This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/7606086E914611ED8DE00A16C4F9AE02.roa File: 7606086E914611ED8DE00A16C4F9AE02.roa (raw, json) Hash identifier: v0QyA38k1fUjIxLatTIS+A0JxElTy+cfv1Yt42+czGc= Subject key identifier: 71:6F:25:79:32:AC:C6:32:63:22:72:58:02:7A:02:D2:43:AC:BD:C4 Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 025C Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/7606086E914611ED8DE00A16C4F9AE02.roa Signing time: Sun 07 Dec 2025 00:40:11 +0000 ROA not before: Sun 07 Dec 2025 00:40:11 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 9328 IP address blocks: 150.173.0.0/16 maxlen: 16 202.137.200.0/21 maxlen: 21 202.160.96.0/20 maxlen: 24 203.89.192.0/19 maxlen: 19 203.89.224.0/19 maxlen: 19 203.214.160.0/19 maxlen: 19 203.214.169.0/24 maxlen: 24 203.214.184.0/21 maxlen: 21 203.214.184.0/23 maxlen: 23 203.214.186.0/23 maxlen: 23 203.214.188.0/23 maxlen: 23 203.214.190.0/23 maxlen: 23 203.214.192.0/18 maxlen: 18 203.214.192.0/22 maxlen: 22 203.214.192.0/24 maxlen: 24 2404:c400::/32 maxlen: 32 2404:c400:401::/48 maxlen: 48 2404:c400:403::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: Dec 7 00:40:11 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6934ccea-f982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:85:c2:ac:d7:9c:3b:9a:2c:33:bc:ed:cb:8f: e0:cc:62:de:7e:ca:16:3c:35:3b:e6:f8:78:59:72: 8d:6d:6a:a0:ba:b5:10:a6:d3:25:86:60:54:75:53: 6c:e7:ee:12:80:da:43:ee:a4:53:ed:9a:1c:2b:b7: 03:03:1d:89:9f:03:1e:8b:b3:c2:87:28:98:cc:6a: f1:3f:a8:43:32:ab:75:36:47:9f:fe:2d:ba:d3:a8: 8e:73:3e:94:3c:a9:65:6b:23:40:71:af:42:64:c1: 8d:c7:0e:72:1d:91:9b:46:4b:a0:c2:cd:dd:a6:6f: f4:ca:0b:88:51:03:61:ea:19:e8:d3:b1:01:96:3b: d8:d9:c8:4a:fc:27:98:c0:5a:58:a5:bb:4e:5f:9d: 05:82:f5:42:df:c4:0a:80:65:01:6a:d3:2d:30:49: c6:a5:9f:47:73:e8:6c:11:1b:02:ba:db:5d:25:36: 9c:44:ad:74:d7:7e:c0:0e:8d:4d:f1:2f:88:8b:b0: 9b:63:4a:dc:29:34:61:34:d4:83:af:6b:f7:bc:d0: 9a:b8:cc:96:0f:3c:7c:40:99:96:70:0f:c0:8e:5a: 23:d2:c4:99:16:05:f5:42:56:45:f3:c1:45:43:ac: b8:83:fb:b8:af:ef:51:19:4c:99:ca:5a:5a:44:3f: 64:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6F:25:79:32:AC:C6:32:63:22:72:58:02:7A:02:D2:43:AC:BD:C4 X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/7606086E914611ED8DE00A16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 150.173.0.0/16 202.137.200.0/21 202.160.96.0/20 203.89.192.0/18 203.214.160.0-203.214.255.255 IPv6: 2404:c400::/32 Signature Algorithm: sha256WithRSAEncryption 12:cd:5e:a6:17:32:d1:6b:08:06:60:85:cb:13:18:01:cc:28: 8a:bc:d8:b8:b6:4d:d3:ae:33:5e:a1:60:bc:0f:3f:a4:18:64: e5:33:9f:06:17:2e:05:8b:2d:58:cc:31:bf:82:ed:bf:b6:ff: cc:5b:0a:c7:07:55:c5:87:f5:af:4c:0e:6e:2c:de:86:a1:bd: 66:67:63:5c:71:d8:3a:94:4a:5d:99:54:2e:42:4b:a3:db:bc: 41:e6:23:95:7d:a5:61:aa:26:95:03:a8:ae:dc:15:44:2a:81: 8f:87:f8:9d:2a:8c:e4:55:8f:7a:f6:81:c4:ce:10:b9:44:99: 35:4f:94:07:61:7a:02:41:33:ab:24:ae:b5:00:c7:ec:1d:49: f0:da:c4:cd:ed:23:a5:1b:59:17:e7:24:a5:ed:51:d7:4d:39: e2:e8:56:d4:aa:f2:cb:5d:ad:34:04:d6:31:93:70:d2:71:bf: 65:0a:28:d6:18:89:3d:17:d6:03:32:d6:55:ca:c2:a3:f3:5e: da:b6:c2:35:1b:21:24:aa:3f:6e:b8:df:3e:f3:9f:a2:5e:6c: b1:bc:5b:7b:d6:d3:8b:6f:8a:ee:3c:4a:7d:4e:13:b9:74:a8: 00:eb:b4:86:ce:26:13:d8:27:a9:41:bf:c6:9a:c8:c2:a8:24: 49:aa:fd:2d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjUxMjA3MDA0MDExWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM0Y2NlYS1mOTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoXCrNecO5osM7zty4/gzGLefsoWPDU75vh4WXKNbWqgurUQptMlhmBUdVNs 5+4SgNpD7qRT7ZocK7cDAx2JnwMei7PChyiYzGrxP6hDMqt1Nkef/i2606iOcz6U PKllayNAca9CZMGNxw5yHZGbRkugws3dpm/0yguIUQNh6hno07EBljvY2chK/CeY wFpYpbtOX50FgvVC38QKgGUBatMtMEnGpZ9Hc+hsERsCuttdJTacRK10137ADo1N 8S+Ii7CbY0rcKTRhNNSDr2v3vNCauMyWDzx8QJmWcA/Ajloj0sSZFgX1QlZF88FF Q6y4g/u4r+9RGUyZylpaRD9k9wIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFHFvJXky rMYyYyJyWAJ6AtJDrL3EMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU5QjYvNzkxOENCMEM3RkY1MTFFRDlFRDQ2NDFEQzRGOUFFMDIvNzYwNjA4NkU5 MTQ2MTFFRDhERTAwQTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E PTA7MCoEAgABMCQDAwCWrQMEA8qJyAMEBMqgYAMEBstZwDALAwQFy9agAwMAy9Yw DQQCAAIwBwMFACQExAAwDQYJKoZIhvcNAQELBQADggEBABLNXqYXMtFrCAZghcsT GAHMKIq82Li2TdOuM16hYLwPP6QYZOUznwYXLgWLLVjMMb+C7b+2/8xbCscHVcWH 9a9MDm4s3oahvWZnY1xx2DqUSl2ZVC5CS6PbvEHmI5V9pWGqJpUDqK7cFUQqgY+H +J0qjORVj3r2gcTOELlEmTVPlAdhegJBM6skrrUAx+wdSfDaxM3tI6UbWRfnJKXt UddNOeLoVtSq8stdrTQE1jGTcNJxv2UKKNYYiT0X1gMy1lXKwqPzXtq2wjUbISSq P2643z7zn6JebLG8W3vW04tviu48Sn1OE7l0qADrtIbOJhPYJ6lBv8aayMKoJEmq /S0= -----END CERTIFICATE-----Generated at Sun Dec 7 03:21:10 2025 by rpki-client