This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/473BC6AAAE5C11F089298455C4F9AE02.roa File: 473BC6AAAE5C11F089298455C4F9AE02.roa (raw, json) Hash identifier: Z7jRt9rPjXcH8cd90zTUtzFnJzr2+fuFhP1bhCXrDpE= Subject key identifier: 7F:41:DF:45:DF:B5:C2:F3:28:38:B8:FA:2D:2C:EC:05:5C:70:80:BE Certificate issuer: /CN=A9196DC9/serialNumber=006FFA31E9D00216919D89F8B3E7DBEDF7EF96B3 Certificate serial: 20 Authority key identifier: 00:6F:FA:31:E9:D0:02:16:91:9D:89:F8:B3:E7:DB:ED:F7:EF:96:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AG_6MenQAhaRnYn4s-fb7ffvlrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/473BC6AAAE5C11F089298455C4F9AE02.roa Signing time: Thu 11 Dec 2025 10:18:53 +0000 ROA not before: Thu 11 Dec 2025 10:18:53 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 18187 IP address blocks: 103.73.68.0/22 maxlen: 22 103.73.68.0/23 maxlen: 24 103.73.70.0/23 maxlen: 24 122.49.208.0/20 maxlen: 20 122.49.223.0/24 maxlen: 24 203.82.32.0/20 maxlen: 20 216.250.100.0/22 maxlen: 22 216.250.103.0/24 maxlen: 24 2402:1b20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.crl rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AG_6MenQAhaRnYn4s-fb7ffvlrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DC9, serialNumber=006FFA31E9D00216919D89F8B3E7DBEDF7EF96B3 Validity Not Before: Dec 11 10:18:53 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=693a9a8d-ba9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9e:37:73:21:ec:d5:87:42:85:34:3f:13:da: 15:69:2c:09:6f:ce:fa:3b:b5:4d:37:04:e0:9d:c1: 91:f5:de:1b:c4:91:5f:b0:9b:36:db:2a:48:e5:c3: 7c:40:47:84:32:77:89:02:f8:56:8a:fb:b4:87:97: dd:f4:61:a2:4c:f0:15:e6:a8:dc:58:25:e2:1c:74: 77:3d:16:15:65:92:9d:1e:94:19:48:0e:e2:df:66: 79:17:97:97:42:6c:a1:0c:01:aa:40:e3:35:b1:8a: 29:81:6e:c9:24:47:06:e3:cd:2f:1e:64:71:34:fc: d9:bb:89:2f:71:92:e8:0d:42:30:62:35:3d:c6:57: 08:f4:21:82:61:5c:8a:9c:71:3b:91:1a:1c:2d:90: 21:8d:9c:a4:af:d7:a5:6b:d0:4e:7b:c1:0b:51:2a: ab:1a:bb:da:1d:c7:ea:2b:fb:67:95:52:f0:85:b4: 08:64:33:e7:a8:dd:79:4b:37:3f:0b:2e:3e:c0:e2: d7:91:e1:59:c3:1e:28:fd:ba:bb:b6:fe:d7:14:ec: 35:3f:4d:e9:5c:b4:af:3d:fa:a8:5c:b5:b2:7d:78: c7:fc:6b:a4:19:4f:85:94:dd:df:bf:12:f5:1c:17: 9a:50:c0:1a:7e:fd:f2:1b:5c:36:d9:4a:97:19:1d: 03:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:41:DF:45:DF:B5:C2:F3:28:38:B8:FA:2D:2C:EC:05:5C:70:80:BE X509v3 Authority Key Identifier: keyid:00:6F:FA:31:E9:D0:02:16:91:9D:89:F8:B3:E7:DB:ED:F7:EF:96:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AG_6MenQAhaRnYn4s-fb7ffvlrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/473BC6AAAE5C11F089298455C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.73.68.0/22 122.49.208.0/20 203.82.32.0/20 216.250.100.0/22 IPv6: 2402:1b20::/32 Signature Algorithm: sha256WithRSAEncryption 8f:73:6e:13:ec:7a:05:10:3e:87:f7:98:9d:5b:ce:93:cc:cb: e0:09:e4:1d:fd:da:21:fd:ee:77:1c:9c:83:2e:eb:2f:48:49: 93:e5:05:14:6f:f8:9e:28:65:ab:fe:0e:b1:f7:4b:e6:e4:7e: fa:0d:63:54:15:0e:86:e4:b0:c1:13:64:4c:69:63:20:91:00: 9c:59:b1:08:3c:2b:73:93:b4:fa:ef:1d:dd:54:40:4b:48:e4: 95:7f:85:4f:bb:1f:ee:26:96:f3:27:13:2a:8a:88:10:84:ca: fa:a4:91:34:bf:24:a1:fc:d4:eb:73:cb:cd:67:37:a2:6f:85: 95:28:6c:8b:24:31:44:92:1d:f8:6b:52:47:43:51:33:03:35: 63:46:fc:61:3b:4e:d5:3e:29:2a:6c:19:62:97:2e:73:be:2f: 7e:b3:42:50:cb:6e:8b:3d:0c:ec:25:8a:88:3a:0a:2f:b9:a1: c6:f1:8e:f0:32:74:e2:ae:ee:5c:0d:d1:69:2e:d0:44:b4:72: 53:68:ae:6a:29:1c:f2:3e:8e:cd:cb:97:ea:32:18:65:11:ad: 9a:46:b0:7e:4c:73:93:4b:5b:93:1c:bf:2b:69:87:21:7e:b6: 8d:46:a1:53:72:f9:6a:93:b8:47:e4:3b:25:25:e5:f5:f1:64: ec:1f:f3:83 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkRDOTExMC8GA1UEBRMoMDA2RkZBMzFFOUQwMDIxNjkxOUQ4OUY4QjNFN0RCRURG N0VGOTZCMzAeFw0yNTEyMTExMDE4NTNaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5M2E5YThkLWJhOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDinjdzIezVh0KFND8T2hVpLAlvzvo7tU03BOCdwZH13hvEkV+wmzbbKkjlw3xA R4Qyd4kC+FaK+7SHl930YaJM8BXmqNxYJeIcdHc9FhVlkp0elBlIDuLfZnkXl5dC bKEMAapA4zWxiimBbskkRwbjzS8eZHE0/Nm7iS9xkugNQjBiNT3GVwj0IYJhXIqc cTuRGhwtkCGNnKSv16Vr0E57wQtRKqsau9odx+or+2eVUvCFtAhkM+eo3XlLNz8L Lj7A4teR4VnDHij9uru2/tcU7DU/TelctK89+qhctbJ9eMf8a6QZT4WU3d+/EvUc F5pQwBp+/fIbXDbZSpcZHQN/AgMBAAGjggK2MIICsjAdBgNVHQ4EFgQUf0HfRd+1 wvMoOLj6LSzsBVxwgL4wHwYDVR0jBBgwFoAUAG/6MenQAhaRnYn4s+fb7ffvlrMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2REM5LzE4MDYyMzlBQUU1 QjExRjA4QzdDQUM1M0M0RjlBRTAyL0FHXzZNZW5RQWhhUm5ZbjRzLWZiN2Zmdmxy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUdfNk1lblFBaGFSblluNHMtZmI3ZmZ2bHJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRDOS8xODA2MjM5QUFFNUIxMUYwOEM3Q0FDNTNDNEY5QUUwMi80NzNCQzZBQUFF NUMxMUYwODkyOTg0NTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBABggrBgEFBQcBBwEB/wQx MC8wHgQCAAEwGAMEAmdJRAMEBHox0AMEBMtSIAMEAtj6ZDANBAIAAjAHAwUAJAIb IDANBgkqhkiG9w0BAQsFAAOCAQEAj3NuE+x6BRA+h/eYnVvOk8zL4AnkHf3aIf3u dxycgy7rL0hJk+UFFG/4nihlq/4OsfdL5uR++g1jVBUOhuSwwRNkTGljIJEAnFmx CDwrc5O0+u8d3VRAS0jklX+FT7sf7iaW8ycTKoqIEITK+qSRNL8kofzU63PLzWc3 om+FlShsiyQxRJId+GtSR0NRMwM1Y0b8YTtO1T4pKmwZYpcuc74vfrNCUMtuiz0M 7CWKiDoKL7mhxvGO8DJ04q7uXA3RaS7QRLRyU2iuaikc8j6OzcuX6jIYZRGtmkaw fkxzk0tbkxy/K2mHIX62jUahU3L5apO4R+Q7JSXl9fFk7B/zgw== -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:42 2025 by rpki-client