This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/549CF418C91911F083F34C6DC4F9AE02.roa File: 549CF418C91911F083F34C6DC4F9AE02.roa (raw, json) Hash identifier: CPReL8vgcmnmoA6zONoWs9wX51oRMHqU0VkmCxr+UGY= Subject key identifier: 93:24:EF:2C:46:AC:27:97:64:BE:14:87:FA:4D:C1:E5:9A:1F:00:E9 Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Certificate serial: 37 Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/549CF418C91911F083F34C6DC4F9AE02.roa Signing time: Mon 24 Nov 2025 10:46:23 +0000 ROA not before: Mon 24 Nov 2025 10:46:23 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 131090 IP address blocks: 61.7.128.0/18 maxlen: 24 103.10.228.0/22 maxlen: 22 103.10.228.0/24 maxlen: 24 103.10.229.0/24 maxlen: 24 103.10.230.0/24 maxlen: 24 103.10.231.0/24 maxlen: 24 110.77.128.0/18 maxlen: 24 110.77.192.0/18 maxlen: 22 110.77.192.0/19 maxlen: 24 110.77.224.0/20 maxlen: 24 110.77.240.0/21 maxlen: 24 110.77.248.0/22 maxlen: 24 110.77.252.0/23 maxlen: 23 110.78.128.0/18 maxlen: 24 116.58.224.0/19 maxlen: 24 119.42.64.0/18 maxlen: 24 2001:c38:b000::/36 maxlen: 36 2001:c38:b010::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Validity Not Before: Nov 24 10:46:23 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6924377f-3db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c6:9d:2d:e5:c4:50:cd:e3:66:8e:60:c7:0e: 73:2c:ed:c1:b9:95:e5:bc:72:ee:23:1f:ec:3b:13: 6c:d3:5d:b6:9b:5f:55:6d:83:46:95:f8:67:e4:27: 43:7b:47:b5:6c:a6:cb:3c:3b:1e:3f:7d:ef:73:29: da:15:ec:07:69:27:4b:e1:78:9f:97:9f:93:89:e8: 59:89:1c:c4:e1:74:b9:9c:c5:86:57:45:bb:67:77: 2e:fe:69:b2:94:ed:a2:6a:22:81:b7:a4:d5:f2:51: cc:8d:be:1f:33:47:6c:84:8d:90:13:9d:ad:69:bb: 12:3f:8a:90:9c:dd:99:15:3f:2f:d6:55:7e:0d:c3: 8c:85:9c:c2:76:7d:7d:d3:e6:b7:67:2c:83:fe:59: d9:1b:3f:e4:96:01:c0:0b:10:c1:7e:fa:15:c7:44: 6b:ef:df:7b:63:2e:70:b7:a5:78:1c:5d:ea:56:7f: a9:0d:58:8e:a6:fe:b3:c4:d6:01:a2:6d:42:ba:1d: 3d:46:74:bc:ab:d0:79:6e:c4:a2:3d:d1:93:91:ea: 4c:87:7d:f9:69:52:2d:00:81:9c:c9:89:3c:06:60: e5:80:a6:14:79:21:47:a5:0f:dc:56:1e:3a:9f:af: b2:28:48:63:de:6c:10:28:90:51:56:8a:c2:9b:10: 62:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:24:EF:2C:46:AC:27:97:64:BE:14:87:FA:4D:C1:E5:9A:1F:00:E9 X509v3 Authority Key Identifier: keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/549CF418C91911F083F34C6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.7.128.0/18 103.10.228.0/22 110.77.128.0/17 110.78.128.0/18 116.58.224.0/19 119.42.64.0/18 IPv6: 2001:c38:b000::/36 Signature Algorithm: sha256WithRSAEncryption 3d:d5:6c:e9:88:09:bf:02:66:80:12:b8:7d:60:c0:dc:6a:ed: 6f:9c:84:6c:9a:9b:f5:df:33:10:d3:c6:55:2a:36:e2:2f:f2: 12:b0:55:86:9d:39:2a:05:4c:28:06:dc:30:8e:f7:87:71:9e: 19:c4:dd:3e:16:17:d8:bd:77:8e:4a:91:94:ae:6a:ed:b4:65: c7:28:8b:c8:05:c1:4a:3c:52:c4:80:d1:b8:35:a0:c1:86:39: 58:c8:28:5e:ba:eb:5b:02:8e:bf:30:5a:37:3c:cb:98:b2:0e: c8:15:67:6e:a7:b3:b1:be:60:df:bd:24:d3:b7:f8:f8:aa:6e: 0d:03:18:6c:24:dc:2c:67:a5:76:7f:40:fc:83:41:02:56:68: 51:33:89:61:da:f0:b7:47:a7:ca:c6:da:3c:1d:33:38:b6:d0: b0:e3:48:02:21:91:a9:55:eb:71:46:26:89:9f:9b:7a:e8:f2: b5:50:c1:f1:67:cf:3d:19:4f:5b:0b:c5:f3:15:bf:74:26:e8: e0:57:ea:50:20:47:52:5c:dc:e9:61:84:94:2b:3d:1a:63:48: 30:59:6a:56:a5:47:86:dd:f6:da:db:52:d6:c1:11:e6:52:98: f1:0a:94:99:24:f5:97:16:65:99:0f:c2:be:bf:ab:8a:ee:ef: d9:fb:2b:b8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoOUEzQTY3RUREQ0QwOTc3NTMzQTlBMEI4QzQ5RjRDMDEw MEM4NTM5MTAeFw0yNTExMjQxMDQ2MjNaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjQzNzdmLTNkYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaxp0t5cRQzeNmjmDHDnMs7cG5leW8cu4jH+w7E2zTXbabX1Vtg0aV+GfkJ0N7 R7Vspss8Ox4/fe9zKdoV7AdpJ0vheJ+Xn5OJ6FmJHMThdLmcxYZXRbtndy7+abKU 7aJqIoG3pNXyUcyNvh8zR2yEjZATna1puxI/ipCc3ZkVPy/WVX4Nw4yFnMJ2fX3T 5rdnLIP+WdkbP+SWAcALEMF++hXHRGvv33tjLnC3pXgcXepWf6kNWI6m/rPE1gGi bUK6HT1GdLyr0HluxKI90ZOR6kyHfflpUi0AgZzJiTwGYOWAphR5IUelD9xWHjqf r7IoSGPebBAokFFWisKbEGKlAgMBAAGjggLDMIICvzAdBgNVHQ4EFgQUkyTvLEas J5dkvhSH+k3B5ZofAOkwHwYDVR0jBBgwFoAUmjpn7dzQl3UzqaC4xJ9MAQDIU5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0I4ODUzMUNBQzhF QzExRjBBMzQ0QUI0NUM0RjlBRTAyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWpwbjdkelFsM1V6cWFDNHhKOU1BUURJVTVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9CODg1MzFDQUM4RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi81NDlDRjQxOEM5 MTkxMUYwODNGMzRDNkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBNBggrBgEFBQcBBwEB/wQ+ MDwwKgQCAAEwJAMEBj0HgAMEAmcK5AMEB25NgAMEBm5OgAMEBXQ64AMEBncqQDAO BAIAAjAIAwYEIAEMOLAwDQYJKoZIhvcNAQELBQADggEBAD3VbOmICb8CZoASuH1g wNxq7W+chGyam/XfMxDTxlUqNuIv8hKwVYadOSoFTCgG3DCO94dxnhnE3T4WF9i9 d45KkZSuau20Zccoi8gFwUo8UsSA0bg1oMGGOVjIKF6661sCjr8wWjc8y5iyDsgV Z26ns7G+YN+9JNO3+Piqbg0DGGwk3CxnpXZ/QPyDQQJWaFEziWHa8LdHp8rG2jwd Mzi20LDjSAIhkalV63FGJomfm3ro8rVQwfFnzz0ZT1sLxfMVv3Qm6OBX6lAgR1Jc 3OlhhJQrPRpjSDBZalalR4bd9trbUtbBEeZSmPEKlJkk9ZcWZZkPwr6/q4ru79n7 K7g= -----END CERTIFICATE-----Generated at Sat Dec 6 19:59:47 2025 by rpki-client