This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/B0604836C95A11F0930CD216C4F9AE02.roa File: B0604836C95A11F0930CD216C4F9AE02.roa (raw, json) Hash identifier: HzR9V6FuJoIQN+5+e445ikUD7vyi6Du1+khDPyiCDfQ= Subject key identifier: 69:5E:77:4C:95:F9:0B:A5:82:3F:C7:45:89:71:BA:62:39:B0:B3:9F Certificate issuer: /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Certificate serial: 0FD8 Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/B0604836C95A11F0930CD216C4F9AE02.roa Signing time: Mon 01 Dec 2025 17:41:08 +0000 ROA not before: Mon 01 Dec 2025 17:41:08 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 139008 IP address blocks: 103.138.144.0/23 maxlen: 23 103.138.144.0/24 maxlen: 24 103.138.145.0/24 maxlen: 24 103.152.212.0/23 maxlen: 23 103.152.212.0/24 maxlen: 24 103.152.213.0/24 maxlen: 24 2001:df0:3f80::/48 maxlen: 48 2406:2c0::/32 maxlen: 32 2406:2c0:1100::/40 maxlen: 40 2406:2c0:1101::/48 maxlen: 48 2406:2c0:1102::/48 maxlen: 48 2406:2c0:1104::/48 maxlen: 48 2406:2c0:110b::/48 maxlen: 48 2406:2c0:110d::/48 maxlen: 48 2406:2c0:110e::/48 maxlen: 48 2406:2c0:112b::/48 maxlen: 48 2406:2c0:1132::/48 maxlen: 48 2406:2c0:113b::/48 maxlen: 48 2406:2c0:7100::/40 maxlen: 40 2406:2c0:8100::/40 maxlen: 40 2406:2c0:8101::/48 maxlen: 48 2406:2c0:8102::/48 maxlen: 48 2406:2c0:8104::/48 maxlen: 48 2406:2c0:8105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 17:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4056 (0xfd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BDF, serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Validity Not Before: Dec 1 17:41:08 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=692dd333-ea31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:97:72:1c:69:5a:3b:62:46:fb:7c:5e:2f:44: c3:f1:85:2b:1b:56:be:ae:5b:24:70:66:2d:27:79: 80:66:fc:df:d1:21:fe:5b:ef:ec:72:c7:d8:aa:74: a9:8f:94:99:1b:ee:23:e6:42:51:6d:2b:3c:6f:da: 70:e2:f8:eb:f2:5f:66:8c:21:d4:86:f4:b1:31:a2: f2:ee:ec:01:38:92:6f:87:e5:9f:cf:fa:37:72:71: 1d:54:e7:5c:d4:e2:31:a7:23:83:00:58:e3:41:df: a0:a9:ab:a4:ff:ee:f9:53:d6:ab:c3:49:c9:5f:c5: 52:4b:20:4a:00:08:12:5b:db:41:b0:ae:33:a6:3c: 34:90:d0:76:9b:c6:b3:f3:dd:c9:cd:c4:2c:f3:ad: 2e:d7:92:07:7a:f0:52:44:7f:b0:0e:85:e2:48:37: 4a:94:04:9c:7f:21:75:a5:dd:5e:9f:4c:d9:4b:96: fe:cb:0b:ea:9a:48:40:ff:29:0f:c5:8b:ec:e7:7c: 1c:91:51:3d:c9:f5:8d:17:41:6f:2e:7a:d2:3c:2a: 3c:b1:56:24:b9:63:cb:ba:ac:79:6d:3c:a9:cf:a1: 35:97:89:c3:d4:c1:5b:78:8b:bf:0c:e1:dc:a7:91: b4:1d:1d:c6:3c:78:e0:14:eb:da:35:cc:e8:a6:78: 2d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5E:77:4C:95:F9:0B:A5:82:3F:C7:45:89:71:BA:62:39:B0:B3:9F X509v3 Authority Key Identifier: keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/B0604836C95A11F0930CD216C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.144.0/23 103.152.212.0/23 IPv6: 2001:df0:3f80::/48 2406:2c0::/32 Signature Algorithm: sha256WithRSAEncryption 26:e2:e6:30:a7:f4:ee:b3:3f:66:fe:77:90:90:7c:de:da:4f: 07:fe:9f:11:ab:ec:24:5b:3f:35:f1:73:25:69:cb:fc:64:bc: 0e:98:13:f2:d9:fe:b8:21:9a:42:0d:e9:71:75:e0:34:24:db: f7:19:83:53:32:95:0b:1d:10:87:0d:5b:76:f0:ae:78:66:f2: ac:cc:07:8e:dd:30:4b:88:7b:5a:96:f8:5e:fb:37:81:6c:5f: 9d:09:75:d3:2b:49:7f:d9:a6:7e:31:33:e2:f6:23:65:b9:14: 69:aa:05:e6:1a:94:d1:bf:82:41:21:43:e6:89:81:29:0d:cb: 78:68:64:65:62:13:08:64:be:c6:49:dd:16:2d:e0:c1:39:dd: 53:96:59:d5:7f:e6:85:3c:5e:0f:21:a8:b0:0b:5d:86:f2:d3: d9:50:3d:57:77:80:7d:d3:19:46:21:ae:c3:87:72:5d:8c:12: 81:aa:8f:65:fb:ab:17:85:25:99:35:55:8b:5f:43:05:26:a0: 8d:fd:4b:a0:c2:62:bc:8d:df:5e:b3:e5:9d:0f:b8:52:65:5d: 66:97:6f:49:8e:b4:8e:3a:b5:6f:e8:88:67:a0:44:74:cc:7b: 4f:b9:e9:7f:2c:4e:d1:b2:14:43:84:66:f9:1d:cc:8e:1c:a6: 19:13:ca:89 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICD9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCREYxMTAvBgNVBAUTKDZBNEY0MzExMDA1MEYwNjgxOTY0RDg1OEY5MTQ0RTA1 MkJCODg5OUEwHhcNMjUxMjAxMTc0MTA4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJkZDMzMy1lYTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pdyHGlaO2JG+3xeL0TD8YUrG1a+rlskcGYtJ3mAZvzf0SH+W+/scsfYqnSp j5SZG+4j5kJRbSs8b9pw4vjr8l9mjCHUhvSxMaLy7uwBOJJvh+Wfz/o3cnEdVOdc 1OIxpyODAFjjQd+gqauk/+75U9arw0nJX8VSSyBKAAgSW9tBsK4zpjw0kNB2m8az 893JzcQs860u15IHevBSRH+wDoXiSDdKlAScfyF1pd1en0zZS5b+ywvqmkhA/ykP xYvs53wckVE9yfWNF0FvLnrSPCo8sVYkuWPLuqx5bTypz6E1l4nD1MFbeIu/DOHc p5G0HR3GPHjgFOvaNczopngtSQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFGled0yV +Qulgj/HRYlxumI5sLOfMB8GA1UdIwQYMBaAFGpPQxEAUPBoGWTYWPkUTgUruIma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJERi9FNzBFMEE5ODcw OTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThHZ1paTmhZLVJST0JTdTRp Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrOURFUUJROEdnWlpOaFktUlJPQlN1NGlaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTlCREYvRTcwRTBBOTg3MDkzMTFFOTgwQkQ3QzNEQzRGOUFFMDIvQjA2MDQ4MzZD OTVBMTFGMDkzMENEMjE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMBIEAgABMAwDBAFnipADBAFnmNQwFgQCAAIwEAMHACABDfA/gAMFACQGAsAw DQYJKoZIhvcNAQELBQADggEBACbi5jCn9O6zP2b+d5CQfN7aTwf+nxGr7CRbPzXx cyVpy/xkvA6YE/LZ/rghmkIN6XF14DQk2/cZg1MylQsdEIcNW3bwrnhm8qzMB47d MEuIe1qW+F77N4FsX50JddMrSX/Zpn4xM+L2I2W5FGmqBeYalNG/gkEhQ+aJgSkN y3hoZGViEwhkvsZJ3RYt4ME53VOWWdV/5oU8Xg8hqLALXYby09lQPVd3gH3TGUYh rsOHcl2MEoGqj2X7qxeFJZk1VYtfQwUmoI39S6DCYryN316z5Z0PuFJlXWaXb0mO tI46tW/oiGegRHTMe0+56X8sTtGyFEOEZvkdzI4cphkTyok= -----END CERTIFICATE-----Generated at Wed Dec 3 16:49:11 2025 by rpki-client