This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/C3A9035CC8FF11F0BE76E779C4F9AE02.roa File: C3A9035CC8FF11F0BE76E779C4F9AE02.roa (raw, json) Hash identifier: jU5Md8Gh4CBr/ZHApHJnxAlGLX6cvpq9zc86CFRKi+8= Subject key identifier: 19:B3:48:3F:F1:50:78:34:DA:21:54:83:07:4F:1F:42:0C:CB:5F:0C Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Certificate serial: 028B Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/C3A9035CC8FF11F0BE76E779C4F9AE02.roa Signing time: Mon 24 Nov 2025 06:35:27 +0000 ROA not before: Mon 24 Nov 2025 06:35:27 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 395793 IP address blocks: 103.120.22.0/24 maxlen: 24 103.120.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 651 (0x28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Validity Not Before: Nov 24 06:35:27 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6923fcaf-a193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:98:b7:fa:f2:07:7e:b6:2f:10:6c:ee:d8:ab: 9c:5c:ce:5e:32:eb:fc:fd:c9:b7:51:92:c2:50:96: 63:02:03:a9:e1:6b:dd:2e:bf:8f:9a:c0:6a:43:04: f2:98:2f:55:cf:15:ec:0c:e7:10:95:32:7a:61:9e: f7:21:e7:a8:4a:9a:ce:ac:66:77:71:51:09:d0:cd: c7:54:49:a7:4a:c7:53:26:0c:a8:b1:05:b7:68:07: cd:ea:e2:8a:4a:ff:e0:1b:fd:a7:df:8a:05:a7:e3: 61:33:ce:33:63:65:1b:ba:cc:5b:ad:5b:8a:4e:c5: 68:15:28:26:73:ff:c5:cf:66:9d:69:d6:c1:48:69: de:1f:7d:48:e8:6e:e0:e9:fd:b6:36:b7:56:58:6a: 2e:73:45:a9:a5:c5:f1:de:ea:69:aa:91:61:0d:12: 30:ac:82:fc:99:64:8a:7f:6c:f1:5f:bf:c1:b1:8e: fe:f6:a0:cd:0a:32:e5:bf:71:b7:f2:35:31:8c:ed: 04:eb:18:5a:1e:70:b0:32:ff:63:51:1e:0f:3a:2e: a7:e3:95:29:93:73:59:c9:e6:5e:4e:61:e4:72:6a: ea:23:38:aa:75:80:09:29:9c:c7:27:81:7a:1a:1c: 43:c3:d6:bf:93:f4:2b:2e:65:d5:6a:1a:9d:6a:5e: c7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B3:48:3F:F1:50:78:34:DA:21:54:83:07:4F:1F:42:0C:CB:5F:0C X509v3 Authority Key Identifier: keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/C3A9035CC8FF11F0BE76E779C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.22.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:8b:c3:cf:5e:b9:71:66:a8:00:de:6c:d8:4c:83:8b:99:38: 13:ac:3a:ed:41:9b:1c:b8:39:91:c5:1c:f9:25:b6:e6:dd:aa: 03:0e:b8:a4:e2:53:01:5d:e6:45:bd:90:ee:73:5c:3a:cf:05: b8:02:da:4e:5b:9c:8c:84:b8:79:72:32:af:02:f5:d3:c8:e4: 94:ee:1c:b8:61:db:77:c8:fd:d5:d0:f5:c5:c4:9e:be:cb:2e: 46:00:6f:a1:65:37:00:32:c3:23:32:b8:24:fc:57:84:df:e8: 91:8f:e5:36:b0:e6:cb:bb:b3:c6:d9:eb:97:5d:8d:28:46:5b: 61:a1:92:38:d5:cd:31:57:93:27:0b:b8:ce:f3:8e:4d:aa:e5: 6c:67:2a:e4:48:68:b2:ac:ee:a1:dd:4f:fd:56:65:3b:12:d2: 4c:21:7c:4c:67:4b:0a:6f:21:b8:41:1e:98:56:d8:19:97:88: 5f:e1:c5:c6:6f:6d:4b:46:3b:2e:a0:33:cf:3a:f7:27:12:c6: 67:7a:fd:f8:72:f0:2a:4d:8e:ed:79:ca:d0:47:48:52:be:e7: 9f:6a:05:50:ae:54:e1:1a:91:47:04:9f:22:23:45:a0:cc:8f: 4d:80:b7:40:95:15:ab:12:97:be:00:7b:9b:67:4d:29:55:fb: a7:08:f1:35 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZCMzIxMTAvBgNVBAUTKEQ4MjJBMkRCQzg4MjM0RjgwRjcwRTQ2NzgyQjJENEQ5 Q0QzRjlCREMwHhcNMjUxMTI0MDYzNTI3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTIzZmNhZi1hMTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5i3+vIHfrYvEGzu2KucXM5eMuv8/cm3UZLCUJZjAgOp4WvdLr+PmsBqQwTy mC9VzxXsDOcQlTJ6YZ73IeeoSprOrGZ3cVEJ0M3HVEmnSsdTJgyosQW3aAfN6uKK Sv/gG/2n34oFp+NhM84zY2UbusxbrVuKTsVoFSgmc//Fz2adadbBSGneH31I6G7g 6f22NrdWWGouc0WppcXx3uppqpFhDRIwrIL8mWSKf2zxX7/BsY7+9qDNCjLlv3G3 8jUxjO0E6xhaHnCwMv9jUR4POi6n45Upk3NZyeZeTmHkcmrqIziqdYAJKZzHJ4F6 GhxDw9a/k/QrLmXVahqdal7HkwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBmzSD/x UHg02iFUgwdPH0IMy18MMB8GA1UdIwQYMBaAFNgiotvIgjT4D3DkZ4Ky1NnNP5vc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkIzMi83Mzg3OTYxODJG MzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05QZ1BjT1JuZ3JMVTJjMF9t OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDS2kyOGlDTlBnUGNPUm5nckxVMmMwX205dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzZCMzIvNzM4Nzk2MTgyRjM4MTFFRDlFN0UwMjdEQzRGOUFFMDIvQzNBOTAzNUND OEZGMTFGMEJFNzZFNzc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFneBYwDQYJKoZIhvcNAQELBQADggEBAE2Lw89euXFmqADe bNhMg4uZOBOsOu1Bmxy4OZHFHPkltubdqgMOuKTiUwFd5kW9kO5zXDrPBbgC2k5b nIyEuHlyMq8C9dPI5JTuHLhh23fI/dXQ9cXEnr7LLkYAb6FlNwAywyMyuCT8V4Tf 6JGP5Taw5su7s8bZ65ddjShGW2GhkjjVzTFXkycLuM7zjk2q5WxnKuRIaLKs7qHd T/1WZTsS0kwhfExnSwpvIbhBHphW2BmXiF/hxcZvbUtGOy6gM8869ycSxmd6/fhy 8CpNju15ytBHSFK+559qBVCuVOEakUcEnyIjRaDMj02At0CVFasSl74Ae5tnTSlV +6cI8TU= -----END CERTIFICATE-----Generated at Wed Dec 3 18:52:34 2025 by rpki-client