This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/24A183BCCD7211EFA468C80CC4F9AE02.roa File: 24A183BCCD7211EFA468C80CC4F9AE02.roa (raw, json) Hash identifier: kpxZOyz/gOqzCyC1QEQBvqlOSc7Aj1wzp1GDFKrpQsc= Subject key identifier: 73:65:00:E9:6D:06:BD:C4:F1:C9:1A:C3:57:C1:93:75:9E:5E:4A:D4 Certificate issuer: /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Certificate serial: 010E Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/24A183BCCD7211EFA468C80CC4F9AE02.roa Signing time: Mon 01 Dec 2025 04:32:27 +0000 ROA not before: Mon 01 Dec 2025 04:32:27 +0000 ROA not after: Mon 30 Mar 2026 00:00:00 +0000 asID: 133858 IP address blocks: 103.40.164.0/23 maxlen: 23 103.40.164.0/24 maxlen: 24 103.40.165.0/24 maxlen: 24 2401:eca0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 04:07:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172A52, serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Validity Not Before: Dec 1 04:32:27 2025 GMT Not After : Mar 30 00:00:00 2026 GMT Subject: CN=692d1a5b-8023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:31:13:7b:34:0e:e0:37:e6:ea:e8:44:14: aa:12:3f:f3:41:bc:79:7c:b0:99:f5:54:47:d8:d2: b0:38:f1:37:51:05:d2:7a:68:b9:8d:5a:80:5c:bb: 38:75:cb:6b:d8:e8:71:e4:cb:a4:0d:e4:67:d5:0a: 76:d3:45:57:38:34:45:b3:10:38:d6:a8:a6:ef:22: 9a:a6:33:9a:fa:86:66:1d:d1:3b:3a:ad:3d:63:3d: 8c:26:eb:fb:7f:ec:77:fc:b5:62:e4:14:75:81:17: 42:ae:60:17:84:db:04:08:b3:c5:d3:37:1a:7b:1e: 47:2d:6e:e4:63:0a:eb:d5:39:f1:9d:e3:c5:84:92: 27:17:e2:a4:c3:27:e2:08:78:69:d7:80:c4:e3:89: af:04:a0:ac:c9:d1:6a:83:4f:e2:54:0c:53:2f:8b: 2f:3f:0c:06:7b:7c:68:20:88:58:c1:ac:93:52:1f: 8f:5e:80:32:a4:ef:f4:04:c7:8d:b4:84:50:c6:d0: cb:0a:e2:97:b4:b0:6f:e5:2e:e7:5b:c5:21:82:a2: 17:25:70:3c:d9:73:03:6a:8c:ec:5d:01:cc:4a:28: 00:8f:19:a7:72:19:c9:f5:df:41:23:66:4d:aa:0f: 04:c3:56:08:98:8b:46:a4:5a:de:c7:8c:a4:96:a4: dd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:65:00:E9:6D:06:BD:C4:F1:C9:1A:C3:57:C1:93:75:9E:5E:4A:D4 X509v3 Authority Key Identifier: keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/24A183BCCD7211EFA468C80CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.164.0/23 IPv6: 2401:eca0:1::/48 Signature Algorithm: sha256WithRSAEncryption 6e:30:d5:e1:2b:33:19:f7:55:9e:a0:21:3f:4f:73:26:cf:c2: 3c:8a:53:5a:13:36:04:20:af:f8:5d:58:60:a0:20:2e:c8:93: 93:e6:ce:36:17:6a:6e:a2:0b:0b:75:d6:37:7d:c9:68:4c:16: 97:c5:6f:05:c5:c7:b7:f9:fb:59:1b:c4:90:1e:85:0e:f9:16: b0:11:2f:80:83:4b:95:b7:34:31:9f:c5:3a:03:51:cf:3e:42: 75:37:c5:57:fa:8b:82:a7:2c:8c:da:0f:a8:80:12:ed:e9:0f: 30:cf:a0:a2:98:5d:39:e4:a5:2d:58:9a:04:6a:e9:56:a1:73: e4:d4:ee:d0:5c:3f:b3:58:3e:a7:19:5e:dc:bd:d3:f9:9a:52: 34:15:38:9e:ad:44:d1:73:e7:8d:9e:cf:3c:12:43:b4:68:31: 9c:66:ee:88:30:ce:58:e7:5b:9c:7a:70:6c:6d:95:3e:4a:23: 1d:ee:37:aa:74:dd:51:19:65:1e:fb:29:9f:f5:a9:b1:05:61: d7:cc:e3:80:c5:89:7f:88:e9:34:60:92:0a:ec:10:f5:8c:71: b2:21:ac:cc:92:36:a4:96:28:3e:69:79:29:f7:2c:c3:00:bc: 8c:25:d2:37:02:33:c8:88:a7:f1:72:a2:ad:4d:88:4d:b6:91: c6:9c:0c:89 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJBNTIxMTAvBgNVBAUTKDY3NEFDNTdDMDk5ODc2QTA2NjU3MTgwQjM0RTI0RTZF RUU4ODQ0MTEwHhcNMjUxMjAxMDQzMjI3WhcNMjYwMzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJkMWE1Yi04MDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAug4xE3s0DuA35uroRBSqEj/zQbx5fLCZ9VRH2NKwOPE3UQXSemi5jVqAXLs4 dctr2Ohx5MukDeRn1Qp200VXODRFsxA41qim7yKapjOa+oZmHdE7Oq09Yz2MJuv7 f+x3/LVi5BR1gRdCrmAXhNsECLPF0zcaex5HLW7kYwrr1TnxnePFhJInF+Kkwyfi CHhp14DE44mvBKCsydFqg0/iVAxTL4svPwwGe3xoIIhYwayTUh+PXoAypO/0BMeN tIRQxtDLCuKXtLBv5S7nW8UhgqIXJXA82XMDaozsXQHMSigAjxmnchnJ9d9BI2ZN qg8Ew1YImItGpFrex4yklqTdlQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHNlAOlt Br3E8ckaw1fBk3WeXkrUMB8GA1UdIwQYMBaAFGdKxXwJmHagZlcYCzTiTm7uiEQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkE1Mi8zRTc2RDdFRTk4 MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRxQm1WeGdMTk9KT2J1NklS QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owckZmQW1ZZHFCbVZ4Z0xOT0pPYnU2SVJCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJBNTIvM0U3NkQ3RUU5ODE5MTFFRkIwRDBERDM0QzRGOUFFMDIvMjRBMTgzQkND RDcyMTFFRkE0NjhDODBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnKKQwDwQCAAIwCQMHACQB7KAAATANBgkqhkiG9w0BAQsF AAOCAQEAbjDV4SszGfdVnqAhP09zJs/CPIpTWhM2BCCv+F1YYKAgLsiTk+bONhdq bqILC3XWN33JaEwWl8VvBcXHt/n7WRvEkB6FDvkWsBEvgINLlbc0MZ/FOgNRzz5C dTfFV/qLgqcsjNoPqIAS7ekPMM+gophdOeSlLViaBGrpVqFz5NTu0Fw/s1g+pxle 3L3T+ZpSNBU4nq1E0XPnjZ7PPBJDtGgxnGbuiDDOWOdbnHpwbG2VPkojHe43qnTd URllHvspn/WpsQVh18zjgMWJf4jpNGCSCuwQ9YxxsiGszJI2pJYoPml5KfcswwC8 jCXSNwIzyIin8XKirU2ITbaRxpwMiQ== -----END CERTIFICATE-----Generated at Thu Dec 4 12:19:14 2025 by rpki-client