This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/12326B1E3ED211EDAE00DB18C4F9AE02.roa File: 12326B1E3ED211EDAE00DB18C4F9AE02.roa (raw, json) Hash identifier: ZO40cDLO9gCJwUx/TeWQoT8tC/grIjJKwCJILx9s2x0= Subject key identifier: EA:4C:A9:03:7B:0B:EB:00:7B:4C:83:D5:8A:71:19:35:4F:EB:57:45 Certificate issuer: /CN=A913E0D7/serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D Certificate serial: 025F Authority key identifier: 19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/12326B1E3ED211EDAE00DB18C4F9AE02.roa Signing time: Wed 03 Dec 2025 00:30:14 +0000 ROA not before: Wed 03 Dec 2025 00:30:14 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 135060 IP address blocks: 111.235.140.0/22 maxlen: 22 111.235.140.0/24 maxlen: 24 111.235.141.0/24 maxlen: 24 111.235.142.0/24 maxlen: 24 111.235.143.0/24 maxlen: 24 125.254.60.0/24 maxlen: 24 125.254.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E0D7, serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D Validity Not Before: Dec 3 00:30:14 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=692f8495-6c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ba:a1:37:8d:95:da:5c:2b:94:1a:73:e5:07: e3:7a:cf:17:fa:61:48:76:39:f1:f8:1e:b7:40:fd: 64:60:28:4d:13:a0:53:69:9c:29:6f:52:c0:89:d7: 0b:95:e8:be:9f:c4:91:b1:a3:b1:36:8b:91:e8:19: 14:33:ae:5e:58:08:1e:be:e7:5a:af:4f:9b:8c:7f: e4:2a:11:49:41:32:f2:f3:75:4c:84:f4:20:be:1a: 21:0f:7e:96:1d:5a:0c:41:2b:00:95:91:9a:4b:b5: 66:ee:b9:82:a8:44:ed:cb:68:76:2f:4f:bf:38:9a: 6e:7f:51:e0:70:e1:85:da:93:a4:e2:1d:ae:b7:46: b4:10:5f:4a:58:51:84:5f:07:e2:00:23:05:68:4c: e7:41:41:3c:12:66:69:d5:a1:cf:dc:6e:2c:1c:fe: 7e:d5:ae:bd:c7:da:ca:95:90:89:7e:0e:74:83:cf: 1d:7e:c4:04:d7:0f:6b:07:0a:0f:d2:1f:b0:96:82: e7:59:81:b0:54:62:0f:cb:87:c4:cc:e7:30:2f:d4: b1:e6:22:71:5d:9c:3d:1a:8e:c3:4e:d1:c4:6c:f8: a7:aa:aa:e5:b5:3e:46:a4:49:52:7c:21:c8:d6:41: 31:8f:64:9f:28:b9:e0:2d:8d:73:9e:8e:86:8d:b7: f6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4C:A9:03:7B:0B:EB:00:7B:4C:83:D5:8A:71:19:35:4F:EB:57:45 X509v3 Authority Key Identifier: keyid:19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/12326B1E3ED211EDAE00DB18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.235.140.0/22 125.254.60.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:34:5f:d9:f3:72:e9:04:15:bb:33:84:56:22:82:1b:ca:d0: 11:45:f5:09:0f:35:c3:03:85:9a:8e:45:55:eb:ed:45:e4:a3: 2d:a3:a3:be:f1:3f:ff:8c:30:1d:2c:4b:5b:8d:e8:e6:10:25: b9:69:58:f0:94:37:2f:a2:14:73:61:0b:a0:c4:d0:59:06:6a: 64:2f:7f:59:1d:6a:c9:d0:b0:bf:01:54:c1:41:f6:ad:27:46: 03:60:cc:81:de:04:9d:8e:ab:c3:f1:09:52:0a:95:ce:4c:64: 67:3d:00:e5:e5:12:60:e7:20:bd:62:67:e5:8b:b3:8a:7b:ba: 8e:1a:51:71:c9:ca:a3:68:cc:16:fb:f8:dc:23:f6:53:15:15: a9:a1:4a:03:1d:71:f8:7f:23:10:19:5a:c7:e4:87:25:71:3c: fe:d8:65:4c:a5:eb:96:b6:d6:1b:c7:94:6a:f1:72:81:aa:47: 3b:bb:e1:19:87:e7:40:01:76:3a:84:7b:3f:c7:77:85:b5:59: b4:e2:48:99:f1:e9:cf:75:40:8b:31:51:d1:95:40:d2:62:3b: 8c:73:0d:72:91:54:5e:d9:03:af:d9:a0:0b:c6:56:77:3a:27: 05:73:4f:39:ad:21:92:33:c4:02:ea:02:be:5d:16:5d:ff:3b: 8a:17:db:8e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwRDcxMTAvBgNVBAUTKDE5QkFCQkNGNEM5OTk5MzAwQUMwNTlDNjUzQzI5MDg0 MkY2QTY2MEQwHhcNMjUxMjAzMDAzMDE0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmODQ5NS02YzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLqhN42V2lwrlBpz5Qfjes8X+mFIdjnx+B63QP1kYChNE6BTaZwpb1LAidcL lei+n8SRsaOxNouR6BkUM65eWAgevudar0+bjH/kKhFJQTLy83VMhPQgvhohD36W HVoMQSsAlZGaS7Vm7rmCqETty2h2L0+/OJpuf1HgcOGF2pOk4h2ut0a0EF9KWFGE XwfiACMFaEznQUE8EmZp1aHP3G4sHP5+1a69x9rKlZCJfg50g88dfsQE1w9rBwoP 0h+wloLnWYGwVGIPy4fEzOcwL9Sx5iJxXZw9Go7DTtHEbPinqqrltT5GpElSfCHI 1kExj2SfKLngLY1zno6Gjbf2BwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOpMqQN7 C+sAe0yD1YpxGTVP61dFMB8GA1UdIwQYMBaAFBm6u89MmZkwCsBZxlPCkIQvamYN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTBENy84RkVGODQwNDNF Q0YxMUVEQTVGMUZBMTdDNEY5QUUwMi9HYnE3ejB5Wm1UQUt3Rm5HVThLUWhDOXFa ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dicTd6MHlabVRBS3dGbkdVOEtRaEM5cVpnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0UwRDcvOEZFRjg0MDQzRUNGMTFFREE1RjFGQTE3QzRGOUFFMDIvMTIzMjZCMUUz RUQyMTFFREFFMDBEQjE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJv64wDBAF9/jwwDQYJKoZIhvcNAQELBQADggEBAIw0X9nz cukEFbszhFYighvK0BFF9QkPNcMDhZqORVXr7UXkoy2jo77xP/+MMB0sS1uN6OYQ JblpWPCUNy+iFHNhC6DE0FkGamQvf1kdasnQsL8BVMFB9q0nRgNgzIHeBJ2Oq8Px CVIKlc5MZGc9AOXlEmDnIL1iZ+WLs4p7uo4aUXHJyqNozBb7+Nwj9lMVFamhSgMd cfh/IxAZWsfkhyVxPP7YZUyl65a21hvHlGrxcoGqRzu74RmH50ABdjqEez/Hd4W1 WbTiSJnx6c91QIsxUdGVQNJiO4xzDXKRVF7ZA6/ZoAvGVnc6JwVzTzmtIZIzxALq Ar5dFl3/O4oX244= -----END CERTIFICATE-----Generated at Sun Dec 7 04:56:22 2025 by rpki-client