This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/A7BCECBAC3AC11F0917E4D20C4F9AE02.roa File: A7BCECBAC3AC11F0917E4D20C4F9AE02.roa (raw, json) Hash identifier: FtnAzxroZNwFcrwJMGoIxWAs0JyPNQbYHfdRba288Oo= Subject key identifier: 34:F9:1D:E4:B6:EC:93:67:82:1D:7E:0D:D0:57:1B:F2:45:AA:CF:FA Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3 Certificate serial: 015F Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/A7BCECBAC3AC11F0917E4D20C4F9AE02.roa Signing time: Mon 17 Nov 2025 12:29:22 +0000 ROA not before: Mon 17 Nov 2025 12:29:22 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 17466 IP address blocks: 58.2.0.0/20 maxlen: 20 58.2.16.0/20 maxlen: 20 58.2.16.0/21 maxlen: 21 58.2.16.0/22 maxlen: 22 58.2.20.0/22 maxlen: 22 58.2.32.0/19 maxlen: 19 58.2.128.0/19 maxlen: 19 58.2.192.0/19 maxlen: 19 58.2.224.0/21 maxlen: 21 58.2.232.0/22 maxlen: 22 58.2.240.0/20 maxlen: 20 119.43.0.0/17 maxlen: 17 119.43.128.0/18 maxlen: 18 119.43.192.0/21 maxlen: 21 119.43.205.0/24 maxlen: 24 119.43.206.0/23 maxlen: 23 119.43.208.0/20 maxlen: 20 119.43.224.0/19 maxlen: 19 124.4.0.0/19 maxlen: 19 124.4.32.0/21 maxlen: 21 124.4.40.0/22 maxlen: 22 124.4.44.0/24 maxlen: 24 124.4.45.0/24 maxlen: 24 124.4.46.0/23 maxlen: 23 124.4.48.0/20 maxlen: 20 124.4.64.0/18 maxlen: 18 124.4.120.0/23 maxlen: 23 124.4.122.0/23 maxlen: 23 124.4.122.0/24 maxlen: 24 124.4.123.0/24 maxlen: 24 124.4.128.0/18 maxlen: 18 124.4.192.0/21 maxlen: 21 124.4.204.0/22 maxlen: 22 124.4.208.0/20 maxlen: 20 124.4.252.0/22 maxlen: 22 182.94.0.0/17 maxlen: 17 182.94.128.0/18 maxlen: 18 182.94.192.0/19 maxlen: 19 182.94.224.0/21 maxlen: 21 182.94.232.0/22 maxlen: 22 182.94.240.0/24 maxlen: 24 182.94.241.0/24 maxlen: 24 182.94.242.0/23 maxlen: 23 182.94.244.0/22 maxlen: 22 182.94.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3 Validity Not Before: Nov 17 12:29:22 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=691b1522-9bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:79:13:fa:da:9d:25:dc:64:3a:f2:eb:dc:f3: bd:e1:92:3c:11:66:02:42:33:a4:8c:02:05:ba:9b: 35:4f:af:87:fb:2b:cd:52:2b:72:c8:b5:85:79:ab: 94:86:43:98:71:77:36:d6:4f:b0:6b:95:1b:9f:b2: f1:2e:cd:7a:35:d4:e1:c1:61:eb:2d:3a:b2:39:b9: b2:42:43:fd:c7:e0:ad:1f:ab:14:57:f9:ca:c9:b7: 78:a9:63:d2:f6:01:aa:b0:03:ac:e2:5d:90:91:07: 8b:6c:14:0f:0f:cb:5c:45:ee:71:c4:18:3f:7d:7f: 9d:ee:4f:59:05:70:3f:c7:48:53:cd:7f:d8:cd:e3: a8:47:6e:3d:84:d0:0b:ef:33:76:e0:aa:5f:fc:f5: fd:a4:81:e5:2d:1d:b8:d4:51:54:6c:f4:da:e7:3b: ae:c6:74:b3:d6:d0:b0:b9:f9:7a:a7:d9:40:de:b0: 1d:29:60:ea:77:1b:37:aa:7f:5e:87:5e:4a:28:fe: 3a:39:6d:c3:b2:fd:d7:bb:c0:47:f0:c5:60:cc:a2: 46:35:34:19:08:5e:dc:c3:ce:68:e9:f9:0e:94:68: 6b:d3:90:97:17:08:e8:84:7b:5a:0a:71:7c:4c:26: da:80:73:f2:0a:cd:b9:40:8b:6e:ff:f5:8c:e4:30: 2f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F9:1D:E4:B6:EC:93:67:82:1D:7E:0D:D0:57:1B:F2:45:AA:CF:FA X509v3 Authority Key Identifier: keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/A7BCECBAC3AC11F0917E4D20C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.2.0.0/18 58.2.128.0/19 58.2.192.0-58.2.235.255 58.2.240.0/20 119.43.0.0-119.43.199.255 119.43.205.0-119.43.255.255 124.4.0.0-124.4.199.255 124.4.204.0-124.4.223.255 124.4.252.0/22 182.94.0.0-182.94.235.255 182.94.240.0/20 Signature Algorithm: sha256WithRSAEncryption 6a:fc:25:8b:20:67:6c:ce:0c:cc:e9:a7:dd:d4:3f:d2:a4:7d: 8f:56:8a:1c:85:36:de:b4:51:f0:eb:40:b4:b3:24:74:88:73: 05:bd:ca:05:cb:49:b7:2b:9a:fc:bb:26:d6:ba:54:a0:9b:51: dc:37:9b:d3:94:de:fd:ca:11:c6:c5:aa:9d:31:e0:0f:89:00: 1b:ec:ce:ee:b2:bc:93:8d:23:ac:f8:26:f5:02:b9:20:ac:29: 5d:d5:97:12:13:14:00:d8:e8:4f:84:36:62:7c:2c:f8:65:18: 0b:d8:75:cb:74:9b:ab:19:35:80:b0:50:a5:9e:48:62:78:18: ec:8e:a9:b6:ea:2e:60:c4:fa:a0:63:76:be:5d:ad:ee:95:b6: d7:20:47:f2:db:7e:c7:a6:76:07:9b:d3:9c:cc:5b:d6:ab:f5: 21:4d:1e:76:15:36:1a:a0:9f:51:d9:82:ce:f7:64:dd:c8:d6: 68:82:13:50:df:cb:65:2e:e6:63:30:1c:b1:92:5b:2b:29:7d: c4:fd:f3:c5:e3:8e:3f:07:d6:82:51:68:39:14:ea:1f:fc:68: e5:83:67:af:f6:b7:dd:f9:66:ac:46:5a:ce:5a:70:ee:84:dc: f0:39:15:e8:df:a8:8c:63:85:32:c1:2f:07:55:6e:b1:93:e6: 8d:93:c4:eb -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDkxMTAvBgNVBAUTKDRDMzY1RTM2QTY0NzlEOEVCMEI1MEQ5MEYzNkQxRDdC MTlFRjg0RDMwHhcNMjUxMTE3MTIyOTIyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFiMTUyMi05YmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnkT+tqdJdxkOvLr3PO94ZI8EWYCQjOkjAIFups1T6+H+yvNUityyLWFeauU hkOYcXc21k+wa5Ubn7LxLs16NdThwWHrLTqyObmyQkP9x+CtH6sUV/nKybd4qWPS 9gGqsAOs4l2QkQeLbBQPD8tcRe5xxBg/fX+d7k9ZBXA/x0hTzX/YzeOoR249hNAL 7zN24Kpf/PX9pIHlLR241FFUbPTa5zuuxnSz1tCwufl6p9lA3rAdKWDqdxs3qn9e h15KKP46OW3Dsv3Xu8BH8MVgzKJGNTQZCF7cw85o6fkOlGhr05CXFwjohHtaCnF8 TCbagHPyCs25QItu//WM5DAv9wIDAQABo4IC/jCCAvowHQYDVR0OBBYEFDT5HeS2 7JNngh1+DdBXG/JFqs/6MB8GA1UdIwQYMBaAFEw2XjamR52OsLUNkPNtHXsZ74TT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0OS81MzE4QTEwODEy MDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5ZNnd0UTJRODIwZGV4bnZo Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REWmVOcVpIblk2d3RRMlE4MjBkZXhudmhOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzVCNDkvNTMxOEExMDgxMjAxMTFFRkFEQzg1MzQ1QzRGOUFFMDIvQTdCQ0VDQkFD M0FDMTFGMDkxN0U0RDIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYcGCCsGAQUFBwEHAQH/ BHgwdjB0BAIAATBuAwQGOgIAAwQFOgKAMAwDBAY6AsADBAI6AugDBAQ6AvAwCwMD AHcrAwQDdyvAMAsDBAB3K80DAwJ3KDALAwMCfAQDBAN8BMAwDAMEAnwEzAMEBXwE wAMEAnwE/DALAwMBtl4DBAK2XugDBAS2XvAwDQYJKoZIhvcNAQELBQADggEBAGr8 JYsgZ2zODMzpp93UP9KkfY9WihyFNt60UfDrQLSzJHSIcwW9ygXLSbcrmvy7Jta6 VKCbUdw3m9OU3v3KEcbFqp0x4A+JABvszu6yvJONI6z4JvUCuSCsKV3VlxITFADY 6E+ENmJ8LPhlGAvYdct0m6sZNYCwUKWeSGJ4GOyOqbbqLmDE+qBjdr5dre6Vttcg R/Lbfsemdgeb05zMW9ar9SFNHnYVNhqgn1HZgs73ZN3I1miCE1Dfy2Uu5mMwHLGS WyspfcT988Xjjj8H1oJRaDkU6h/8aOWDZ6/2t935ZqxGWs5acO6E3PA5FejfqIxj hTLBLwdVbrGT5o2TxOs= -----END CERTIFICATE-----Generated at Sat Dec 6 20:43:27 2025 by rpki-client