This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/B9645EC65C2511EEAF0A215DC4F9AE02.roa File: B9645EC65C2511EEAF0A215DC4F9AE02.roa (raw, json) Hash identifier: 8DrAWcH1CiFZf57NBIX9LNcFjqWRNtaQ37ck4VIkxk0= Subject key identifier: A6:41:B5:B5:3C:F4:DE:D9:53:44:01:76:FA:2A:96:F0:43:16:98:A5 Certificate issuer: /CN=A9172E1E/serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8 Certificate serial: 01AB Authority key identifier: 30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/B9645EC65C2511EEAF0A215DC4F9AE02.roa Signing time: Sun 21 Dec 2025 03:23:34 +0000 ROA not before: Sun 21 Dec 2025 03:23:34 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 137192 IP address blocks: 103.104.156.0/22 maxlen: 22 103.104.156.0/24 maxlen: 24 103.104.157.0/24 maxlen: 24 103.104.158.0/24 maxlen: 24 103.104.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172E1E, serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8 Validity Not Before: Dec 21 03:23:34 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69476836-5ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3d:7e:4a:af:46:7a:86:d6:8d:62:79:4d:d3: ce:0b:95:93:4c:3c:2b:1b:11:2e:29:5b:a3:a2:e2: 70:63:0d:9e:8a:a6:fb:d6:94:14:cd:ea:be:9c:8a: c8:7e:d5:f1:0f:3f:42:ab:2b:bc:d6:47:76:ee:2a: d6:c0:b6:9f:4d:b9:73:50:d2:bc:4d:a0:15:d1:ce: 95:85:75:3a:fe:19:45:e5:ed:d7:da:32:8e:d8:56: 05:60:e8:e2:16:ce:26:6b:bd:f9:38:0e:51:2d:f2: a9:4b:2d:ee:64:e6:d5:0b:36:9e:c0:78:5c:fa:a1: e1:f2:12:70:37:1b:28:1d:ea:df:a5:b3:8b:ec:e4: a7:17:00:c0:01:e3:70:2d:a3:e7:e2:6c:bf:c5:59: 36:25:e1:2e:c8:58:2a:1e:d7:07:ce:38:6a:df:a5: 8c:80:80:aa:f7:af:d3:12:c5:92:4e:c6:fe:bc:f7: 9b:ee:4f:27:e6:ad:5f:2d:2a:a0:c3:a8:51:06:7f: 46:9f:78:d8:3f:bf:8b:3f:4b:fa:68:80:58:38:57: 87:1f:ce:9f:53:04:58:d8:59:22:e3:1d:5c:17:fc: ec:36:f9:35:d5:b7:e0:e5:36:ac:97:d5:11:b6:69: ab:35:e5:2f:3b:6f:1c:21:4d:5f:27:7f:2c:10:df: 4a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:41:B5:B5:3C:F4:DE:D9:53:44:01:76:FA:2A:96:F0:43:16:98:A5 X509v3 Authority Key Identifier: keyid:30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/B9645EC65C2511EEAF0A215DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.156.0/22 Signature Algorithm: sha256WithRSAEncryption 13:17:45:47:cc:11:4e:69:d2:ed:2b:2d:5d:44:9f:2a:4c:5f: 34:da:52:4c:79:3a:c1:5b:60:b4:e5:9a:08:98:cd:c2:30:34: 6c:e2:e3:65:45:85:77:9a:7a:ce:a6:0c:1e:68:bf:c1:8e:b0: f7:32:82:ac:4b:0c:36:74:b7:4f:f6:0e:fe:3b:cc:72:9c:21: b1:da:1f:04:3c:9f:93:f3:0b:b4:06:8b:4e:24:e3:13:7a:7e: 69:7e:6b:51:d9:40:73:f5:b0:2f:30:c4:fe:1f:99:05:9c:61: eb:28:5a:fb:c6:76:7a:a4:d5:7f:90:de:a0:1e:ca:64:cf:9e: 2c:4b:f0:1d:21:bd:78:0c:bb:1c:93:3c:e3:7e:d3:1c:25:b4: fe:21:48:18:9a:0f:ab:22:d1:3c:70:52:b1:cb:69:b3:be:81: a0:34:7a:7b:7c:f7:2b:15:f1:b0:f9:ef:b7:6c:45:ea:b6:64: f2:71:42:44:30:63:1f:75:7f:69:89:79:82:3d:c2:20:ef:29: 38:1b:bb:57:79:83:2d:26:3f:52:23:c3:45:c5:11:cd:c3:e4: 41:0c:73:81:19:6a:04:d1:a1:87:0f:9d:4d:31:b2:39:4e:00: ef:db:00:c0:88:70:11:52:bf:f8:2c:3c:db:83:a4:6d:1f:24: c8:a3:a6:28 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NzJFMUUxMTAvBgNVBAUTKDMwMTRERDM4N0IxN0YzMzg4NzNBMkE3QTM3RjgyNDRE OTM3MDJFQTgwHhcNMjUxMjIxMDMyMzM0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ3NjgzNi01ZGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzz1+Sq9GeobWjWJ5TdPOC5WTTDwrGxEuKVujouJwYw2eiqb71pQUzeq+nIrI ftXxDz9Cqyu81kd27irWwLafTblzUNK8TaAV0c6VhXU6/hlF5e3X2jKO2FYFYOji Fs4ma735OA5RLfKpSy3uZObVCzaewHhc+qHh8hJwNxsoHerfpbOL7OSnFwDAAeNw LaPn4my/xVk2JeEuyFgqHtcHzjhq36WMgICq96/TEsWSTsb+vPeb7k8n5q1fLSqg w6hRBn9Gn3jYP7+LP0v6aIBYOFeHH86fUwRY2Fki4x1cF/zsNvk11bfg5Tasl9UR tmmrNeUvO28cIU1fJ38sEN9K1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFKZBtbU8 9N7ZU0QBdvoqlvBDFpilMB8GA1UdIwQYMBaAFDAU3Th7F/M4hzoqejf4JE2TcC6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkUxRS8yNzg4MTdDMDVD MTMxMUVFQTkwNzE4M0RDNEY5QUUwMi9NQlRkT0hzWDh6aUhPaXA2Tl9na1RaTndM cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CVGRPSHNYOHppSE9pcDZOX2drVFpOd0xxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJFMUUvMjc4ODE3QzA1QzEzMTFFRUE5MDcxODNEQzRGOUFFMDIvQjk2NDVFQzY1 QzI1MTFFRUFGMEEyMTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnaJwwDQYJKoZIhvcNAQELBQADggEBABMXRUfMEU5p0u0r LV1EnypMXzTaUkx5OsFbYLTlmgiYzcIwNGzi42VFhXeaes6mDB5ov8GOsPcygqxL DDZ0t0/2Dv47zHKcIbHaHwQ8n5PzC7QGi04k4xN6fml+a1HZQHP1sC8wxP4fmQWc YesoWvvGdnqk1X+Q3qAeymTPnixL8B0hvXgMuxyTPON+0xwltP4hSBiaD6si0Txw UrHLabO+gaA0ent89ysV8bD577dsReq2ZPJxQkQwYx91f2mJeYI9wiDvKTgbu1d5 gy0mP1Ijw0XFEc3D5EEMc4EZagTRoYcPnU0xsjlOAO/bAMCIcBFSv/gsPNuDpG0f JMijpig= -----END CERTIFICATE-----Generated at Wed Dec 24 21:20:37 2025 by rpki-client