This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/40583EE4424311EFB787BD3AC4F9AE02.roa File: 40583EE4424311EFB787BD3AC4F9AE02.roa (raw, json) Hash identifier: lY3WVWAOTyIsAjMp/FETDq12SBCAxXSbP620LU0HkGE= Subject key identifier: C6:13:DF:DC:AC:AD:98:37:4D:86:2B:78:E0:52:E2:45:A1:43:75:8E Certificate issuer: /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Certificate serial: 064D Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/40583EE4424311EFB787BD3AC4F9AE02.roa Signing time: Fri 14 Nov 2025 21:43:19 +0000 ROA not before: Fri 14 Nov 2025 21:43:19 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 24446 IP address blocks: 27.121.64.0/21 maxlen: 21 114.31.72.0/21 maxlen: 21 114.141.204.0/22 maxlen: 22 117.58.248.0/21 maxlen: 21 180.235.128.0/22 maxlen: 22 202.47.0.0/21 maxlen: 21 202.124.240.0/21 maxlen: 21 202.131.95.0/24 maxlen: 24 202.191.60.0/22 maxlen: 22 203.2.122.0/24 maxlen: 24 203.8.188.0/23 maxlen: 23 203.19.190.0/23 maxlen: 23 203.30.252.0/24 maxlen: 24 203.55.142.0/24 maxlen: 24 203.55.143.0/24 maxlen: 24 203.210.96.0/19 maxlen: 19 2403:1400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1613 (0x64d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D3F3, serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Validity Not Before: Nov 14 21:43:19 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6917a277-7612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f0:54:02:37:04:e7:3b:17:0e:1f:e6:2e:e9: 3b:dc:f2:cd:02:e5:31:7f:85:55:7e:a1:40:5f:5a: 09:d8:80:82:6e:a4:72:4f:56:e0:59:a7:e0:d0:35: e3:3d:cb:42:1c:21:ed:5c:36:79:4f:8c:45:c6:03: 7c:99:a8:33:c3:ab:36:0a:1e:3e:f3:83:96:d3:3c: ce:19:aa:c2:8c:c0:c3:a4:4b:8d:5d:c7:80:6e:be: 16:9c:a9:5e:6e:26:c3:46:a3:12:55:26:12:a2:6e: a2:63:ab:0f:90:bf:7b:14:e7:06:c1:f3:dc:be:66: 11:a3:a1:ab:d9:dc:8c:84:a5:69:ab:44:9f:21:69: 1f:a5:8d:ca:fb:85:ba:59:21:26:15:ef:82:27:aa: f2:12:38:7a:9d:90:f5:21:2d:03:e2:8f:2a:a6:b0: 62:65:52:2d:3f:b2:6f:32:37:ac:35:cb:5d:88:e0: b2:1f:fc:16:1d:65:b0:27:fe:34:45:66:5b:a7:20: 9b:37:c8:b3:55:36:e9:18:16:09:a1:13:65:69:92: 0e:ea:12:2b:1c:99:6b:cb:77:77:13:6a:ec:92:98: 51:e1:03:96:c5:88:1c:dd:43:5f:06:71:24:ab:72: 62:41:7a:61:19:de:9a:94:f6:5f:52:6a:cd:f0:7c: 49:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:13:DF:DC:AC:AD:98:37:4D:86:2B:78:E0:52:E2:45:A1:43:75:8E X509v3 Authority Key Identifier: keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/40583EE4424311EFB787BD3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.121.64.0/21 114.31.72.0/21 114.141.204.0/22 117.58.248.0/21 180.235.128.0/22 202.47.0.0/21 202.124.240.0/21 202.131.95.0/24 202.191.60.0/22 203.2.122.0/24 203.8.188.0/23 203.19.190.0/23 203.30.252.0/24 203.55.142.0/23 203.210.96.0/19 IPv6: 2403:1400::/32 Signature Algorithm: sha256WithRSAEncryption ad:67:42:e4:6f:b7:0c:06:32:d7:b5:1a:3f:e0:e0:ff:68:b2: 9a:bb:0f:e7:6c:75:08:aa:e3:67:d1:24:b7:66:90:25:7d:47: d8:05:b6:60:a9:3e:ec:94:d1:d6:b2:da:63:bd:35:00:38:f0: a3:a3:f5:ae:1a:87:cc:63:c5:59:85:c8:96:5d:b4:af:b8:0f: 9f:d3:a9:89:f1:65:cb:c4:41:41:c4:57:12:a4:4c:ba:c7:d5: 35:ba:18:76:11:66:e7:05:b9:83:ce:b6:65:80:bd:63:ef:9a: 7e:27:cb:db:b6:ad:9e:be:cb:36:00:5e:48:b7:56:c8:4e:ba: 35:15:a3:88:49:2f:45:a5:63:a8:c8:f8:42:af:f2:f8:69:cd: 43:84:45:66:17:c7:7d:47:39:6d:34:98:0d:5d:b6:2c:94:42: 13:8e:e4:b8:4e:ab:97:43:9c:e5:ca:6c:20:b1:1f:dc:ab:4f: c8:34:44:51:df:ed:aa:f8:b7:13:a6:b7:e0:0a:08:bf:be:1a: b3:fd:8d:a6:17:c6:87:26:ec:5d:86:93:e7:2f:12:d5:f4:17: d7:6b:c6:ff:99:8e:95:2b:f8:c7:4e:eb:51:0c:e9:bc:65:95: 4e:18:29:23:43:87:ff:dc:bb:b2:0a:34:7a:1a:45:1f:76:10: c1:bb:fa:3e -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgICBk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQzRjMxMTAvBgNVBAUTKDMxN0MzMDdGRkM2RUNCNkNGNjU2RjI2QjgyODJGRkI5 RTYyRjkzNjUwHhcNMjUxMTE0MjE0MzE5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE3YTI3Ny03NjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfBUAjcE5zsXDh/mLuk73PLNAuUxf4VVfqFAX1oJ2ICCbqRyT1bgWafg0DXj PctCHCHtXDZ5T4xFxgN8magzw6s2Ch4+84OW0zzOGarCjMDDpEuNXceAbr4WnKle bibDRqMSVSYSom6iY6sPkL97FOcGwfPcvmYRo6Gr2dyMhKVpq0SfIWkfpY3K+4W6 WSEmFe+CJ6ryEjh6nZD1IS0D4o8qprBiZVItP7JvMjesNctdiOCyH/wWHWWwJ/40 RWZbpyCbN8izVTbpGBYJoRNlaZIO6hIrHJlry3d3E2rskphR4QOWxYgc3UNfBnEk q3JiQXphGd6alPZfUmrN8HxJhQIDAQABo4IC+TCCAvUwHQYDVR0OBBYEFMYT39ys rZg3TYYreOBS4kWhQ3WOMB8GA1UdIwQYMBaAFDF8MH/8bsts9lbya4KC/7nmL5Nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDNGMy9CMjU0NDgxQUNB MzQxMUVCOEM5MEQ5NDFDNEY5QUUwMi9NWHd3Zl94dXkyejJWdkpyZ29MX3VlWXZr MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Yd3dmX3h1eTJ6MlZ2SnJnb0xfdWVZdmsyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUQzRjMvQjI1NDQ4MUFDQTM0MTFFQjhDOTBEOTQxQzRGOUFFMDIvNDA1ODNFRTQ0 MjQzMTFFRkI3ODdCRDNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYIGCCsGAQUFBwEHAQH/ BHMwcTBgBAIAATBaAwQDG3lAAwQDch9IAwQCco3MAwQDdTr4AwQCtOuAAwQDyi8A AwQDynzwAwQAyoNfAwQCyr88AwQAywJ6AwQBywi8AwQByxO+AwQAyx78AwQByzeO AwQFy9JgMA0EAgACMAcDBQAkAxQAMA0GCSqGSIb3DQEBCwUAA4IBAQCtZ0Lkb7cM BjLXtRo/4OD/aLKauw/nbHUIquNn0SS3ZpAlfUfYBbZgqT7slNHWstpjvTUAOPCj o/WuGofMY8VZhciWXbSvuA+f06mJ8WXLxEFBxFcSpEy6x9U1uhh2EWbnBbmDzrZl gL1j75p+J8vbtq2evss2AF5It1bITro1FaOISS9FpWOoyPhCr/L4ac1DhEVmF8d9 RzltNJgNXbYslEITjuS4TquXQ5zlymwgsR/cq0/INERR3+2q+LcTprfgCgi/vhqz /Y2mF8aHJuxdhpPnLxLV9BfXa8b/mY6VK/jHTutRDOm8ZZVOGCkjQ4f/3LuyCjR6 GkUfdhDBu/o+ -----END CERTIFICATE-----Generated at Sun Dec 7 04:14:28 2025 by rpki-client