This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/CD168A226C2111EFB0ACC153C4F9AE02.roa File: CD168A226C2111EFB0ACC153C4F9AE02.roa (raw, json) Hash identifier: a0YXOVulD+hYfXuD6zBhrDZiB68iSbQecRvBLMaU9gM= Subject key identifier: 8C:FB:0D:1E:71:48:69:CA:83:12:B2:76:9E:AD:90:40:EA:CC:69:8C Certificate issuer: /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Certificate serial: 0200 Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/CD168A226C2111EFB0ACC153C4F9AE02.roa Signing time: Thu 25 Dec 2025 02:23:06 +0000 ROA not before: Thu 25 Dec 2025 02:23:06 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 153318 IP address blocks: 45.115.119.0/24 maxlen: 24 103.57.17.0/24 maxlen: 24 103.57.18.0/24 maxlen: 24 103.57.19.0/24 maxlen: 24 202.6.80.0/24 maxlen: 24 203.153.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 02:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197390, serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Validity Not Before: Dec 25 02:23:06 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=694ca00a-d49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2c:bc:70:ee:bf:9f:a0:4f:c4:fd:7b:07:3a: d8:39:f4:0e:ed:78:15:de:d7:64:23:6f:d9:11:24: bc:07:1d:61:90:e1:c5:54:cb:63:b7:77:bf:8b:18: 21:59:42:29:e6:f3:b0:2c:15:2e:69:25:05:8e:09: 7f:8c:e8:d4:8f:2f:bf:4a:1e:1e:ad:50:e6:06:00: 64:3b:31:d7:13:bd:c9:37:fe:1a:87:90:b7:ee:75: be:df:96:c8:10:4d:47:6d:d3:8e:73:db:16:0f:10: 8f:60:ce:a1:7c:20:c4:76:f9:45:11:ba:8f:ee:80: 29:2e:e6:a0:0c:6a:8e:95:7a:a1:f2:5d:a7:cc:6a: f9:dd:17:9d:0f:3d:4f:a5:05:df:09:f3:ec:48:41: 8b:37:60:9c:4d:c2:0f:fe:98:ca:95:3f:a9:3d:47: 4b:4d:3f:da:d2:f4:1a:32:76:6f:17:7e:c6:85:66: 8f:16:e6:1d:b8:99:fd:82:49:1d:d2:a9:63:8e:8d: ec:65:09:c2:b7:43:c8:9f:af:d1:a0:54:42:0c:37: 7b:13:12:34:25:7b:2a:d6:23:5f:6a:4b:cd:6b:6d: 2c:df:8a:55:0a:d6:fa:05:88:f5:d3:1d:e9:25:67: e1:02:73:b4:17:26:f3:08:fd:c7:dc:68:26:f7:01: 4f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FB:0D:1E:71:48:69:CA:83:12:B2:76:9E:AD:90:40:EA:CC:69:8C X509v3 Authority Key Identifier: keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/CD168A226C2111EFB0ACC153C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.115.119.0/24 103.57.17.0-103.57.19.255 202.6.80.0/24 203.153.208.0/24 Signature Algorithm: sha256WithRSAEncryption af:0a:9c:b2:c6:9b:1e:ab:1c:4f:39:df:de:be:c3:5d:b9:b8: 3f:a2:6b:66:2b:b0:db:84:46:e2:28:75:6a:aa:d6:02:90:20: 8b:09:7f:90:97:22:c6:28:8f:57:f5:8b:18:e0:f8:01:14:c5: 1b:03:e6:4e:68:9d:38:8d:2b:61:60:7c:e6:cb:37:12:3c:79: ca:13:a9:21:fb:f9:73:25:bf:33:9d:3b:28:da:54:92:74:70: cf:5b:c7:50:96:92:54:e8:f6:5c:47:b9:b2:41:27:6a:f3:52: 51:0a:89:ee:c8:18:ee:a3:3f:f1:df:48:af:23:66:3b:fd:7f: 8c:35:92:bb:b2:17:6f:23:a9:0d:97:e6:64:fd:3e:a5:99:35: c0:af:bc:91:37:c7:52:5d:ea:55:29:4f:3b:02:a6:c0:30:d2: 61:f8:6f:b3:98:81:d7:e2:53:30:17:36:93:24:d4:ec:a3:bd: 6d:41:db:13:a7:fc:44:1d:e1:55:d1:08:8b:ff:e6:b0:9f:ed: f9:45:14:26:1a:00:03:c3:ce:b4:3a:ba:03:e2:7c:77:46:9c: 6e:f1:cb:35:25:32:b4:4f:81:fc:9a:3a:aa:72:cb:88:f2:d7: 70:0a:91:c9:dd:5a:b7:b9:a4:74:5e:38:8e:34:7f:93:27:4e: 9c:4d:fd:ee -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx OTczOTAxMTAvBgNVBAUTKEExMzVCODE0RTFFQjFFMjdDOTU5N0VFRDJFODIyODU0 OTMwRDNGQ0YwHhcNMjUxMjI1MDIyMzA2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTRjYTAwYS1kNDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4iy8cO6/n6BPxP17BzrYOfQO7XgV3tdkI2/ZESS8Bx1hkOHFVMtjt3e/ixgh WUIp5vOwLBUuaSUFjgl/jOjUjy+/Sh4erVDmBgBkOzHXE73JN/4ah5C37nW+35bI EE1HbdOOc9sWDxCPYM6hfCDEdvlFEbqP7oApLuagDGqOlXqh8l2nzGr53RedDz1P pQXfCfPsSEGLN2CcTcIP/pjKlT+pPUdLTT/a0vQaMnZvF37GhWaPFuYduJn9gkkd 0qljjo3sZQnCt0PIn6/RoFRCDDd7ExI0JXsq1iNfakvNa20s34pVCtb6BYj10x3p JWfhAnO0FybzCP3H3Ggm9wFPqQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFIz7DR5x SGnKgxKydp6tkEDqzGmMMB8GA1UdIwQYMBaAFKE1uBTh6x4nyVl+7S6CKFSTDT/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzM5MC9EMkM3RTcxNjNF N0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9IckhpZkpXWDd0TG9Jb1ZKTU5Q ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29UVzRGT0hySGlmSldYN3RMb0lvVkpNTlA4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTczOTAvRDJDN0U3MTYzRTdBMTFFRUE5NzdENjIwQzRGOUFFMDIvQ0QxNjhBMjI2 QzIxMTFFRkIwQUNDMTUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBAAtc3cwDAMEAGc5EQMEAmc5EAMEAMoGUAMEAMuZ0DANBgkq hkiG9w0BAQsFAAOCAQEArwqcssabHqscTznf3r7DXbm4P6JrZiuw24RG4ih1aqrW ApAgiwl/kJcixiiPV/WLGOD4ARTFGwPmTmidOI0rYWB85ss3Ejx5yhOpIfv5cyW/ M507KNpUknRwz1vHUJaSVOj2XEe5skEnavNSUQqJ7sgY7qM/8d9IryNmO/1/jDWS u7IXbyOpDZfmZP0+pZk1wK+8kTfHUl3qVSlPOwKmwDDSYfhvs5iB1+JTMBc2kyTU 7KO9bUHbE6f8RB3hVdEIi//msJ/t+UUUJhoAA8POtDq6A+J8d0acbvHLNSUytE+B /Jo6qnLLiPLXcAqRyd1at7mkdF44jjR/kydOnE397g== -----END CERTIFICATE-----Generated at Tue Jan 20 01:24:40 2026 by rpki-client