This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/D52009B06A6311EFA96F023DC4F9AE02.roa File: D52009B06A6311EFA96F023DC4F9AE02.roa (raw, json) Hash identifier: YFvhz1PGC7q57PnuhHNHoL2UdVqoUNbc1jn2FslOikU= Subject key identifier: 1E:2A:36:75:87:EA:97:60:87:0F:4F:13:91:CA:6C:66:78:DC:A0:46 Certificate issuer: /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509 Certificate serial: 35B5 Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/D52009B06A6311EFA96F023DC4F9AE02.roa Signing time: Tue 02 Dec 2025 14:40:07 +0000 ROA not before: Tue 02 Dec 2025 14:40:07 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 37997 IP address blocks: 124.195.128.0/20 maxlen: 20 124.195.128.0/22 maxlen: 22 124.195.128.0/24 maxlen: 24 124.195.129.0/24 maxlen: 24 124.195.130.0/24 maxlen: 24 124.195.131.0/24 maxlen: 24 124.195.132.0/22 maxlen: 22 124.195.132.0/24 maxlen: 24 124.195.133.0/24 maxlen: 24 124.195.134.0/24 maxlen: 24 124.195.135.0/24 maxlen: 24 124.195.136.0/22 maxlen: 22 124.195.136.0/24 maxlen: 24 124.195.137.0/24 maxlen: 24 124.195.138.0/24 maxlen: 24 124.195.139.0/24 maxlen: 24 124.195.140.0/22 maxlen: 22 124.195.140.0/24 maxlen: 24 124.195.141.0/24 maxlen: 24 124.195.142.0/24 maxlen: 24 124.195.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13749 (0x35b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117394, serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509 Validity Not Before: Dec 2 14:40:07 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692efa47-6a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6f:e1:4b:54:23:e3:90:0b:61:16:47:0f:fe: 58:8d:5c:99:19:3e:1b:7e:69:de:c1:51:dc:35:e2: 26:42:cd:df:a0:37:0d:7e:3f:c7:9b:23:58:fa:7e: bc:54:c5:53:33:1a:fe:a9:c0:d4:3b:ed:8d:5c:80: 04:0e:a8:ae:5c:e5:3e:ec:71:17:69:ca:e4:50:a1: 8f:3e:19:87:84:df:ab:52:99:ae:76:66:2b:0b:65: 33:76:60:0f:ad:02:f8:4e:43:ee:bf:b1:4b:d6:85: 86:31:0b:1e:34:04:e4:bf:96:8c:5a:7e:0b:32:56: 05:0b:d2:0d:be:3a:35:58:0d:9f:c5:63:0c:42:6b: 25:18:71:a3:61:56:a5:ac:d6:0b:48:b1:26:4e:ef: 79:9f:a0:71:41:e1:39:ca:f3:d4:28:7e:3e:e9:56: 10:2f:23:d0:49:77:d2:5a:0a:10:76:d3:27:c4:3d: 1e:5e:a6:6b:13:ad:fc:25:03:26:dd:e1:38:10:bb: 47:14:74:05:43:eb:98:8c:b7:e8:0a:d9:23:c0:36: 94:2e:72:00:69:1d:29:52:4e:02:de:2b:de:9d:32: 75:ea:08:e8:da:7e:3a:d5:88:c4:05:15:d6:77:28: 10:44:a7:ff:af:0b:7e:dd:7a:bd:cd:18:2a:0b:34: 40:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2A:36:75:87:EA:97:60:87:0F:4F:13:91:CA:6C:66:78:DC:A0:46 X509v3 Authority Key Identifier: keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/D52009B06A6311EFA96F023DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.195.128.0/20 Signature Algorithm: sha256WithRSAEncryption 4e:86:60:ee:21:eb:a1:16:23:b6:70:ea:88:1c:99:e0:27:6e: 52:fb:04:92:f3:80:b4:f8:32:c9:9e:5d:dd:bc:05:84:1c:b5: b9:d3:04:0b:3d:9b:03:25:72:3f:79:ea:69:0b:56:f0:3d:80: 63:2c:a9:61:5a:de:25:e1:89:cf:61:91:3a:f6:98:51:a0:3e: b5:4d:d7:fb:15:e7:18:75:ed:9f:e3:77:40:fe:70:2f:12:9f: 68:6c:53:85:eb:8e:29:43:30:f5:4d:5d:27:41:1a:e2:35:80: 31:31:92:0f:4d:4f:a9:12:5f:3a:d6:ef:2c:c2:2d:58:0b:32: 2c:fa:c8:9d:fb:ff:e4:06:a1:0a:34:58:39:91:14:9d:52:11: ec:2d:da:a5:26:d1:f9:9d:86:97:1d:fe:59:67:45:82:40:21: 15:5f:42:79:d6:a1:c4:e2:24:59:6c:df:39:f9:87:07:54:88: b9:a3:03:c6:88:36:a2:9c:ae:de:9c:91:ba:97:19:6f:d4:df: 43:97:3f:d9:f9:95:84:b5:92:05:5f:47:cf:75:2a:60:78:da: 80:98:f1:19:e4:c0:26:d6:c8:86:2f:31:ee:cc:15:5c:e8:67: 69:da:bf:f1:46:ff:e8:84:e1:d1:35:27:2a:27:cb:1e:09:85: b6:33:b6:e8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczOTQxMTAvBgNVBAUTKEFBRkFBRTNDNTcwM0IzOTMzN0ZEM0Q3QTk2NjZDNThD QjhDM0I1MDkwHhcNMjUxMjAyMTQ0MDA3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJlZmE0Ny02YTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwW/hS1Qj45ALYRZHD/5YjVyZGT4bfmnewVHcNeImQs3foDcNfj/HmyNY+n68 VMVTMxr+qcDUO+2NXIAEDqiuXOU+7HEXacrkUKGPPhmHhN+rUpmudmYrC2UzdmAP rQL4TkPuv7FL1oWGMQseNATkv5aMWn4LMlYFC9INvjo1WA2fxWMMQmslGHGjYVal rNYLSLEmTu95n6BxQeE5yvPUKH4+6VYQLyPQSXfSWgoQdtMnxD0eXqZrE638JQMm 3eE4ELtHFHQFQ+uYjLfoCtkjwDaULnIAaR0pUk4C3ivenTJ16gjo2n461YjEBRXW dygQRKf/rwt+3Xq9zRgqCzRAOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB4qNnWH 6pdghw9PE5HKbGZ43KBGMB8GA1UdIwQYMBaAFKr6rjxXA7OTN/09epZmxYy4w7UJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzM5NC80RjU5MTg2QTFE NkYxMUUyOUI1NDQ2QjEwOEIwMkNEMi9xdnF1UEZjRHM1TTNfVDE2bG1iRmpMakR0 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F2cXVQRmNEczVNM19UMTZsbWJGakxqRHRRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTczOTQvNEY1OTE4NkExRDZGMTFFMjlCNTQ0NkIxMDhCMDJDRDIvRDUyMDA5QjA2 QTYzMTFFRkE5NkYwMjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAR8w4AwDQYJKoZIhvcNAQELBQADggEBAE6GYO4h66EWI7Zw 6ogcmeAnblL7BJLzgLT4MsmeXd28BYQctbnTBAs9mwMlcj956mkLVvA9gGMsqWFa 3iXhic9hkTr2mFGgPrVN1/sV5xh17Z/jd0D+cC8Sn2hsU4XrjilDMPVNXSdBGuI1 gDExkg9NT6kSXzrW7yzCLVgLMiz6yJ37/+QGoQo0WDmRFJ1SEewt2qUm0fmdhpcd /llnRYJAIRVfQnnWocTiJFls3zn5hwdUiLmjA8aINqKcrt6ckbqXGW/U30OXP9n5 lYS1kgVfR891KmB42oCY8RnkwCbWyIYvMe7MFVzoZ2nav/FG/+iE4dE1Jyonyx4J hbYztug= -----END CERTIFICATE-----Generated at Mon Dec 8 09:40:20 2025 by rpki-client