This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/7814B330E45E11E681F82341C4F9AE02.roa File: 7814B330E45E11E681F82341C4F9AE02.roa (raw, json) Hash identifier: uvELEwi27NEueao5KQlppsZW28RWPe5sg6P8nIcdY8Y= Subject key identifier: 76:05:58:8D:DE:35:77:AB:A7:58:15:3A:4C:1B:8D:20:CC:A8:68:FF Certificate issuer: /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Certificate serial: 1CD5 Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/7814B330E45E11E681F82341C4F9AE02.roa Signing time: Tue 25 Nov 2025 06:26:42 +0000 ROA not before: Tue 25 Nov 2025 06:26:42 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132167 IP address blocks: 69.160.0.0/19 maxlen: 19 69.160.0.0/21 maxlen: 21 69.160.0.0/24 maxlen: 24 69.160.1.0/24 maxlen: 24 69.160.2.0/24 maxlen: 24 69.160.3.0/24 maxlen: 24 69.160.4.0/24 maxlen: 24 69.160.5.0/24 maxlen: 24 69.160.6.0/24 maxlen: 24 69.160.7.0/24 maxlen: 24 69.160.8.0/21 maxlen: 21 69.160.8.0/24 maxlen: 24 69.160.9.0/24 maxlen: 24 69.160.10.0/24 maxlen: 24 69.160.11.0/24 maxlen: 24 69.160.13.0/24 maxlen: 24 69.160.14.0/24 maxlen: 24 69.160.16.0/21 maxlen: 21 69.160.16.0/24 maxlen: 24 69.160.17.0/24 maxlen: 24 69.160.18.0/24 maxlen: 24 69.160.19.0/24 maxlen: 24 69.160.20.0/24 maxlen: 24 69.160.21.0/24 maxlen: 24 69.160.22.0/24 maxlen: 24 69.160.23.0/24 maxlen: 24 69.160.24.0/21 maxlen: 21 69.160.24.0/24 maxlen: 24 69.160.25.0/24 maxlen: 24 69.160.26.0/24 maxlen: 24 69.160.27.0/24 maxlen: 24 69.160.28.0/24 maxlen: 24 69.160.29.0/24 maxlen: 24 69.160.30.0/24 maxlen: 24 69.160.31.0/24 maxlen: 24 74.50.208.0/21 maxlen: 21 74.50.208.0/24 maxlen: 24 74.50.209.0/24 maxlen: 24 74.50.210.0/24 maxlen: 24 74.50.211.0/24 maxlen: 24 74.50.212.0/24 maxlen: 24 74.50.213.0/24 maxlen: 24 74.50.214.0/24 maxlen: 24 74.50.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7381 (0x1cd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145519, serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Validity Not Before: Nov 25 06:26:42 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69254c22-8bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:db:b1:d0:05:d6:f0:58:72:08:e0:70:3d:60: 28:25:37:06:4d:ee:1e:14:6f:9d:32:53:41:19:19: a0:49:6b:97:53:14:37:bd:04:a0:f2:53:e4:b0:03: f9:0e:92:12:46:11:d5:f2:20:19:81:df:ea:cc:d8: 15:0e:d8:dd:05:27:7d:53:ab:2e:db:84:ff:67:eb: 59:c8:6f:61:8a:a1:fc:ad:64:14:7c:27:5a:f4:df: 0d:d8:40:fe:99:ee:08:65:70:d5:13:0d:78:82:31: 72:37:8d:e4:bb:a4:70:53:78:4c:03:25:ac:57:40: 24:52:30:bf:bd:93:e5:01:73:a5:e0:0d:9b:9a:1d: 09:bc:bf:7f:4c:c0:61:77:32:7c:79:5a:2f:89:29: 62:2a:fb:11:c2:99:ad:18:e3:18:ae:89:6b:32:67: 30:a3:80:fc:0e:99:46:b8:5e:f3:cf:f1:22:fc:f6: e0:a0:4e:92:01:29:2b:67:55:27:1c:89:29:b4:c9: 40:e8:40:00:4e:db:9d:57:86:f2:05:d9:43:9e:31: 5d:68:9e:ad:e0:4f:40:b1:b1:42:03:c8:2e:b0:e0: 3c:aa:95:55:7b:b5:de:2b:65:87:18:fa:6d:ba:7c: c8:c4:21:14:5d:9f:9c:a5:f7:34:bc:11:24:47:3d: 55:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:05:58:8D:DE:35:77:AB:A7:58:15:3A:4C:1B:8D:20:CC:A8:68:FF X509v3 Authority Key Identifier: keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/7814B330E45E11E681F82341C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 69.160.0.0/19 74.50.208.0/21 Signature Algorithm: sha256WithRSAEncryption 26:c4:e4:b9:1b:13:94:0d:db:3b:1c:c5:7e:96:ec:db:1d:b7: 42:d9:93:01:27:f7:c1:20:a9:1f:a6:07:e9:f0:16:50:34:21: 41:8d:10:5b:a9:d1:89:43:42:ba:28:d9:dc:b3:33:5e:4c:74: 7f:20:48:19:17:e6:f1:5a:2a:94:9a:5e:c4:13:92:70:4d:5b: 3c:8e:f0:2f:23:98:04:ca:44:fb:0d:1d:f0:0c:57:38:38:86: 7c:53:6c:af:2d:91:a3:de:7e:47:7f:6e:5f:89:07:16:6b:51: e9:15:6a:00:3e:e2:0f:b8:e5:55:f7:6b:44:50:8c:e3:49:d6: 8d:06:38:cb:83:09:6e:c8:c0:a1:43:80:cf:c4:3c:96:aa:5f: 01:33:a5:1b:82:cd:47:6c:ca:ad:58:93:b1:fd:a3:ff:1b:4a: d5:e4:e2:36:d9:a5:c6:11:24:a2:a5:be:55:2a:71:18:6f:4f: 3b:05:fd:e5:a3:a2:d2:df:29:d9:fd:7f:32:92:1a:5d:69:0f: db:2a:58:58:ce:f5:6f:6c:3f:e5:3e:6d:a8:15:57:58:40:ba: 8d:81:57:ce:89:87:45:9a:f5:d1:d0:0a:6b:15:fe:94:6f:64: be:51:3d:eb:50:74:c4:f5:87:f5:9f:f5:a4:d2:c3:66:5a:44: 02:79:b5:c5 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICHNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTkxMTAvBgNVBAUTKDZGRTZCMzNFQTg3MzkwNjYwQjQ2QjExMURBRDU3RDYw NkYyRkVFMjQwHhcNMjUxMTI1MDYyNjQyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI1NGMyMi04YmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtux0AXW8FhyCOBwPWAoJTcGTe4eFG+dMlNBGRmgSWuXUxQ3vQSg8lPksAP5 DpISRhHV8iAZgd/qzNgVDtjdBSd9U6su24T/Z+tZyG9hiqH8rWQUfCda9N8N2ED+ me4IZXDVEw14gjFyN43ku6RwU3hMAyWsV0AkUjC/vZPlAXOl4A2bmh0JvL9/TMBh dzJ8eVoviSliKvsRwpmtGOMYrolrMmcwo4D8DplGuF7zz/Ei/PbgoE6SASkrZ1Un HIkptMlA6EAATtudV4byBdlDnjFdaJ6t4E9AsbFCA8gusOA8qpVVe7XeK2WHGPpt unzIxCEUXZ+cpfc0vBEkRz1VqwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHYFWI3e NXerp1gVOkwbjSDMqGj/MB8GA1UdIwQYMBaAFG/msz6oc5BmC0axEdrVfWBvL+4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BMkZDMzI2NEU0 NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtHWUxSckVSMnRWOVlHOHY3 aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ItYXpQcWh6a0dZTFJyRVIydFY5WUc4djdpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDU1MTkvQTJGQzMyNjRFNDVDMTFFNjhDRURGQTNFQzRGOUFFMDIvNzgxNEIzMzBF NDVFMTFFNjgxRjgyMzQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAVFoAADBANKMtAwDQYJKoZIhvcNAQELBQADggEBACbE5Lkb E5QN2zscxX6W7Nsdt0LZkwEn98EgqR+mB+nwFlA0IUGNEFup0YlDQroo2dyzM15M dH8gSBkX5vFaKpSaXsQTknBNWzyO8C8jmATKRPsNHfAMVzg4hnxTbK8tkaPefkd/ bl+JBxZrUekVagA+4g+45VX3a0RQjONJ1o0GOMuDCW7IwKFDgM/EPJaqXwEzpRuC zUdsyq1Yk7H9o/8bStXk4jbZpcYRJKKlvlUqcRhvTzsF/eWjotLfKdn9fzKSGl1p D9sqWFjO9W9sP+U+bagVV1hAuo2BV86Jh0Wa9dHQCmsV/pRvZL5RPetQdMT1h/Wf 9aTSw2ZaRAJ5tcU= -----END CERTIFICATE-----Generated at Sun Dec 7 01:38:49 2025 by rpki-client