This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/C96DCB80D00A11F0BC76FE15C4F9AE02.roa File: C96DCB80D00A11F0BC76FE15C4F9AE02.roa (raw, json) Hash identifier: ABhiaFztmIhxXQtVe6zkji6y6Wrv2VQGPWZOStLtBEs= Subject key identifier: 78:B3:DC:E4:ED:36:46:28:D5:9A:95:00:7C:F4:18:1C:E2:4D:56:D1 Certificate issuer: /CN=A911E008/serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Certificate serial: 1752 Authority key identifier: 24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/C96DCB80D00A11F0BC76FE15C4F9AE02.roa Signing time: Wed 03 Dec 2025 06:19:38 +0000 ROA not before: Wed 03 Dec 2025 06:19:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 23749 IP address blocks: 112.213.64.0/24 maxlen: 24 112.213.65.0/24 maxlen: 24 112.213.66.0/24 maxlen: 24 112.213.67.0/24 maxlen: 24 112.213.68.0/22 maxlen: 22 112.213.68.0/24 maxlen: 24 112.213.69.0/24 maxlen: 24 112.213.70.0/24 maxlen: 24 112.213.71.0/24 maxlen: 24 112.213.72.0/22 maxlen: 22 112.213.72.0/24 maxlen: 24 112.213.73.0/24 maxlen: 24 112.213.74.0/24 maxlen: 24 112.213.75.0/24 maxlen: 24 202.122.96.0/24 maxlen: 24 202.122.97.0/24 maxlen: 24 202.122.98.0/24 maxlen: 24 202.122.99.0/24 maxlen: 24 202.122.100.0/24 maxlen: 24 202.122.101.0/24 maxlen: 24 202.122.102.0/24 maxlen: 24 202.122.103.0/24 maxlen: 24 202.122.104.0/24 maxlen: 24 202.122.105.0/24 maxlen: 24 202.122.106.0/24 maxlen: 24 202.122.107.0/24 maxlen: 24 202.122.108.0/23 maxlen: 23 202.122.108.0/24 maxlen: 24 202.122.109.0/24 maxlen: 24 202.122.110.0/24 maxlen: 24 2401:3c60::/32 maxlen: 32 2401:3c60:1::/48 maxlen: 48 2401:3c60:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5970 (0x1752) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E008, serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Validity Not Before: Dec 3 06:19:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=692fd679-7668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c3:b9:60:fc:66:60:9a:a6:b7:f2:11:f9:87: 76:98:87:96:c1:ca:d9:de:32:bf:ca:df:4a:e0:43: 58:18:92:0e:cc:ff:32:b8:f8:f9:a0:89:d5:52:d8: ae:ad:4d:27:c5:da:06:60:2e:fa:f4:f2:26:df:7e: 7b:14:8c:3b:ef:35:ad:dd:89:2a:6d:d3:ea:bf:99: a4:87:64:79:92:b1:72:85:e4:97:9b:dc:c0:2e:79: db:eb:11:ac:a0:d0:b2:b0:cf:3a:5e:48:25:a3:61: a8:a2:64:6d:eb:dc:ac:55:99:a8:d7:70:ca:bd:72: ce:69:88:10:30:22:fd:aa:d4:95:2e:0b:50:47:ba: ab:47:d3:6a:41:a6:06:74:b2:4c:aa:52:ee:f8:de: 07:b5:8f:c1:44:31:fc:a8:47:96:23:d6:f6:8d:c7: 17:d6:3b:12:b2:d1:15:ce:d8:91:f5:a5:83:b4:dc: da:35:70:3b:84:7f:db:76:d5:72:35:af:60:aa:95: a0:f7:85:af:60:8e:8f:c4:3b:62:a2:87:d1:f2:35: 89:35:4c:9b:29:b3:48:01:da:c7:12:04:b0:c6:b4: 95:8b:8b:c6:c8:da:e1:68:c7:df:3b:a2:65:1a:a5: a6:17:5c:a1:bc:69:1d:f6:b1:38:f4:48:c4:7f:a2: ce:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B3:DC:E4:ED:36:46:28:D5:9A:95:00:7C:F4:18:1C:E2:4D:56:D1 X509v3 Authority Key Identifier: keyid:24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/C96DCB80D00A11F0BC76FE15C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.213.64.0-112.213.75.255 202.122.96.0-202.122.110.255 IPv6: 2401:3c60::/32 Signature Algorithm: sha256WithRSAEncryption 4e:8d:e0:eb:11:04:d9:81:5a:d5:9c:a5:d0:b6:00:35:26:4d: 6e:1e:4d:4d:ce:79:52:9e:9c:fa:7f:b0:63:d1:68:40:64:9e: 6a:b2:c7:2a:0e:53:ce:6a:4e:58:fb:65:74:a6:6b:b2:02:8b: 5f:73:b9:a1:07:ec:ce:0c:ac:60:e9:60:92:08:75:41:05:73: da:6a:5f:98:17:b3:a8:c5:66:93:16:8b:66:36:ca:60:65:f3: 27:7f:3a:85:90:05:9d:61:9b:a8:98:a6:ae:f2:86:df:ce:f7: 68:77:a3:93:d9:16:3f:10:3d:b4:cf:42:88:04:6a:f6:e8:fa: a7:c7:4d:e7:01:45:c2:ca:58:56:ab:0f:3e:8c:65:2e:0d:0a: 36:e0:88:c6:5c:6f:04:69:0c:35:6a:41:a8:39:60:45:7d:35: cf:e2:86:7f:74:7d:9b:4f:7a:37:da:2b:36:ff:e7:57:47:2a: 31:1d:c9:ae:93:47:ce:5b:f6:f7:7e:57:fc:b8:69:34:ce:a4: 98:f7:de:2a:5c:44:09:05:79:08:90:41:1a:df:71:a6:8b:7d: 5d:99:6c:f4:b1:60:b5:9b:41:34:53:f3:82:82:48:01:7c:24: fd:dd:27:d7:65:99:f7:fb:18:29:b4:85:7b:8a:d6:06:9c:84: b2:52:66:39 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICF1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwMDgxMTAvBgNVBAUTKDI0OEY1NTg4RUE4RkM3REQwQTNCNERBMUUxNTU4MDMx QzBEOTI3RTQwHhcNMjUxMjAzMDYxOTM4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmZDY3OS03NjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8O5YPxmYJqmt/IR+Yd2mIeWwcrZ3jK/yt9K4ENYGJIOzP8yuPj5oInVUtiu rU0nxdoGYC769PIm3357FIw77zWt3YkqbdPqv5mkh2R5krFyheSXm9zALnnb6xGs oNCysM86Xkglo2GoomRt69ysVZmo13DKvXLOaYgQMCL9qtSVLgtQR7qrR9NqQaYG dLJMqlLu+N4HtY/BRDH8qEeWI9b2jccX1jsSstEVztiR9aWDtNzaNXA7hH/bdtVy Na9gqpWg94WvYI6PxDtioofR8jWJNUybKbNIAdrHEgSwxrSVi4vGyNrhaMffO6Jl GqWmF1yhvGkd9rE49EjEf6LO1QIDAQABo4ICujCCArYwHQYDVR0OBBYEFHiz3OTt NkYo1ZqVAHz0GBziTVbRMB8GA1UdIwQYMBaAFCSPVYjqj8fdCjtNoeFVgDHA2Sfk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTAwOC9ERDg4QzNBRUYx RDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5MEtPMDJoNFZXQU1jRFpK LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJOVZpT3FQeDkwS08wMmg0VldBTWNEWkotUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUUwMDgvREQ4OEMzQUVGMUQzMTFFNzk3RUQ0MjQwQzRGOUFFMDIvQzk2RENCODBE MDBBMTFGMEJDNzZGRTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRAYIKwYBBQUHAQcBAf8E NTAzMCIEAgABMBwwDAMEBnDVQAMEAnDVSDAMAwQFynpgAwQAynpuMA0EAgACMAcD BQAkATxgMA0GCSqGSIb3DQEBCwUAA4IBAQBOjeDrEQTZgVrVnKXQtgA1Jk1uHk1N znlSnpz6f7Bj0WhAZJ5qsscqDlPOak5Y+2V0pmuyAotfc7mhB+zODKxg6WCSCHVB BXPaal+YF7OoxWaTFotmNspgZfMnfzqFkAWdYZuomKau8obfzvdod6OT2RY/ED20 z0KIBGr26Pqnx03nAUXCylhWqw8+jGUuDQo24IjGXG8EaQw1akGoOWBFfTXP4oZ/ dH2bT3o32is2/+dXRyoxHcmuk0fOW/b3flf8uGk0zqSY994qXEQJBXkIkEEa33Gm i31dmWz0sWC1m0E0U/OCgkgBfCT93SfXZZn3+xgptIV7itYGnISyUmY5 -----END CERTIFICATE-----Generated at Sat Dec 6 19:24:06 2025 by rpki-client