This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/02DB5704B0F211E58974874FC4F9AE02.roa File: 02DB5704B0F211E58974874FC4F9AE02.roa (raw, json) Hash identifier: e0co4Hat6DA/r50rufv9AFKb2G1kzZANUtcERsSzuVM= Subject key identifier: 3E:A2:75:2C:91:10:51:89:6F:87:D3:64:A3:E9:56:8F:03:3B:5B:FE Certificate issuer: /CN=A9186C66/serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736 Certificate serial: 2680 Authority key identifier: 3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/02DB5704B0F211E58974874FC4F9AE02.roa Signing time: Thu 04 Dec 2025 15:43:15 +0000 ROA not before: Thu 04 Dec 2025 15:43:15 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 55828 IP address blocks: 45.115.112.0/22 maxlen: 22 45.115.112.0/24 maxlen: 24 45.115.113.0/24 maxlen: 24 45.115.114.0/24 maxlen: 24 45.115.115.0/24 maxlen: 24 103.10.52.0/22 maxlen: 22 103.10.52.0/24 maxlen: 24 103.10.53.0/24 maxlen: 24 103.10.54.0/24 maxlen: 24 103.10.55.0/24 maxlen: 24 121.200.60.0/22 maxlen: 22 121.200.60.0/24 maxlen: 24 121.200.61.0/24 maxlen: 24 121.200.62.0/24 maxlen: 24 121.200.63.0/24 maxlen: 24 2401:3300::/32 maxlen: 32 2401:3300::/33 maxlen: 33 2401:3300::/34 maxlen: 34 2401:3300::/35 maxlen: 35 2401:3300::/36 maxlen: 36 2401:3300::/37 maxlen: 37 2401:3300::/38 maxlen: 38 2401:3300::/39 maxlen: 39 2401:3300::/40 maxlen: 40 2401:3300::/41 maxlen: 41 2401:3300::/42 maxlen: 42 2401:3300::/43 maxlen: 43 2401:3300::/44 maxlen: 44 2401:3300::/45 maxlen: 45 2401:3300::/46 maxlen: 46 2401:3300::/47 maxlen: 47 2401:3300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9856 (0x2680) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186C66, serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736 Validity Not Before: Dec 4 15:43:15 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6931ac12-9f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:87:13:a3:2e:90:38:d5:b9:bc:9a:55:c5: d5:cf:6c:77:f7:05:6b:6d:3a:2a:b6:e7:23:88:8d: 40:22:f6:35:92:a2:c8:09:ed:73:41:0e:d7:dd:ce: 3a:4a:67:54:f2:56:35:b2:cc:97:1b:ad:43:9c:76: c7:0b:92:32:77:4f:96:cd:1c:30:5e:65:32:2f:4e: e5:d9:40:64:1c:de:96:43:8d:e6:d2:8e:0d:cc:b8: 12:23:9e:2a:9b:d2:32:a1:27:3f:95:6f:bf:2a:ce: ce:a1:e5:83:c7:50:3b:d7:b5:29:b5:1b:18:66:47: aa:ac:cb:d8:7e:52:55:dc:36:17:b7:48:d3:03:52: 5d:4b:f2:79:de:1d:1c:eb:8e:2f:e8:e9:07:15:fd: bd:7e:6f:f7:a4:28:2c:f1:90:d5:a5:dc:f8:4b:b7: cd:38:61:21:26:d2:bd:a5:d2:59:a8:c3:5e:c5:4a: 3e:df:64:45:78:b3:6b:52:03:57:2f:23:49:7e:8f: 0b:30:7b:4c:b2:75:84:84:37:e9:54:4b:af:f2:4e: 27:32:68:43:6b:49:70:49:b3:7f:2d:18:91:76:f0: 6a:14:3a:ce:77:cd:a8:ef:9d:32:6d:69:54:18:1a: b2:14:02:f0:df:ed:30:9b:6d:9d:d0:f1:26:b7:8d: 75:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A2:75:2C:91:10:51:89:6F:87:D3:64:A3:E9:56:8F:03:3B:5B:FE X509v3 Authority Key Identifier: keyid:3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/02DB5704B0F211E58974874FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.115.112.0/22 103.10.52.0/22 121.200.60.0/22 IPv6: 2401:3300::/32 Signature Algorithm: sha256WithRSAEncryption 85:a4:84:1c:49:4a:0f:ec:16:2d:df:40:fb:df:de:60:3e:fe: 1b:dd:57:03:2a:33:7b:e7:0e:25:41:ad:b5:36:d1:f0:75:0b: 1a:f3:c0:e8:61:1e:bd:fc:b4:b6:e0:a8:79:5c:08:ce:3d:42: c9:58:e1:4c:fd:32:3f:23:85:47:99:fa:61:81:a6:2b:d0:8f: 58:1a:d0:14:be:e8:6c:1e:46:c6:97:a1:3b:5d:02:67:8c:92: ad:98:7a:2b:de:d7:cb:f8:ae:0b:47:7e:b9:d2:7c:c0:88:f0: ca:f8:e4:bc:45:65:9b:0c:07:88:25:75:cb:0f:eb:9a:5f:b9: 2c:ef:a1:aa:ce:59:3a:27:bf:7b:b6:ca:90:37:a0:70:cb:10: ca:3a:20:2e:9a:62:cf:4b:13:e1:f4:41:a7:e7:79:34:ff:72: f2:a3:78:a1:2d:72:5d:00:ab:8e:b2:90:8e:d6:c6:c4:47:61: 28:9c:70:09:9d:38:14:96:0f:b8:4e:25:17:16:de:ef:b0:e8: de:fb:36:9f:d1:2e:91:5c:46:d3:18:3d:cc:0e:c9:fb:d2:f8: d9:0f:84:97:19:77:b1:e8:11:76:2f:fd:ff:cc:4d:fb:f3:ff: 2d:6e:89:bd:d2:90:01:77:dd:52:65:14:56:74:96:7e:52:e1: db:fd:79:b4 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICJoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDNjYxMTAvBgNVBAUTKDNCMEJDNTU2NTBBQTQ2QjE3OEIzRTE3NDIzMDAwQkQ5 ODFDQTY3MzYwHhcNMjUxMjA0MTU0MzE1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMxYWMxMi05Zjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxduHE6MukDjVubyaVcXVz2x39wVrbToqtucjiI1AIvY1kqLICe1zQQ7X3c46 SmdU8lY1ssyXG61DnHbHC5Iyd0+WzRwwXmUyL07l2UBkHN6WQ43m0o4NzLgSI54q m9IyoSc/lW+/Ks7OoeWDx1A717UptRsYZkeqrMvYflJV3DYXt0jTA1JdS/J53h0c 644v6OkHFf29fm/3pCgs8ZDVpdz4S7fNOGEhJtK9pdJZqMNexUo+32RFeLNrUgNX LyNJfo8LMHtMsnWEhDfpVEuv8k4nMmhDa0lwSbN/LRiRdvBqFDrOd82o750ybWlU GBqyFALw3+0wm22d0PEmt411kQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFD6idSyR EFGJb4fTZKPpVo8DO1v+MB8GA1UdIwQYMBaAFDsLxVZQqkaxeLPhdCMAC9mBymc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkM2Ni84RkI5NThGQUY4 NkIxMUU0ODMxNjczNjBDNEY5QUUwMi9Pd3ZGVmxDcVJyRjRzLUYwSXdBTDJZSEta elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL093dkZWbENxUnJGNHMtRjBJd0FMMllIS1p6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODZDNjYvOEZCOTU4RkFGODZCMTFFNDgzMTY3MzYwQzRGOUFFMDIvMDJEQjU3MDRC MEYyMTFFNTg5NzQ4NzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAItc3ADBAJnCjQDBAJ5yDwwDQQCAAIwBwMFACQBMwAwDQYJ KoZIhvcNAQELBQADggEBAIWkhBxJSg/sFi3fQPvf3mA+/hvdVwMqM3vnDiVBrbU2 0fB1CxrzwOhhHr38tLbgqHlcCM49QslY4Uz9Mj8jhUeZ+mGBpivQj1ga0BS+6Gwe RsaXoTtdAmeMkq2Yeive18v4rgtHfrnSfMCI8Mr45LxFZZsMB4gldcsP65pfuSzv oarOWTonv3u2ypA3oHDLEMo6IC6aYs9LE+H0QafneTT/cvKjeKEtcl0Aq46ykI7W xsRHYSiccAmdOBSWD7hOJRcW3u+w6N77Np/RLpFcRtMYPcwOyfvS+NkPhJcZd7Ho EXYv/f/MTfvz/y1uib3SkAF33VJlFFZ0ln5S4dv9ebQ= -----END CERTIFICATE-----Generated at Wed Dec 24 15:58:47 2025 by rpki-client