This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/8AE913AED18811F08493AE11C4F9AE02.roa File: 8AE913AED18811F08493AE11C4F9AE02.roa (raw, json) Hash identifier: I/oWc9zkVDHhsjHv5f98gAoWosrJVNL6hHr8fJcRXjs= Subject key identifier: F8:77:9A:57:21:EC:2F:41:D1:37:5E:0D:93:C1:5F:F8:F2:D1:74:D2 Certificate issuer: /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Certificate serial: 01C5 Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/8AE913AED18811F08493AE11C4F9AE02.roa Signing time: Fri 05 Dec 2025 03:14:42 +0000 ROA not before: Fri 05 Dec 2025 03:14:42 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 55832 IP address blocks: 27.123.216.0/22 maxlen: 22 27.123.216.0/24 maxlen: 24 27.123.217.0/24 maxlen: 24 27.123.218.0/24 maxlen: 24 27.123.219.0/24 maxlen: 24 103.4.208.0/22 maxlen: 22 103.4.208.0/24 maxlen: 24 103.4.209.0/24 maxlen: 24 103.4.210.0/24 maxlen: 24 103.4.211.0/24 maxlen: 24 120.88.176.0/20 maxlen: 20 120.88.176.0/24 maxlen: 24 120.88.177.0/24 maxlen: 24 120.88.178.0/24 maxlen: 24 120.88.179.0/24 maxlen: 24 120.88.180.0/24 maxlen: 24 120.88.181.0/24 maxlen: 24 120.88.182.0/23 maxlen: 24 120.88.184.0/24 maxlen: 24 120.88.185.0/24 maxlen: 24 120.88.186.0/24 maxlen: 24 120.88.187.0/24 maxlen: 24 120.88.188.0/24 maxlen: 24 120.88.189.0/24 maxlen: 24 120.88.190.0/24 maxlen: 24 120.88.191.0/24 maxlen: 24 2407:2a00::/32 maxlen: 32 2407:2a00::/44 maxlen: 44 2407:2a00::/48 maxlen: 48 2407:2a00:1::/48 maxlen: 48 2407:2a00:2::/48 maxlen: 48 2407:2a00:3::/48 maxlen: 48 2407:2a00:4::/48 maxlen: 48 2407:2a00:5::/48 maxlen: 48 2407:2a00:6::/48 maxlen: 48 2407:2a00:7::/48 maxlen: 48 2407:2a00:8::/48 maxlen: 48 2407:2a00:10::/44 maxlen: 44 2407:2a00:20::/44 maxlen: 44 2407:2a00:30::/44 maxlen: 44 2407:2a00:40::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Validity Not Before: Dec 5 03:14:42 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69324e22-c3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:83:71:87:12:05:9c:41:15:29:1a:2f:0e:89: 8d:f4:cb:09:05:57:b5:fe:e5:81:dd:2a:a9:60:77: b9:ed:6e:f7:74:b8:53:2f:a7:ef:85:be:24:9d:86: 76:4b:5d:14:9e:6d:80:9c:76:86:45:7f:8c:c2:3b: 64:d5:e8:f6:02:9c:90:2d:0c:65:a9:3b:80:51:a3: de:1c:a0:5f:58:b4:2b:23:c3:25:f9:49:bb:93:b5: 43:ba:1c:86:ad:96:0e:cd:20:6e:5a:ab:6f:5f:7a: ba:89:b1:4f:21:97:90:b5:ac:a4:a4:5e:49:eb:f4: 63:71:0c:3b:df:53:a3:e4:b7:fd:67:9d:af:83:1f: 97:b2:0c:b4:7a:df:f5:ea:bc:6e:2a:a8:a0:5a:48: 83:89:84:55:1a:e7:14:c4:a4:69:94:aa:7f:c4:71: b8:16:40:1f:85:e1:68:49:7a:07:2e:d7:47:b2:5e: cf:f6:c7:05:8c:04:12:2c:54:a8:a8:3e:d5:8f:48: d7:c1:1f:2d:8d:c4:7e:36:fc:3e:50:12:90:52:58: 1b:29:e2:84:87:28:14:95:07:70:6a:5c:66:a1:b0: d7:f0:9e:a3:d9:61:96:11:00:01:83:8d:b6:6f:50: f7:5b:4e:5b:e6:84:3e:3e:72:11:dd:37:72:fc:75: 41:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:77:9A:57:21:EC:2F:41:D1:37:5E:0D:93:C1:5F:F8:F2:D1:74:D2 X509v3 Authority Key Identifier: keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/8AE913AED18811F08493AE11C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.123.216.0/22 103.4.208.0/22 120.88.176.0/20 IPv6: 2407:2a00::/32 Signature Algorithm: sha256WithRSAEncryption 84:26:57:18:4f:4c:89:01:e1:e1:49:33:bd:82:22:65:e7:2f: 6d:98:0f:c6:4b:7a:15:73:80:28:52:1a:4e:82:70:d3:f5:f0: 51:a3:f8:ab:cb:1b:fb:1d:2c:47:f2:78:c5:5a:e1:ed:b5:3c: 37:67:d5:86:78:96:da:a7:d5:87:09:0d:4a:f2:03:cd:60:6a: 6a:8d:ba:21:51:95:82:1a:f9:15:2e:d5:74:cb:03:50:07:ba: 0b:5e:2e:28:b2:41:94:14:02:97:80:a6:6a:a9:ea:6a:68:d8: 16:04:81:74:2f:47:91:2d:b3:04:35:d6:76:09:e2:1a:36:20: 4e:94:e0:14:4f:af:19:81:81:08:c7:0f:7f:ca:96:0f:ee:61: b1:aa:f9:61:0e:b7:39:e4:26:86:7b:0a:c0:54:54:20:0c:5a: 40:ef:02:ce:5b:01:7c:e6:7c:a5:51:b8:29:e1:e8:d1:74:93: 72:f8:57:b8:d6:34:56:8e:43:b0:f0:31:c6:80:6c:7e:52:67: 40:21:ee:79:7a:99:5b:68:fc:4d:42:df:5a:fc:ee:44:ce:35: c8:bc:50:2a:46:fd:58:76:fa:42:a8:05:20:a3:42:e1:eb:01: 80:3c:05:80:7a:af:ff:60:a7:5c:53:76:b5:ca:5d:c8:95:86: a4:11:9d:f4 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCMjQxMTAvBgNVBAUTKDM5MThEODBCQ0I3MDJFQ0FDRjg0Q0I3QUNBODgwRjg3 OEExNEZFNDgwHhcNMjUxMjA1MDMxNDQyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMyNGUyMi1jM2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34NxhxIFnEEVKRovDomN9MsJBVe1/uWB3SqpYHe57W73dLhTL6fvhb4knYZ2 S10Unm2AnHaGRX+Mwjtk1ej2ApyQLQxlqTuAUaPeHKBfWLQrI8Ml+Um7k7VDuhyG rZYOzSBuWqtvX3q6ibFPIZeQtaykpF5J6/RjcQw731Oj5Lf9Z52vgx+Xsgy0et/1 6rxuKqigWkiDiYRVGucUxKRplKp/xHG4FkAfheFoSXoHLtdHsl7P9scFjAQSLFSo qD7Vj0jXwR8tjcR+Nvw+UBKQUlgbKeKEhygUlQdwalxmobDX8J6j2WGWEQABg422 b1D3W05b5oQ+PnIR3Tdy/HVBdwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFPh3mlch 7C9B0TdeDZPBX/jy0XTSMB8GA1UdIwQYMBaAFDkY2AvLcC7Kz4TLesqID4eKFP5I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkIyNC9CNDczQzRCRTkz MzAxMUVFODIzMDgwNTlDNEY5QUUwMi9PUmpZQzh0d0xzclBoTXQ2eW9nUGg0b1Vf a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09SallDOHR3THNyUGhNdDZ5b2dQaDRvVV9rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZCMjQvQjQ3M0M0QkU5MzMwMTFFRTgyMzA4MDU5QzRGOUFFMDIvOEFFOTEzQUVE MTg4MTFGMDg0OTNBRTExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAIbe9gDBAJnBNADBAR4WLAwDQQCAAIwBwMFACQHKgAwDQYJ KoZIhvcNAQELBQADggEBAIQmVxhPTIkB4eFJM72CImXnL22YD8ZLehVzgChSGk6C cNP18FGj+KvLG/sdLEfyeMVa4e21PDdn1YZ4ltqn1YcJDUryA81gamqNuiFRlYIa +RUu1XTLA1AHugteLiiyQZQUApeApmqp6mpo2BYEgXQvR5EtswQ11nYJ4ho2IE6U 4BRPrxmBgQjHD3/Klg/uYbGq+WEOtznkJoZ7CsBUVCAMWkDvAs5bAXzmfKVRuCnh 6NF0k3L4V7jWNFaOQ7DwMcaAbH5SZ0Ah7nl6mVto/E1C31r87kTONci8UCpG/Vh2 +kKoBSCjQuHrAYA8BYB6r/9gp1xTdrXKXciVhqQRnfQ= -----END CERTIFICATE-----Generated at Sat Dec 6 18:22:15 2025 by rpki-client