This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0892A6CECB6911F0A6572E71C4F9AE02.roa File: 0892A6CECB6911F0A6572E71C4F9AE02.roa (raw, json) Hash identifier: 1dTM2p5MzGPMxeHwaBFGmA/fKjn4vqSairi9+/DITAs= Subject key identifier: 99:AB:44:72:C9:A2:AC:83:FC:34:91:B4:F1:73:61:97:A1:F9:8E:51 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0EF7 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0892A6CECB6911F0A6572E71C4F9AE02.roa Signing time: Fri 05 Dec 2025 07:56:33 +0000 ROA not before: Fri 05 Dec 2025 07:56:33 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 133933 IP address blocks: 14.192.128.0/19 maxlen: 19 14.192.128.0/24 maxlen: 24 14.192.129.0/24 maxlen: 24 14.192.130.0/24 maxlen: 24 14.192.131.0/24 maxlen: 24 14.192.132.0/24 maxlen: 24 14.192.133.0/24 maxlen: 24 14.192.134.0/24 maxlen: 24 14.192.135.0/24 maxlen: 24 14.192.136.0/24 maxlen: 24 14.192.137.0/24 maxlen: 24 14.192.138.0/24 maxlen: 24 14.192.139.0/24 maxlen: 24 14.192.140.0/24 maxlen: 24 14.192.141.0/24 maxlen: 24 14.192.142.0/24 maxlen: 24 14.192.143.0/24 maxlen: 24 14.192.144.0/24 maxlen: 24 14.192.145.0/24 maxlen: 24 14.192.146.0/24 maxlen: 24 14.192.147.0/24 maxlen: 24 14.192.148.0/24 maxlen: 24 14.192.151.0/24 maxlen: 24 14.192.152.0/24 maxlen: 24 14.192.153.0/24 maxlen: 24 14.192.154.0/24 maxlen: 24 14.192.155.0/24 maxlen: 24 14.192.156.0/24 maxlen: 24 14.192.157.0/24 maxlen: 24 14.192.158.0/24 maxlen: 24 14.192.159.0/24 maxlen: 24 43.247.120.0/24 maxlen: 24 43.247.121.0/24 maxlen: 24 43.247.122.0/24 maxlen: 24 43.247.123.0/24 maxlen: 24 103.20.132.0/24 maxlen: 24 103.20.133.0/24 maxlen: 24 103.20.134.0/24 maxlen: 24 103.20.135.0/24 maxlen: 24 111.92.128.0/24 maxlen: 24 111.92.129.0/24 maxlen: 24 111.92.130.0/24 maxlen: 24 111.92.132.0/24 maxlen: 24 111.92.136.0/24 maxlen: 24 111.92.137.0/24 maxlen: 24 111.92.141.0/24 maxlen: 24 111.92.143.0/24 maxlen: 24 111.92.144.0/24 maxlen: 24 111.92.145.0/24 maxlen: 24 111.92.146.0/24 maxlen: 24 111.92.147.0/24 maxlen: 24 111.92.148.0/24 maxlen: 24 111.92.149.0/24 maxlen: 24 111.92.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 08:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3831 (0xef7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Dec 5 07:56:33 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69329030-ae5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:26:8d:54:da:b5:2d:d7:e7:a8:b8:64:35:b6: 75:d4:5a:18:93:05:b8:8d:a4:52:12:eb:c4:b4:16: 84:a0:00:5b:2c:6a:24:22:bb:84:fc:bb:35:4e:df: 4a:80:76:ed:47:61:92:43:26:97:4d:00:a1:dc:42: a5:7a:58:1a:c8:bf:6b:a0:b1:23:1d:b1:b5:a2:de: de:5f:f3:d9:a0:2b:1f:ab:fd:4c:5a:1c:54:eb:7f: 63:16:6a:57:d5:21:da:ea:a3:fb:fb:d0:cb:22:ee: 48:a2:5b:2a:91:9f:63:6d:de:51:48:dd:2a:84:9c: f2:dd:51:a7:fd:10:86:11:94:4b:4f:eb:2e:be:c0: f5:9c:9b:35:02:29:f5:64:2b:1d:80:66:1e:3f:f2: f1:a7:8a:38:23:23:67:d3:1e:e2:c8:90:12:bc:f5: 52:09:5f:b4:9f:8e:fc:ee:7a:88:c9:3e:a4:aa:50: e5:df:55:22:6a:8f:34:2b:3c:e6:b8:55:a3:98:a9: 92:b8:82:f6:c5:c6:00:f8:ff:a6:42:34:73:ae:3e: 67:aa:f9:a2:ef:78:b6:e4:8f:10:83:bb:01:40:21: 97:57:e8:6f:62:9b:67:a2:80:96:1a:57:db:e9:6e: 3d:1d:a2:3c:82:74:0e:3d:bd:f6:73:af:48:6a:9b: 31:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AB:44:72:C9:A2:AC:83:FC:34:91:B4:F1:73:61:97:A1:F9:8E:51 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0892A6CECB6911F0A6572E71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.128.0/19 43.247.120.0/22 103.20.132.0/22 111.92.128.0-111.92.130.255 111.92.132.0/24 111.92.136.0/23 111.92.141.0/24 111.92.143.0-111.92.149.255 111.92.155.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:7b:3a:99:ac:7a:db:0c:d7:c6:16:17:c0:cc:f1:2a:d3:6b: 40:96:72:f4:2b:d9:b9:d1:f8:72:15:ec:d2:ff:98:66:ef:9a: 34:19:ee:70:b6:d9:76:fb:14:4b:b3:66:ed:af:dd:5a:4c:a1: f8:66:ab:74:21:84:17:8d:0c:50:d1:37:d4:13:26:26:ec:0d: 4a:17:ac:45:b0:2e:56:ae:26:22:e7:ce:61:c9:d2:89:75:15: 56:fc:6f:04:76:37:8a:fd:f2:d5:b2:8c:96:aa:b9:df:42:ea: 6d:a6:88:cc:cd:e3:bd:77:05:1b:4f:2d:a3:bc:e6:7f:21:41: 1a:a6:54:32:d7:c1:f1:e9:05:f2:bb:79:39:f2:e0:7b:31:8e: 9e:93:39:e7:cd:7d:b5:bf:a6:ce:96:9d:5a:87:74:b1:04:e7: f7:d8:cc:73:3c:93:f3:b2:72:6e:4c:a9:93:b0:40:79:ca:f7: 1c:28:76:c4:b2:2d:4f:c6:6d:22:04:64:df:13:1b:2a:61:b3: c7:af:20:a2:34:48:21:c9:96:f8:dc:39:7f:65:92:c6:f7:a4: 39:c0:0a:fd:3c:a5:1d:cd:15:15:73:98:2f:93:6d:19:7d:28: 80:4a:d1:76:dc:92:73:54:3b:1b:47:7b:40:c9:2c:02:57:d1: 6c:f3:51:85 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgICDvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUxMjA1MDc1NjMzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMyOTAzMC1hZTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yaNVNq1LdfnqLhkNbZ11FoYkwW4jaRSEuvEtBaEoABbLGokIruE/Ls1Tt9K gHbtR2GSQyaXTQCh3EKlelgayL9roLEjHbG1ot7eX/PZoCsfq/1MWhxU639jFmpX 1SHa6qP7+9DLIu5IolsqkZ9jbd5RSN0qhJzy3VGn/RCGEZRLT+suvsD1nJs1Ain1 ZCsdgGYeP/Lxp4o4IyNn0x7iyJASvPVSCV+0n4787nqIyT6kqlDl31Uiao80Kzzm uFWjmKmSuIL2xcYA+P+mQjRzrj5nqvmi73i25I8Qg7sBQCGXV+hvYptnooCWGlfb 6W49HaI8gnQOPb32c69Iapsx3QIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFJmrRHLJ oqyD/DSRtPFzYZeh+Y5RMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvMDg5MkE2Q0VD QjY5MTFGMEE2NTcyRTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXwYIKwYBBQUHAQcBAf8E UDBOMEwEAgABMEYDBAUOwIADBAIr93gDBAJnFIQwDAMEB29cgAMEAG9cggMEAG9c hAMEAW9ciAMEAG9cjTAMAwQAb1yPAwQBb1yUAwQAb1ybMA0GCSqGSIb3DQEBCwUA A4IBAQAdezqZrHrbDNfGFhfAzPEq02tAlnL0K9m50fhyFezS/5hm75o0Ge5wttl2 +xRLs2btr91aTKH4Zqt0IYQXjQxQ0TfUEyYm7A1KF6xFsC5WriYi585hydKJdRVW /G8EdjeK/fLVsoyWqrnfQuptpojMzeO9dwUbTy2jvOZ/IUEaplQy18Hx6QXyu3k5 8uB7MY6ekznnzX21v6bOlp1ah3SxBOf32MxzPJPzsnJuTKmTsEB5yvccKHbEsi1P xm0iBGTfExsqYbPHryCiNEghyZb43Dl/ZZLG96Q5wAr9PKUdzRUVc5gvk20ZfSiA StF23JJzVDsbR3tAySwCV9Fs81GF -----END CERTIFICATE-----Generated at Sat Dec 6 19:59:58 2025 by rpki-client