97:cb:2d:2d:ef:f7:07:99:9a:a1:ff:bd:18: d5:6b:1b:30:43:94:f6:85:a5:6d:82:89:60:5f:f1:a2:b7:5a: 22:30:29:bf:62:ab:3f:50:49:35:7a:ba:98:d0:e0:90:52:30: 54:59:26:c4:e2:3c:f9:39:ae:6d:25:a5:c3:ef:19:3f:33:64: 54:43:f0:21:a8:66:c7:4d:18:08:2c:07:ec:ad:fc:c6:73:d8: 1d:92:1c:89:20:d2:f1:ee:bd:d5:4c:18:56:b7:b0:f4:7b:45: 00:d3:9e:62:a0:e6:ee:a7:75:91:81:45:37:06:63:df:7a:c9: 76:5a:e3:ac:a9:0d:74:45:b4:cc:34:1b:5f:49:5d:b4:5c:94: 80:cf:b2:d8:35:5d:fb:bb:19:99:a6:7a:06:33:fa:38:e5:da: 1b:04:de:4c:39:5c:c6:5a:f6:0f:2c:f1:3d:af:64:19:2c:de: 11:2c:1d:40:e1:2a:0e:d6:16:e9:cf:ed:f2:7b:8a:46:0c:f7: cc:ed:00:1e:67:1c:4d:d0:bd:85:a0:aa:7a:94:48:16:71:79: 10:5b:30:0f:4f:22:1a:2a:b1:e2:cc:ce:68:05:55:53:86:c3: 25:07:62:ef:63:3d:e5:03:5b:e1:56:93:eb:c4:9f:68:3f:28: c2:c5:60:28 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NUQ4NUUxMTAvBgNVBAUTKEQ0NTgwNTFGNkRBOTUyMjk3NDc1QjQ4NEJEREQwRkJC RTM0OTBFNzAwHhcNMjUxMjIyMjExNzQ1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ5YjU3OC1iNmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhU2PRcQK4q2VGka/StBI3z1w7cqWcJ7qbzFoQcN9tY3j63UroOAOVblHMeT MqTt1SZVaFacU92G6jzqH0y3igA+JVLPetL4yXw/hbnA40iYkK+hR6ey6WbX2/+q lBNCx0Yy+fRifj5FyCMYeOc4dplxU7sXl3YLyfUIRquYGZGPJAzroMyufsADIvIF gINALCq3u+J2LDyPudFpk7EwfTYtywMInFIMsvJJiNlFwqj+mZyPSF4VD2yojqwH 07fK6lyDLi7VTmBcquhxIuscXlOV6nlFmDSUWryqX479ABtgZo0v1VQjlRewS2K/ DQm2POiWs98tV/oGxsqspgzdXQIDAQABo4IClTCCApEwHQYDVR0OBBYEFANORVYl 6waNeT0HQJT2HH04ENLKMB8GA1UdIwQYMBaAFNRYBR9tqVIpdHW0hL3dD7vjSQ5w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDg1RS83M0VGOTA5QzNC QjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVpbDBkYlNFdmQwUHUtTkpE bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGZ0ZIMjJwVWlsMGRiU0V2ZDBQdS1OSkRuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQ4NUUvNzNFRjkwOUMzQkI1MTFFQkI0RDEzNzdEQzRGOUFFMDIvOUI1QTcwMjA1 MjI5MTFFRDkxMzZERjJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnn6owDQYJKoZIhvcNAQELBQADggEBAEhosFGml8stLe/3 B5maof+9GNVrGzBDlPaFpW2CiWBf8aK3WiIwKb9iqz9QSTV6upjQ4JBSMFRZJsTi PPk5rm0lpcPvGT8zZFRD8CGoZsdNGAgsB+yt/MZz2B2SHIkg0vHuvdVMGFa3sPR7 RQDTnmKg5u6ndZGBRTcGY996yXZa46ypDXRFtMw0G19JXbRclIDPstg1Xfu7GZmm egYz+jjl2hsE3kw5XMZa9g8s8T2vZBks3hEsHUDhKg7WFunP7fJ7ikYM98ztAB5n HE3QvYWgqnqUSBZxeRBbMA9PIhoqseLMzmgFVVOGwyUHYu9jPeUDW+FWk+vEn2g/ KMLFYCg= -----END CERTIFICATE-----Generated at Tue Dec 23 02:03:41 2025 by rpki-client