This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/CAF0BBBCDB0811F0A3EA0CD881D3641D.roa File: CAF0BBBCDB0811F0A3EA0CD881D3641D.roa (raw, json) Hash identifier: 2a4cneMYcKI2Cb2qBm3u+TuolEyY9URQGQwLAufLa2Y= Subject key identifier: D3:7E:23:0C:80:D6:3C:B3:5D:5A:DC:50:61:0F:26:11:5B:39:F9:E4 Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3 Certificate serial: 018E Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/CAF0BBBCDB0811F0A3EA0CD881D3641D.roa Signing time: Mon 29 Dec 2025 04:23:37 +0000 ROA not before: Mon 29 Dec 2025 04:23:37 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 17466 IP address blocks: 58.2.0.0/20 maxlen: 20 58.2.16.0/20 maxlen: 20 58.2.16.0/21 maxlen: 21 58.2.16.0/22 maxlen: 22 58.2.20.0/22 maxlen: 22 58.2.32.0/19 maxlen: 19 58.2.128.0/19 maxlen: 19 58.2.192.0/19 maxlen: 19 58.2.224.0/21 maxlen: 21 58.2.232.0/22 maxlen: 22 58.2.240.0/20 maxlen: 20 119.43.0.0/17 maxlen: 17 119.43.128.0/18 maxlen: 18 119.43.192.0/21 maxlen: 21 119.43.205.0/24 maxlen: 24 119.43.206.0/23 maxlen: 23 119.43.208.0/20 maxlen: 20 119.43.224.0/19 maxlen: 19 124.4.0.0/19 maxlen: 19 124.4.32.0/21 maxlen: 21 124.4.40.0/22 maxlen: 22 124.4.44.0/24 maxlen: 24 124.4.45.0/24 maxlen: 24 124.4.46.0/23 maxlen: 23 124.4.48.0/20 maxlen: 20 124.4.64.0/18 maxlen: 18 124.4.120.0/23 maxlen: 24 124.4.122.0/23 maxlen: 24 124.4.128.0/18 maxlen: 18 124.4.192.0/21 maxlen: 21 124.4.204.0/22 maxlen: 22 124.4.208.0/20 maxlen: 20 124.4.252.0/22 maxlen: 22 182.94.0.0/17 maxlen: 17 182.94.128.0/18 maxlen: 18 182.94.192.0/19 maxlen: 19 182.94.224.0/21 maxlen: 21 182.94.232.0/22 maxlen: 22 182.94.236.0/23 maxlen: 24 182.94.238.0/23 maxlen: 24 182.94.240.0/24 maxlen: 24 182.94.241.0/24 maxlen: 24 182.94.242.0/23 maxlen: 23 182.94.244.0/22 maxlen: 22 182.94.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3 Validity Not Before: Dec 29 04:23:37 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69520249-6316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3b:9b:79:9f:c2:8c:c2:3a:0d:71:3f:a9:f7: c8:98:c3:a6:1b:e2:dc:0b:fc:4c:1d:c8:fa:03:09: 70:85:69:2f:0a:81:33:f3:81:f6:ae:79:59:e0:42: c1:5b:81:50:8f:1b:5e:d4:f6:84:f8:10:2f:94:39: 61:95:e1:cf:18:85:72:11:65:e2:aa:fa:09:76:2b: fb:3e:74:5e:4a:ef:32:72:73:ab:20:43:a6:dc:37: 7b:d2:ad:e4:5e:e7:5e:f5:ad:78:38:8e:3b:2e:ae: 41:95:3b:26:f5:1f:5b:98:8c:43:04:3b:c2:49:39: b6:f8:a3:49:8a:0a:b3:53:7a:da:ab:79:77:2f:c1: 97:87:0b:3e:01:44:b2:6e:31:4a:dc:49:13:6e:60: 3d:52:50:d5:ff:22:d6:90:cc:28:86:a3:52:d5:4f: 7e:1c:6f:e9:79:b1:54:08:10:f2:12:f9:09:11:9b: 75:f1:0c:89:05:44:64:1e:83:bb:8a:8a:3b:b1:71: 3f:d2:8f:3f:20:9e:61:44:20:c7:70:1c:de:d2:27: b4:ec:cc:aa:fa:04:a6:10:40:b3:88:6e:9e:ca:82: 97:d1:d6:0b:d1:d5:70:07:48:c8:d9:c3:64:43:b8: 12:ad:e3:f2:ab:09:27:25:71:94:f1:d6:e0:20:90: 40:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7E:23:0C:80:D6:3C:B3:5D:5A:DC:50:61:0F:26:11:5B:39:F9:E4 X509v3 Authority Key Identifier: keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/CAF0BBBCDB0811F0A3EA0CD881D3641D.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.2.0.0/18 58.2.128.0/19 58.2.192.0-58.2.235.255 58.2.240.0/20 119.43.0.0-119.43.199.255 119.43.205.0-119.43.255.255 124.4.0.0-124.4.199.255 124.4.204.0-124.4.223.255 124.4.252.0/22 182.94.0.0/16 Signature Algorithm: sha256WithRSAEncryption 27:27:77:22:58:78:bc:0f:ac:11:fb:76:94:34:2c:10:9a:74: fd:c0:d7:67:e9:2c:32:bd:ee:88:07:3f:18:1c:d4:ce:46:62: 75:7c:9d:f8:94:40:bb:10:7a:9c:46:a3:c2:3d:e9:fa:7f:c8: c5:70:03:c7:38:21:5b:6b:c8:0c:42:22:47:a4:30:af:97:fd: 23:d9:09:4b:f9:c4:84:a5:c6:f8:22:70:bc:b6:16:6b:76:46: 0e:4a:28:46:d2:c2:f8:fa:6d:4f:24:d1:bf:3c:a3:c2:bb:f3: 01:80:5a:d1:68:29:30:d5:cf:0a:fd:98:7d:2a:ba:8c:63:eb: 04:ac:08:77:e4:8c:3e:db:21:6b:f2:3c:8f:c1:87:b0:9a:05: 7b:11:e4:92:06:b2:9b:cf:fd:ab:94:bf:d2:94:f5:7d:a0:e6: e7:c8:70:50:5a:4b:ad:75:47:82:46:7f:7c:42:43:5f:41:71: 10:c8:4c:2b:f2:24:1c:6f:12:83:7c:1b:27:29:76:77:2c:66: bb:7f:d2:6a:dd:03:71:01:df:99:14:96:08:3c:22:0c:7d:e2: a1:ed:d1:87:61:48:cd:8b:34:42:57:64:76:7c:97:13:4f:cb: 9f:1f:82:52:61:89:62:02:c7:a6:f7:64:6a:14:00:c2:cb:2e: c4:a3:67:ce -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MzVCNDkxMTAvBgNVBAUTKDRDMzY1RTM2QTY0NzlEOEVCMEI1MEQ5MEYzNkQxRDdC MTlFRjg0RDMwHhcNMjUxMjI5MDQyMzM3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTUyMDI0OS02MzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzubeZ/CjMI6DXE/qffImMOmG+LcC/xMHcj6AwlwhWkvCoEz84H2rnlZ4ELB W4FQjxte1PaE+BAvlDlhleHPGIVyEWXiqvoJdiv7PnReSu8ycnOrIEOm3Dd70q3k Xude9a14OI47Lq5BlTsm9R9bmIxDBDvCSTm2+KNJigqzU3raq3l3L8GXhws+AUSy bjFK3EkTbmA9UlDV/yLWkMwohqNS1U9+HG/pebFUCBDyEvkJEZt18QyJBURkHoO7 ioo7sXE/0o8/IJ5hRCDHcBze0ie07Myq+gSmEECziG6eyoKX0dYL0dVwB0jI2cNk Q7gSrePyqwknJXGU8dbgIJBArQIDAQABo4IC7zCCAuswHQYDVR0OBBYEFNN+IwyA 1jyzXVrcUGEPJhFbOfnkMB8GA1UdIwQYMBaAFEw2XjamR52OsLUNkPNtHXsZ74TT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0OS81MzE4QTEwODEy MDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5ZNnd0UTJRODIwZGV4bnZo Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REWmVOcVpIblk2d3RRMlE4MjBkZXhudmhOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzVCNDkvNTMxOEExMDgxMjAxMTFFRkFEQzg1MzQ1QzRGOUFFMDIvQ0FGMEJCQkNE QjA4MTFGMEEzRUEwQ0Q4ODFEMzY0MUQucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwweQYIKwYBBQUHAQcBAf8E ajBoMGYEAgABMGADBAY6AgADBAU6AoAwDAMEBjoCwAMEAjoC6AMEBDoC8DALAwMA dysDBAN3K8AwCwMEAHcrzQMDAncoMAsDAwJ8BAMEA3wEwDAMAwQCfATMAwQFfATA AwQCfAT8AwMAtl4wDQYJKoZIhvcNAQELBQADggEBACcndyJYeLwPrBH7dpQ0LBCa dP3A12fpLDK97ogHPxgc1M5GYnV8nfiUQLsQepxGo8I96fp/yMVwA8c4IVtryAxC IkekMK+X/SPZCUv5xISlxvgicLy2Fmt2Rg5KKEbSwvj6bU8k0b88o8K78wGAWtFo KTDVzwr9mH0quoxj6wSsCHfkjD7bIWvyPI/Bh7CaBXsR5JIGspvP/auUv9KU9X2g 5ufIcFBaS611R4JGf3xCQ19BcRDITCvyJBxvEoN8GycpdncsZrt/0mrdA3EB35kU lgg8Igx94qHt0YdhSM2LNEJXZHZ8lxNPy58fglJhiWICx6b3ZGoUAMLLLsSjZ84= -----END CERTIFICATE-----Generated at Sun Jan 25 12:03:27 2026 by rpki-client