This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/764D8698EA9111EAA035205FC4F9AE02.roa File: 764D8698EA9111EAA035205FC4F9AE02.roa (raw, json) Hash identifier: Ao8GYlU9qmH9I2gn1U2BDGM5pHYajv6lHfgCuvY6ag8= Subject key identifier: 68:75:1C:D1:90:6E:3F:5D:46:F6:C8:7F:06:DA:ED:5E:73:FA:A4:2B Certificate issuer: /CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB Certificate serial: 1F87 Authority key identifier: 18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/764D8698EA9111EAA035205FC4F9AE02.roa Signing time: Fri 02 Jan 2026 16:14:53 +0000 ROA not before: Fri 02 Jan 2026 16:14:53 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 17625 IP address blocks: 27.109.0.0/24 maxlen: 24 27.109.1.0/24 maxlen: 24 27.109.2.0/24 maxlen: 24 27.109.3.0/24 maxlen: 24 27.109.4.0/24 maxlen: 24 27.109.5.0/24 maxlen: 24 27.109.6.0/24 maxlen: 24 27.109.7.0/24 maxlen: 24 27.109.8.0/24 maxlen: 24 27.109.9.0/24 maxlen: 24 27.109.10.0/24 maxlen: 24 27.109.11.0/24 maxlen: 24 27.109.12.0/24 maxlen: 24 27.109.13.0/24 maxlen: 24 27.109.14.0/24 maxlen: 24 27.109.15.0/24 maxlen: 24 27.109.16.0/24 maxlen: 24 27.109.17.0/24 maxlen: 24 27.109.18.0/24 maxlen: 24 27.109.19.0/24 maxlen: 24 27.109.20.0/24 maxlen: 24 27.109.21.0/24 maxlen: 24 27.109.22.0/24 maxlen: 24 27.109.23.0/24 maxlen: 24 27.109.24.0/24 maxlen: 24 27.109.25.0/24 maxlen: 24 27.109.26.0/24 maxlen: 24 27.109.27.0/24 maxlen: 24 27.109.28.0/24 maxlen: 24 27.109.29.0/24 maxlen: 24 27.109.30.0/24 maxlen: 24 27.109.31.0/24 maxlen: 24 45.64.192.0/24 maxlen: 24 45.64.193.0/24 maxlen: 24 45.64.194.0/24 maxlen: 24 45.64.195.0/24 maxlen: 24 103.19.132.0/24 maxlen: 24 103.19.133.0/24 maxlen: 24 103.19.134.0/24 maxlen: 24 103.19.135.0/24 maxlen: 24 120.72.88.0/24 maxlen: 24 120.72.89.0/24 maxlen: 24 120.72.90.0/24 maxlen: 24 120.72.91.0/24 maxlen: 24 120.72.92.0/24 maxlen: 24 120.72.93.0/24 maxlen: 24 120.72.94.0/24 maxlen: 24 120.72.95.0/24 maxlen: 24 180.211.96.0/24 maxlen: 24 180.211.97.0/24 maxlen: 24 180.211.98.0/24 maxlen: 24 180.211.99.0/24 maxlen: 24 180.211.100.0/24 maxlen: 24 180.211.101.0/24 maxlen: 24 180.211.102.0/24 maxlen: 24 180.211.103.0/24 maxlen: 24 180.211.104.0/24 maxlen: 24 180.211.105.0/24 maxlen: 24 180.211.106.0/24 maxlen: 24 180.211.107.0/24 maxlen: 24 180.211.108.0/24 maxlen: 24 180.211.109.0/24 maxlen: 24 180.211.110.0/24 maxlen: 24 180.211.111.0/24 maxlen: 24 180.211.112.0/24 maxlen: 24 180.211.113.0/24 maxlen: 24 180.211.114.0/24 maxlen: 24 180.211.115.0/24 maxlen: 24 180.211.116.0/24 maxlen: 24 180.211.117.0/24 maxlen: 24 180.211.118.0/24 maxlen: 24 180.211.119.0/24 maxlen: 24 180.211.120.0/24 maxlen: 24 180.211.121.0/24 maxlen: 24 180.211.122.0/24 maxlen: 24 180.211.123.0/24 maxlen: 24 180.211.124.0/24 maxlen: 24 180.211.125.0/24 maxlen: 24 180.211.126.0/24 maxlen: 24 180.211.127.0/24 maxlen: 24 202.131.96.0/24 maxlen: 24 202.131.97.0/24 maxlen: 24 202.131.98.0/24 maxlen: 24 202.131.99.0/24 maxlen: 24 202.131.100.0/24 maxlen: 24 202.131.101.0/24 maxlen: 24 202.131.102.0/24 maxlen: 24 202.131.103.0/24 maxlen: 24 202.131.104.0/24 maxlen: 24 202.131.105.0/24 maxlen: 24 202.131.106.0/24 maxlen: 24 202.131.107.0/24 maxlen: 24 202.131.108.0/24 maxlen: 24 202.131.109.0/24 maxlen: 24 202.131.110.0/24 maxlen: 24 202.131.111.0/24 maxlen: 24 202.131.112.0/24 maxlen: 24 202.131.113.0/24 maxlen: 24 202.131.114.0/24 maxlen: 24 202.131.115.0/24 maxlen: 24 202.131.116.0/24 maxlen: 24 202.131.117.0/24 maxlen: 24 202.131.118.0/24 maxlen: 24 202.131.119.0/24 maxlen: 24 202.131.120.0/24 maxlen: 24 202.131.121.0/24 maxlen: 24 202.131.122.0/24 maxlen: 24 202.131.123.0/24 maxlen: 24 202.131.124.0/24 maxlen: 24 202.131.125.0/24 maxlen: 24 202.131.126.0/24 maxlen: 24 2401:2d00::/32 maxlen: 32 2401:2d00::/48 maxlen: 48 2401:2d00:1::/48 maxlen: 48 2401:2d00:2::/48 maxlen: 48 2401:2d00:3::/48 maxlen: 48 2401:2d00:4::/48 maxlen: 48 2401:2d00:10::/48 maxlen: 48 2401:2d00:12::/48 maxlen: 48 2401:2d00:1a::/48 maxlen: 48 2401:2d00:22::/48 maxlen: 48 2401:2d00:40::/48 maxlen: 48 2401:2d00:4000::/48 maxlen: 48 2401:2d00:8000::/48 maxlen: 48 2401:2d00:8001::/48 maxlen: 48 2401:2d00:8002::/48 maxlen: 48 2401:2d00:83e6::/48 maxlen: 48 2401:2d00:83e7::/48 maxlen: 48 2401:2d00:83e8::/48 maxlen: 48 2401:2d00:c3e6::/48 maxlen: 48 2401:2d00:c3e7::/48 maxlen: 48 2401:2d00:c3e8::/48 maxlen: 48 2401:2d00:c3e9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8071 (0x1f87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A0CB, serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB Validity Not Before: Jan 2 16:14:53 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6957eefc-bc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:30:9f:a3:96:a5:77:10:df:28:92:9b:c8:39: 87:d9:83:2e:86:22:ae:83:a1:97:47:82:89:6b:39: af:0d:d9:78:79:61:47:f6:79:95:39:5f:57:5d:17: e1:95:ba:30:d2:25:47:24:c5:b8:e9:b1:23:03:4c: 0c:6a:35:26:69:63:34:c3:c9:3b:25:33:55:7a:6a: bb:65:18:71:cd:29:53:42:fa:c7:91:2c:30:4a:72: 42:87:4a:e0:93:52:02:3d:2b:ef:53:b0:b5:0d:41: 8e:c2:03:8c:60:04:12:90:f1:3c:d9:a5:03:b5:e4: 94:08:24:a0:07:ea:e7:98:dd:a5:5a:b5:d5:b3:b3: 4a:0e:61:46:6d:a2:c8:8c:5e:ed:2a:a5:5c:af:8a: e4:e3:47:89:99:a9:59:68:01:c0:db:65:28:eb:ae: 7c:28:21:fe:f3:48:1b:08:30:ec:87:46:c1:5e:45: 3f:95:02:90:2d:be:c4:32:0f:2c:4a:4b:f6:cb:c9: 31:7b:d9:89:8d:9f:69:8e:8b:37:4b:54:de:f4:e8: 99:99:66:47:73:c2:48:64:76:a5:ef:d7:0a:45:6d: 31:cc:4a:63:56:5e:96:77:f0:6a:ec:fd:9b:69:2a: 2c:36:51:85:4b:25:a1:40:01:76:f5:62:54:a9:f3: 13:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:75:1C:D1:90:6E:3F:5D:46:F6:C8:7F:06:DA:ED:5E:73:FA:A4:2B X509v3 Authority Key Identifier: keyid:18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/764D8698EA9111EAA035205FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.109.0.0/19 45.64.192.0/22 103.19.132.0/22 120.72.88.0/21 180.211.96.0/19 202.131.96.0-202.131.126.255 IPv6: 2401:2d00::/32 Signature Algorithm: sha256WithRSAEncryption 30:6b:d7:4f:ff:78:2f:11:60:72:4d:a5:13:81:e4:ba:9c:4f: 3a:08:b8:97:6b:40:9f:c2:5e:d7:dc:66:ae:ef:4a:79:73:05: f5:79:ca:b7:ec:1d:15:01:33:78:b4:2d:63:20:9c:2a:52:b2: 18:a2:e5:0d:e3:88:14:c3:0c:a0:ab:f2:e9:fc:e5:0c:d0:81: 14:0f:a5:b9:71:23:a4:b5:2c:f2:a4:4c:27:81:a2:a1:a7:e4: 28:58:32:f6:7e:78:f9:61:11:c4:81:c3:f6:68:73:2b:60:79: 56:4d:7d:39:9f:c9:c5:64:a3:ea:14:7c:ec:1d:a8:ff:cc:09: c6:79:45:12:73:11:39:10:f6:62:28:b7:9e:f1:db:25:ba:ef: 84:03:9b:27:bb:c5:ee:b6:5a:b1:c2:65:75:c9:56:d0:11:66: a4:76:9a:c8:ab:2d:0c:09:de:40:32:45:e0:3c:00:ed:a8:3e: 3e:35:20:9e:7c:b7:53:15:3d:a6:d0:42:7a:f7:45:84:90:85: 3f:35:e9:a6:34:b3:b4:59:fd:85:24:b1:72:25:42:66:6d:b5: 0b:a3:b9:dd:4b:fd:7b:03:e1:51:08:f0:70:c7:41:32:88:e3: 9a:ac:75:25:f0:2c:f5:d0:52:8e:d9:38:b1:63:52:83:82:9d: 90:73:c1:00 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgICH4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NEEwQ0IxMTAvBgNVBAUTKDE4MDU2REVCNTgwRTM1NzRGMTQ4M0U2NjlDNUFBNDJF NTg0RUNFQkIwHhcNMjYwMTAyMTYxNDUzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU3ZWVmYy1iYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDCfo5aldxDfKJKbyDmH2YMuhiKug6GXR4KJazmvDdl4eWFH9nmVOV9XXRfh lbow0iVHJMW46bEjA0wMajUmaWM0w8k7JTNVemq7ZRhxzSlTQvrHkSwwSnJCh0rg k1ICPSvvU7C1DUGOwgOMYAQSkPE82aUDteSUCCSgB+rnmN2lWrXVs7NKDmFGbaLI jF7tKqVcr4rk40eJmalZaAHA22Uo6658KCH+80gbCDDsh0bBXkU/lQKQLb7EMg8s Skv2y8kxe9mJjZ9pjos3S1Te9OiZmWZHc8JIZHal79cKRW0xzEpjVl6Wd/Bq7P2b aSosNlGFSyWhQAF29WJUqfMTNQIDAQABo4ICyjCCAsYwHQYDVR0OBBYEFGh1HNGQ bj9dRvbIfwba7V5z+qQrMB8GA1UdIwQYMBaAFBgFbetYDjV08Ug+ZpxapC5YTs67 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTBDQi9FNUMzQUU5QzVB MTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFnT05YVHhTRDVtbkZxa0xsaE96 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBVnQ2MWdPTlhUeFNENW1uRnFrTGxoT3pycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEEwQ0IvRTVDM0FFOUM1QTE5MTFFNjgxQjhDMTBGQzRGOUFFMDIvNzY0RDg2OThF QTkxMTFFQUEwMzUyMDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVAYIKwYBBQUHAQcBAf8E RTBDMDIEAgABMCwDBAUbbQADBAItQMADBAJnE4QDBAN4SFgDBAW002AwDAMEBcqD YAMEAMqDfjANBAIAAjAHAwUAJAEtADANBgkqhkiG9w0BAQsFAAOCAQEAMGvXT/94 LxFgck2lE4HkupxPOgi4l2tAn8Je19xmru9KeXMF9XnKt+wdFQEzeLQtYyCcKlKy GKLlDeOIFMMMoKvy6fzlDNCBFA+luXEjpLUs8qRMJ4GioafkKFgy9n54+WERxIHD 9mhzK2B5Vk19OZ/JxWSj6hR87B2o/8wJxnlFEnMRORD2Yii3nvHbJbrvhAObJ7vF 7rZascJldclW0BFmpHaayKstDAneQDJF4DwA7ag+PjUgnny3UxU9ptBCevdFhJCF PzXppjSztFn9hSSxciVCZm21C6O53Uv9ewPhUQjwcMdBMojjmqx1JfAs9dBSjtk4 sWNSg4KdkHPBAA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:47:43 2026 by rpki-client