This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B8D1EFFECFF111F085D0CF76C4F9AE02.roa File: B8D1EFFECFF111F085D0CF76C4F9AE02.roa (raw, json) Hash identifier: O3l12cVrUOS8U9iR93efMuyRPJjx+/kubWNGPD9xecQ= Subject key identifier: 0F:C3:38:CC:8E:F8:B3:2C:79:A7:32:28:72:3C:75:41:12:C9:A3:F8 Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 0BD8 Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B8D1EFFECFF111F085D0CF76C4F9AE02.roa Signing time: Wed 03 Dec 2025 02:42:35 +0000 ROA not before: Wed 03 Dec 2025 02:42:35 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 132203 IP address blocks: 43.128.222.0/23 maxlen: 23 43.128.224.0/19 maxlen: 19 43.128.241.0/24 maxlen: 24 43.129.32.0/20 maxlen: 20 43.129.48.0/20 maxlen: 20 43.130.0.0/17 maxlen: 24 43.130.128.0/18 maxlen: 24 43.130.224.0/19 maxlen: 19 43.131.0.0/18 maxlen: 24 43.131.224.0/19 maxlen: 24 43.132.12.0/22 maxlen: 22 43.132.16.0/22 maxlen: 22 43.132.28.0/22 maxlen: 22 43.132.32.0/22 maxlen: 22 43.132.40.0/22 maxlen: 22 43.132.52.0/22 maxlen: 22 43.132.68.0/24 maxlen: 24 43.132.96.0/19 maxlen: 24 43.132.128.0/17 maxlen: 24 43.133.0.0/19 maxlen: 19 43.133.128.0/20 maxlen: 20 43.133.144.0/20 maxlen: 20 43.133.160.0/19 maxlen: 19 43.133.192.0/19 maxlen: 19 43.134.0.0/18 maxlen: 18 43.134.64.0/18 maxlen: 18 43.134.128.0/18 maxlen: 18 43.134.138.0/24 maxlen: 24 43.134.139.0/24 maxlen: 24 43.135.58.0/24 maxlen: 24 43.135.187.0/24 maxlen: 24 43.135.192.0/19 maxlen: 19 43.135.221.0/24 maxlen: 24 43.152.74.0/23 maxlen: 23 43.152.76.0/22 maxlen: 22 43.152.80.0/22 maxlen: 22 43.152.92.0/23 maxlen: 23 43.152.96.0/19 maxlen: 24 43.152.192.0/19 maxlen: 19 43.152.224.0/19 maxlen: 19 43.153.0.0/18 maxlen: 18 43.153.64.0/18 maxlen: 18 43.153.128.0/18 maxlen: 18 43.153.164.0/24 maxlen: 24 43.153.187.0/24 maxlen: 24 43.153.192.0/18 maxlen: 18 43.153.250.0/23 maxlen: 23 43.154.0.0/18 maxlen: 18 43.154.64.0/18 maxlen: 18 43.154.128.0/18 maxlen: 18 43.154.192.0/18 maxlen: 18 43.155.0.0/17 maxlen: 18 43.155.127.0/24 maxlen: 24 43.155.128.0/17 maxlen: 18 43.155.149.0/24 maxlen: 24 43.156.0.0/18 maxlen: 18 43.156.64.0/18 maxlen: 18 43.156.128.0/18 maxlen: 18 43.156.192.0/18 maxlen: 18 43.156.252.0/24 maxlen: 24 43.156.254.0/24 maxlen: 24 43.157.0.0/17 maxlen: 24 43.157.128.0/18 maxlen: 24 43.157.192.0/18 maxlen: 24 43.158.0.0/16 maxlen: 16 43.158.0.0/17 maxlen: 24 43.158.128.0/18 maxlen: 24 43.158.192.0/18 maxlen: 24 43.159.0.0/16 maxlen: 16 43.159.0.0/20 maxlen: 24 43.159.16.0/20 maxlen: 24 43.159.32.0/19 maxlen: 24 43.159.76.0/24 maxlen: 24 43.159.128.0/18 maxlen: 24 43.159.192.0/18 maxlen: 24 43.160.0.0/16 maxlen: 24 43.161.0.0/17 maxlen: 24 43.161.128.0/17 maxlen: 24 43.162.0.0/17 maxlen: 24 43.162.128.0/17 maxlen: 24 43.163.0.0/16 maxlen: 16 43.163.0.0/17 maxlen: 17 43.163.0.0/18 maxlen: 24 43.163.64.0/18 maxlen: 24 43.163.128.0/18 maxlen: 18 43.163.140.0/24 maxlen: 24 43.163.192.0/18 maxlen: 24 43.164.0.0/16 maxlen: 24 43.165.0.0/16 maxlen: 24 43.166.0.0/16 maxlen: 24 43.167.0.0/16 maxlen: 24 43.172.0.0/16 maxlen: 24 43.173.0.0/16 maxlen: 24 101.32.94.0/23 maxlen: 23 101.32.96.0/20 maxlen: 20 101.32.102.0/23 maxlen: 23 101.32.104.0/21 maxlen: 21 101.32.140.0/24 maxlen: 24 101.33.4.0/23 maxlen: 23 101.33.17.0/24 maxlen: 24 101.33.18.0/23 maxlen: 23 101.33.26.0/23 maxlen: 23 101.33.30.0/23 maxlen: 23 101.33.41.0/24 maxlen: 24 101.33.52.0/22 maxlen: 22 101.33.114.0/23 maxlen: 24 124.156.208.0/20 maxlen: 20 124.156.224.0/20 maxlen: 20 150.109.90.0/24 maxlen: 24 150.109.91.0/24 maxlen: 24 150.109.140.0/22 maxlen: 22 150.109.192.0/20 maxlen: 20 150.109.192.0/21 maxlen: 21 150.109.192.0/23 maxlen: 23 150.109.200.0/22 maxlen: 22 150.109.204.0/23 maxlen: 23 150.109.206.0/24 maxlen: 24 150.109.207.0/24 maxlen: 24 240d:c000::/24 maxlen: 32 240d:c000:1000::/36 maxlen: 36 240d:c000:2000::/36 maxlen: 36 240d:c000:3000::/36 maxlen: 36 240d:c000:6000::/36 maxlen: 36 240d:c000:6000::/44 maxlen: 48 240d:c000:7000::/44 maxlen: 44 240d:c000:f000::/36 maxlen: 36 240d:c000:f000::/44 maxlen: 44 240d:c000:f010::/44 maxlen: 44 240d:c000:f020::/44 maxlen: 44 240d:c000:f030::/44 maxlen: 44 240d:c000:f040::/44 maxlen: 44 240d:c000:f050::/44 maxlen: 44 240d:c000:f060::/44 maxlen: 44 240d:c000:f070::/44 maxlen: 44 240d:c000:f0c0::/44 maxlen: 44 240d:c000:f0d0::/44 maxlen: 44 240d:c000:f0e0::/44 maxlen: 44 240d:c000:f0f0::/44 maxlen: 44 240d:c010::/48 maxlen: 48 240d:c010::/56 maxlen: 56 240d:c010:0:100::/56 maxlen: 56 240d:c010:10::/48 maxlen: 48 240d:c010:11::/48 maxlen: 48 240d:c010:12::/48 maxlen: 48 240d:c010:16::/48 maxlen: 48 240d:c010:17::/48 maxlen: 48 240d:c010:20::/44 maxlen: 44 240d:c010:20::/56 maxlen: 56 240d:c010:20:100::/56 maxlen: 56 240d:c010:20:200::/56 maxlen: 56 240d:c010:30::/56 maxlen: 56 240d:c010:30:100::/56 maxlen: 56 240d:c010:50::/48 maxlen: 48 240d:c010:57::/48 maxlen: 48 240d:c010:58::/47 maxlen: 48 240d:c010:5c::/46 maxlen: 48 240d:c010:66::/47 maxlen: 48 240d:c010:68::/48 maxlen: 48 240d:c010:6c::/47 maxlen: 48 240d:c010:6e::/48 maxlen: 48 240d:c040::/44 maxlen: 44 240d:c040:10::/44 maxlen: 44 240d:c040:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3032 (0xbd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: Dec 3 02:42:35 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=692fa39b-2fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:56:35:66:9e:a7:29:e2:b1:8b:88:49:00: 78:47:47:36:26:e7:ab:f0:88:5d:98:c0:49:6f:df: 42:9f:e1:5b:5b:a8:91:2f:79:b8:2b:10:4a:98:21: 3c:97:79:f9:0e:26:11:b1:55:de:36:3d:48:a3:76: 3f:a9:18:17:49:de:15:8f:51:f7:69:86:d7:80:71: 52:92:5a:63:dc:69:95:eb:28:c1:cf:76:37:e6:56: eb:56:bc:0c:1e:49:c9:74:86:97:5e:d3:5c:2c:de: e1:88:15:29:f2:55:50:f0:a8:65:ef:9b:d4:28:8a: f3:58:9f:77:8f:95:db:ef:cf:0d:bb:48:6c:c5:68: 3a:b5:34:c8:6e:f8:1d:94:24:6a:85:29:6c:bd:1e: 87:b2:29:b0:9f:38:86:06:0e:f9:4c:2c:e5:84:e9: d3:fb:99:8a:07:ac:d7:aa:94:d5:07:26:87:0c:96: 1e:ab:e8:a5:b3:06:bd:28:16:4a:0b:2b:fd:f6:27: 37:ff:fd:19:da:53:c4:ec:75:8b:d3:b5:12:b5:a9: d7:e2:0c:8b:d7:26:9e:3f:0f:d4:b5:be:3c:f9:79: b7:fd:9a:8c:e9:f1:da:4c:79:d4:a9:4e:be:04:24: be:3e:1e:2e:b4:1d:81:00:f9:0d:cd:54:b0:8a:7e: b9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C3:38:CC:8E:F8:B3:2C:79:A7:32:28:72:3C:75:41:12:C9:A3:F8 X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B8D1EFFECFF111F085D0CF76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.128.222.0-43.128.255.255 43.129.32.0/19 43.130.0.0-43.130.191.255 43.130.224.0-43.131.63.255 43.131.224.0/19 43.132.12.0-43.132.19.255 43.132.28.0-43.132.35.255 43.132.40.0/22 43.132.52.0/22 43.132.68.0/24 43.132.96.0-43.133.31.255 43.133.128.0-43.133.223.255 43.134.0.0-43.134.191.255 43.135.58.0/24 43.135.187.0/24 43.135.192.0/19 43.152.74.0-43.152.83.255 43.152.92.0/23 43.152.96.0/19 43.152.192.0-43.167.255.255 43.172.0.0/15 101.32.94.0-101.32.111.255 101.32.140.0/24 101.33.4.0/23 101.33.17.0-101.33.19.255 101.33.26.0/23 101.33.30.0/23 101.33.41.0/24 101.33.52.0/22 101.33.114.0/23 124.156.208.0-124.156.239.255 150.109.90.0/23 150.109.140.0/22 150.109.192.0/20 IPv6: 240d:c000::/24 Signature Algorithm: sha256WithRSAEncryption db:a7:d1:09:d2:f0:79:a0:ff:f1:ef:8d:0e:4d:51:85:01:17: bc:2b:4d:97:f8:11:0d:34:56:5c:de:33:d2:05:f5:32:32:10: 88:79:73:b3:7f:70:cc:ee:ba:d9:d5:7f:17:eb:1c:01:e5:8e: aa:53:5e:c8:13:f9:cb:7e:96:41:51:b2:c1:bf:b4:36:ff:b7: 2f:6e:cb:42:cb:87:3e:76:d1:c7:e6:48:fd:59:7d:c9:46:89: 8c:ae:9c:38:44:a5:b8:ed:20:22:4e:ad:c2:38:89:4e:26:8b: f3:dc:32:79:53:ef:8f:31:9d:43:da:58:41:60:45:ef:aa:59: 7c:af:ac:c8:80:79:4c:9d:86:20:18:dc:91:30:26:e7:f1:4d: c6:24:56:0f:54:10:0d:45:43:ed:68:fe:86:6b:5a:fe:78:64: 01:9d:f0:e0:63:6d:85:0f:0e:5e:98:d8:f0:2c:91:75:59:1b: 56:97:16:67:e5:3e:f2:b3:94:95:12:7e:35:80:3a:ef:12:86: e5:d8:3a:de:b2:a3:33:a9:af:be:99:83:11:87:58:bc:82:59: 85:24:f4:e4:ee:da:42:df:25:95:ec:8b:67:a5:6c:57:f8:74: f4:a1:11:5f:3e:ff:13:0d:e0:80:49:e9:39:72:69:87:40:21: f9:72:5d:51 -----BEGIN CERTIFICATE----- MIIGsjCCBZqgAwIBAgICC9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjUxMjAzMDI0MjM1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmYTM5Yi0yZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0dWNWaepynisYuISQB4R0c2Juer8IhdmMBJb99Cn+FbW6iRL3m4KxBKmCE8 l3n5DiYRsVXeNj1Io3Y/qRgXSd4Vj1H3aYbXgHFSklpj3GmV6yjBz3Y35lbrVrwM HknJdIaXXtNcLN7hiBUp8lVQ8Khl75vUKIrzWJ93j5Xb788Nu0hsxWg6tTTIbvgd lCRqhSlsvR6HsimwnziGBg75TCzlhOnT+5mKB6zXqpTVByaHDJYeq+ilswa9KBZK Cyv99ic3//0Z2lPE7HWL07UStanX4gyL1yaePw/Utb48+Xm3/ZqM6fHaTHnUqU6+ BCS+Ph4utB2BAPkNzVSwin65cwIDAQABo4ID1jCCA9IwHQYDVR0OBBYEFA/DOMyO +LMseacyKHI8dUESyaP4MB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdENjcvNjlFNkMxNkE0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvQjhEMUVGRkVD RkYxMTFGMDg1RDBDRjc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggFeBggrBgEFBQcBBwEB /wSCAU0wggFJMIIBNwQCAAEwggEvMAsDBAErgN4DAwArgAMEBSuBIDALAwMBK4ID BAYrgoAwDAMEBSuC4AMEBiuDAAMEBSuD4DAMAwQCK4QMAwQCK4QQMAwDBAIrhBwD BAIrhCADBAIrhCgDBAIrhDQDBAArhEQwDAMEBSuEYAMEBSuFADAMAwQHK4WAAwQF K4XAMAsDAwErhgMEBiuGgAMEACuHOgMEACuHuwMEBSuHwDAMAwQBK5hKAwQCK5hQ AwQBK5hcAwQFK5hgMAsDBAYrmMADAwMroAMDASusMAwDBAFlIF4DBARlIGADBABl IIwDBAFlIQQwDAMEAGUhEQMEAmUhEAMEAWUhGgMEAWUhHgMEAGUhKQMEAmUhNAME AWUhcjAMAwQEfJzQAwQEfJzgAwQBlm1aAwQClm2MAwQElm3AMAwEAgACMAYDBAAk DcAwDQYJKoZIhvcNAQELBQADggEBANun0QnS8Hmg//HvjQ5NUYUBF7wrTZf4EQ00 VlzeM9IF9TIyEIh5c7N/cMzuutnVfxfrHAHljqpTXsgT+ct+lkFRssG/tDb/ty9u y0LLhz520cfmSP1ZfclGiYyunDhEpbjtICJOrcI4iU4mi/PcMnlT748xnUPaWEFg Re+qWXyvrMiAeUydhiAY3JEwJufxTcYkVg9UEA1FQ+1o/oZrWv54ZAGd8OBjbYUP Dl6Y2PAskXVZG1aXFmflPvKzlJUSfjWAOu8ShuXYOt6yozOpr76ZgxGHWLyCWYUk 9OTu2kLfJZXsi2elbFf4dPShEV8+/xMN4IBJ6TlyaYdAIflyXVE= -----END CERTIFICATE-----Generated at Sat Dec 6 23:57:51 2025 by rpki-client