This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/1821352EA82D11F0A44D2F49C4F9AE02.roa File: 1821352EA82D11F0A44D2F49C4F9AE02.roa (raw, json) Hash identifier: 59YGH3d2E5WKtdDDd+SfH5rSD6g6BogQRvsB30CIBqk= Subject key identifier: 5B:10:B8:BD:95:33:2C:19:2F:C1:E1:70:08:69:9D:0B:12:5B:86:4C Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 0498 Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/1821352EA82D11F0A44D2F49C4F9AE02.roa Signing time: Wed 31 Dec 2025 06:54:49 +0000 ROA not before: Wed 31 Dec 2025 06:54:49 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 9009 IP address blocks: 43.228.156.0/24 maxlen: 24 43.228.157.0/24 maxlen: 24 43.228.158.0/24 maxlen: 24 43.228.159.0/24 maxlen: 24 103.47.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 08:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1176 (0x498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: Dec 31 06:54:49 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6954c8b9-82cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:96:9d:c0:64:6a:ff:18:a8:40:db:fb:bc:73: df:4f:ba:f2:69:f6:b1:b8:9d:43:ed:f9:f3:98:d7: a1:2d:64:1a:c4:89:18:25:e4:15:83:14:28:ec:2f: 6d:e4:b9:0d:48:5e:81:be:35:46:c4:05:cf:48:25: ae:46:5c:ea:83:35:b1:f9:7b:f8:0e:d3:42:3f:e0: 69:a5:a4:a6:85:0b:8e:21:eb:24:fd:bc:8c:dd:2a: 7c:cb:f9:ca:88:42:e1:4d:2a:59:d5:72:05:94:21: aa:39:da:d0:29:99:01:9c:79:c9:70:35:40:d4:f1: 16:e3:7c:9d:f6:d5:85:ce:39:45:68:28:0e:44:49: 1f:df:cb:1f:60:14:ca:35:74:34:01:bb:d5:0b:f7: 0e:70:43:b3:3c:b9:2a:74:8e:ac:98:09:99:e7:0c: 8f:3d:9d:d7:81:9c:4b:f8:aa:32:40:49:88:b0:d9: eb:86:db:aa:ee:fd:d6:c7:ba:75:7d:15:13:92:fe: 0c:a7:a8:35:a5:e7:c0:d2:01:71:42:fc:d9:7b:68: 48:98:1d:3d:74:7c:21:b9:22:85:4b:0e:b0:a4:86: 2d:d9:c2:e0:86:56:51:fd:2f:63:cf:b9:94:28:24: 65:ee:d6:f1:ef:23:38:07:ee:60:ed:73:54:20:50: 08:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:10:B8:BD:95:33:2C:19:2F:C1:E1:70:08:69:9D:0B:12:5B:86:4C X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/1821352EA82D11F0A44D2F49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.228.156.0/22 103.47.146.0/24 Signature Algorithm: sha256WithRSAEncryption 69:69:d8:3c:52:b7:ae:3b:f7:2d:1d:31:7d:43:b2:bb:2f:4a: 39:29:d9:ee:fe:b4:f3:bb:f0:80:92:bd:87:59:cf:cd:4a:eb: 58:4a:61:d9:c6:4e:57:bc:e7:4e:68:02:d7:ab:25:00:64:86: 21:50:48:17:24:67:36:2e:cd:c0:71:04:16:8d:f0:79:7c:ed: 9e:62:2b:6b:06:7f:1b:c3:b3:50:a9:51:b9:ec:57:de:8a:85: f2:bf:02:98:af:cc:22:73:41:de:91:57:e0:1d:51:64:14:74: 43:2c:02:b7:3e:bb:2b:10:c9:f9:af:f4:94:42:3b:fc:bb:cc: 87:a6:63:6d:0d:72:6e:ef:fe:88:2d:a8:c8:8c:17:4f:a9:ca: ee:bd:85:8c:b9:46:de:8c:02:c6:ea:05:5a:23:b2:20:1e:32: 62:ce:02:dc:48:44:f2:c8:8e:a6:40:b6:dc:88:05:b4:84:fd: a0:83:b4:fd:57:e3:a4:ee:ac:81:a5:f9:95:ce:48:78:98:cc: e8:6c:e2:8e:9c:26:2e:49:d1:e6:d8:b9:d2:c7:71:9c:6c:ec: f0:90:ce:06:ea:2a:56:40:ad:c4:60:16:4b:6f:49:c8:f9:d5: 1a:3e:1d:cc:47:7f:63:6c:a3:9a:d2:6e:71:08:88:d1:ec:c3: 8f:97:98:33 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjUxMjMxMDY1NDQ5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YzhiOS04MmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5adwGRq/xioQNv7vHPfT7ryafaxuJ1D7fnzmNehLWQaxIkYJeQVgxQo7C9t 5LkNSF6BvjVGxAXPSCWuRlzqgzWx+Xv4DtNCP+BppaSmhQuOIesk/byM3Sp8y/nK iELhTSpZ1XIFlCGqOdrQKZkBnHnJcDVA1PEW43yd9tWFzjlFaCgOREkf38sfYBTK NXQ0AbvVC/cOcEOzPLkqdI6smAmZ5wyPPZ3XgZxL+KoyQEmIsNnrhtuq7v3Wx7p1 fRUTkv4Mp6g1pefA0gFxQvzZe2hImB09dHwhuSKFSw6wpIYt2cLghlZR/S9jz7mU KCRl7tbx7yM4B+5g7XNUIFAIRQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFsQuL2V MywZL8HhcAhpnQsSW4ZMMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODNCOTUvQjU0QTNDMzQ4MDM1MTFFQzlBRERBNTRGQzRGOUFFMDIvMTgyMTM1MkVB ODJEMTFGMEE0NEQyRjQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr5JwDBABnL5IwDQYJKoZIhvcNAQELBQADggEBAGlp2DxS t6479y0dMX1DsrsvSjkp2e7+tPO78ICSvYdZz81K61hKYdnGTle8505oAterJQBk hiFQSBckZzYuzcBxBBaN8Hl87Z5iK2sGfxvDs1CpUbnsV96KhfK/ApivzCJzQd6R V+AdUWQUdEMsArc+uysQyfmv9JRCO/y7zIemY20Ncm7v/ogtqMiMF0+pyu69hYy5 Rt6MAsbqBVojsiAeMmLOAtxIRPLIjqZAttyIBbSE/aCDtP1X46TurIGl+ZXOSHiY zOhs4o6cJi5J0ebYudLHcZxs7PCQzgbqKlZArcRgFktvScj51Ro+HcxHf2Nso5rS bnEIiNHsw4+XmDM= -----END CERTIFICATE-----Generated at Sun Jan 18 08:57:33 2026 by rpki-client