This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/9CA45412A6AB11F0AA6B453DC4F9AE02.roa File: 9CA45412A6AB11F0AA6B453DC4F9AE02.roa (raw, json) Hash identifier: WS2L7D6rSmUZv4mVX2/3kzXo3TWHc1j4xpO3jewhCYY= Subject key identifier: 09:97:8C:0E:1B:51:10:9B:9E:D5:DA:8D:1A:79:DA:A6:E0:51:70:FA Certificate issuer: /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3 Certificate serial: 0700 Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/9CA45412A6AB11F0AA6B453DC4F9AE02.roa Signing time: Wed 24 Dec 2025 17:15:01 +0000 ROA not before: Wed 24 Dec 2025 17:15:01 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134781 IP address blocks: 103.124.236.0/22 maxlen: 24 2405:16c0::/32 maxlen: 32 2405:16c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1792 (0x700) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5A9F, serialNumber=95025628F14341046146AC20BA324614461A9CC3 Validity Not Before: Dec 24 17:15:01 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=694c1f95-3df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:11:73:d1:cf:43:c9:26:f5:c7:a3:d5:98:e9: e8:ae:c2:a7:03:64:fc:f3:37:fc:81:77:9c:69:b3: a1:f6:36:25:ab:55:97:bc:a0:e9:84:3d:9f:20:6f: ae:47:0a:26:b3:d5:cd:2a:1f:4f:69:85:32:66:69: 5c:a4:53:7d:bb:f5:dd:f9:72:a0:78:80:92:ec:1d: 61:60:76:dd:3f:9c:80:1c:d5:63:45:6f:82:3c:5f: 99:8f:c7:bc:60:91:73:b3:e4:bd:9c:c7:f0:72:d7: 40:54:99:c7:17:04:9e:61:a5:8d:81:a8:7a:92:cb: 47:84:c4:97:ed:99:81:2f:ba:e9:04:3a:93:48:7d: bb:de:42:de:42:4d:d7:e5:9a:f5:3f:b2:92:28:2a: 1a:43:f4:76:6a:03:0e:1d:99:15:86:c2:04:a6:39: 61:43:f7:46:17:2c:41:87:69:18:a7:48:b2:7d:66: b3:ca:c9:a1:af:95:f8:43:09:16:50:4d:f2:f9:76: 9e:e5:69:f1:f2:56:a5:0e:b5:32:bf:c4:c7:db:b1: 8c:8b:1f:74:07:e3:2b:96:99:0f:18:c1:27:56:ad: bf:f3:e9:41:83:34:f4:fa:2a:dc:6f:3c:97:65:8a: 2d:80:87:f4:83:cf:bc:f7:e1:43:ac:6c:f7:ae:53: dd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:97:8C:0E:1B:51:10:9B:9E:D5:DA:8D:1A:79:DA:A6:E0:51:70:FA X509v3 Authority Key Identifier: keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/9CA45412A6AB11F0AA6B453DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.124.236.0/22 IPv6: 2405:16c0::/32 Signature Algorithm: sha256WithRSAEncryption b3:8f:71:e4:93:f3:5c:78:c2:ea:e8:e8:1f:4b:57:d0:d6:41: d3:3c:5d:c0:14:00:fd:95:c6:a7:a4:b0:62:11:e0:ab:33:f5: 07:a7:e2:89:39:ee:8c:18:f4:86:80:76:27:f0:5c:45:ac:d5: e8:06:90:91:c2:61:18:2f:e9:9d:36:d5:4d:7c:b3:b2:d0:10: 7e:36:4e:a3:57:f1:bf:f5:18:e7:68:13:14:2f:57:72:90:0d: 46:a0:38:8f:35:5b:3e:2b:94:f2:c6:c7:8e:85:5f:03:8d:bf: c4:44:b1:55:b3:31:d4:9f:d0:7e:e2:da:16:be:42:08:10:5d: 65:5b:41:0a:c9:ee:8a:41:5e:4c:5e:dd:f8:02:14:6e:b2:43: 8a:83:c5:ea:f3:56:78:64:5b:dc:29:b7:a1:5b:5e:50:f8:f9: bb:12:a0:40:c4:c4:a7:b2:4a:f9:7e:c1:3e:0f:40:2d:87:58: 83:69:46:51:d5:ff:86:72:1e:3a:a1:c6:bb:2d:cf:94:33:ab: 30:c7:89:6c:4e:06:45:74:5a:c0:63:f4:25:7a:a7:c0:ac:5b: e0:af:6f:b2:c3:f1:eb:74:96:0e:c1:c2:92:45:9f:8b:27:30: 89:7f:0c:7a:6f:b4:82:f9:57:02:9f:0f:c4:c6:49:76:ec:f2: f3:83:df:82 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RTVBOUYxMTAvBgNVBAUTKDk1MDI1NjI4RjE0MzQxMDQ2MTQ2QUMyMEJBMzI0NjE0 NDYxQTlDQzMwHhcNMjUxMjI0MTcxNTAxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTRjMWY5NS0zZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBFz0c9DySb1x6PVmOnorsKnA2T88zf8gXecabOh9jYlq1WXvKDphD2fIG+u Rwoms9XNKh9PaYUyZmlcpFN9u/Xd+XKgeICS7B1hYHbdP5yAHNVjRW+CPF+Zj8e8 YJFzs+S9nMfwctdAVJnHFwSeYaWNgah6kstHhMSX7ZmBL7rpBDqTSH273kLeQk3X 5Zr1P7KSKCoaQ/R2agMOHZkVhsIEpjlhQ/dGFyxBh2kYp0iyfWazysmhr5X4QwkW UE3y+Xae5Wnx8lalDrUyv8TH27GMix90B+MrlpkPGMEnVq2/8+lBgzT0+ircbzyX ZYotgIf0g8+89+FDrGz3rlPdGwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAmXjA4b URCbntXajRp52qbgUXD6MB8GA1UdIwQYMBaAFJUCVijxQ0EEYUasILoyRhRGGpzD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUE5Ri82NzM2RjMzNEUz M0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFRUmhScXdndWpKR0ZFWWFu TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xRSldLUEZEUVFSaFJxd2d1akpHRkVZYW5NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTVBOUYvNjczNkYzMzRFMzNBMTFFODg2MTE3NzgwQzRGOUFFMDIvOUNBNDU0MTJB NkFCMTFGMEFBNkI0NTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnfOwwDQQCAAIwBwMFACQFFsAwDQYJKoZIhvcNAQELBQAD ggEBALOPceST81x4wuro6B9LV9DWQdM8XcAUAP2VxqeksGIR4Ksz9Qen4ok57owY 9IaAdifwXEWs1egGkJHCYRgv6Z021U18s7LQEH42TqNX8b/1GOdoExQvV3KQDUag OI81Wz4rlPLGx46FXwONv8REsVWzMdSf0H7i2ha+QggQXWVbQQrJ7opBXkxe3fgC FG6yQ4qDxerzVnhkW9wpt6FbXlD4+bsSoEDExKeySvl+wT4PQC2HWINpRlHV/4Zy Hjqhxrstz5QzqzDHiWxOBkV0WsBj9CV6p8CsW+Cvb7LD8et0lg7BwpJFn4snMIl/ DHpvtIL5VwKfD8TGSXbs8vOD34I= -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:14 2025 by rpki-client