This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/111D54B0CB6911F0B09B4C71C4F9AE02.roa File: 111D54B0CB6911F0B09B4C71C4F9AE02.roa (raw, json) Hash identifier: ZzuVhfzZfYJkPh9aqzrXyo5zgphPaufXf+2qsMMO4PU= Subject key identifier: 5E:9A:17:5A:A5:DB:F2:5D:E1:29:BE:2B:F2:C7:57:CF:6A:47:4D:9F Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0EF4 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/111D54B0CB6911F0B09B4C71C4F9AE02.roa Signing time: Fri 05 Dec 2025 07:54:03 +0000 ROA not before: Fri 05 Dec 2025 07:54:02 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 45814 IP address blocks: 14.192.130.0/24 maxlen: 24 14.192.131.0/24 maxlen: 24 14.192.132.0/24 maxlen: 24 14.192.133.0/24 maxlen: 24 14.192.134.0/24 maxlen: 24 14.192.136.0/24 maxlen: 24 14.192.137.0/24 maxlen: 24 14.192.138.0/24 maxlen: 24 14.192.139.0/24 maxlen: 24 14.192.140.0/24 maxlen: 24 14.192.141.0/24 maxlen: 24 14.192.142.0/24 maxlen: 24 14.192.143.0/24 maxlen: 24 14.192.144.0/24 maxlen: 24 14.192.145.0/24 maxlen: 24 14.192.146.0/24 maxlen: 24 14.192.147.0/24 maxlen: 24 14.192.148.0/24 maxlen: 24 14.192.149.0/24 maxlen: 24 14.192.150.0/24 maxlen: 24 14.192.151.0/24 maxlen: 24 14.192.152.0/24 maxlen: 24 14.192.153.0/24 maxlen: 24 14.192.154.0/24 maxlen: 24 14.192.155.0/24 maxlen: 24 14.192.156.0/24 maxlen: 24 14.192.157.0/24 maxlen: 24 14.192.158.0/24 maxlen: 24 14.192.159.0/24 maxlen: 24 43.247.120.0/24 maxlen: 24 43.247.121.0/24 maxlen: 24 43.247.122.0/24 maxlen: 24 43.247.123.0/24 maxlen: 24 103.20.132.0/24 maxlen: 24 103.20.133.0/24 maxlen: 24 103.20.134.0/24 maxlen: 24 103.20.135.0/24 maxlen: 24 2403:7980::/32 maxlen: 32 2403:7980::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 08:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3828 (0xef4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Dec 5 07:54:02 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69328f9a-d82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:97:3d:fa:2a:ab:5f:06:f7:21:a6:67:6e:ae: 38:ab:1d:d1:26:b4:53:c2:e5:8c:01:c6:04:1f:75: a3:ce:87:61:95:15:99:0a:95:fd:82:44:23:25:b0: e2:8f:14:ce:2e:46:06:aa:5b:88:f7:d8:56:dd:84: 1b:12:67:2f:a2:fc:3c:01:10:62:41:88:9d:fe:69: 5a:67:6a:e8:2d:1c:66:b6:6e:79:db:13:52:79:f7: ad:0b:6f:f2:1a:26:29:11:da:2f:94:96:e6:62:6d: 0a:92:c8:f2:ca:1f:96:a5:65:08:1b:8a:24:89:fc: 78:9c:48:07:21:8a:78:b6:b6:6f:18:36:97:60:61: 29:69:35:a2:5a:d7:e7:2e:5c:36:fd:cb:d5:9a:32: 05:14:ce:a4:95:33:b2:e5:fb:fa:00:e0:2e:b4:25: 9d:47:83:ae:2e:4e:46:44:4f:35:5c:75:92:5f:27: ec:a2:c7:fc:7d:be:87:fb:37:f1:59:63:a9:82:79: 07:34:13:cd:ae:61:67:16:76:30:c9:ec:0e:61:39: c5:00:ba:93:af:03:fd:fa:a1:04:69:11:68:b1:4e: 83:95:3a:b1:1f:6b:7f:c5:87:84:f3:20:55:a0:c6: 92:d4:e7:76:63:1e:75:f6:45:8a:87:46:e1:df:5a: 82:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9A:17:5A:A5:DB:F2:5D:E1:29:BE:2B:F2:C7:57:CF:6A:47:4D:9F X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/111D54B0CB6911F0B09B4C71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.130.0-14.192.134.255 14.192.136.0-14.192.159.255 43.247.120.0/22 103.20.132.0/22 IPv6: 2403:7980::/32 Signature Algorithm: sha256WithRSAEncryption 5d:5c:8c:66:63:9e:7e:2d:79:93:8f:d0:bc:99:7a:0c:12:f0: 0d:b0:ce:5b:dc:64:bd:2b:4d:87:16:0f:4a:9f:66:3c:cd:5d: b2:b9:1b:9c:32:50:b1:b4:c4:c3:36:be:ba:cb:6f:10:1f:c7: 5e:37:33:75:d0:f5:32:df:fa:68:2c:75:4a:20:12:9e:d7:b7: 61:13:0a:4e:c7:ea:db:2e:46:3c:54:ac:53:c2:c2:dd:e2:b1: a0:75:a9:cb:34:b0:f8:8a:8a:03:23:bf:a5:0e:2b:12:c3:93: bb:ec:9b:af:5d:0c:c0:01:89:48:4f:f6:8d:da:ef:83:51:8c: f0:69:4b:f9:ff:fa:cc:ec:28:ba:aa:83:8c:d5:ce:d5:ae:70: 48:8c:8c:e3:c3:da:f8:46:c9:73:ee:15:e0:8a:4f:05:b2:3e: 9c:62:51:37:18:c0:20:b7:99:32:cf:68:22:61:cf:41:e6:47: 0f:84:ce:77:60:8b:bb:c2:57:74:c1:ae:5e:65:c9:80:54:9f: 80:8c:a6:c8:7d:b6:cb:46:77:82:fa:b7:27:47:cc:f2:a3:62: b0:ee:3b:d8:d4:2c:e8:52:3c:5c:74:1b:e4:54:e3:2d:32:2d: 49:7d:f3:27:b5:a1:ac:22:47:12:da:10:03:b1:8d:61:39:73: a2:8e:be:22 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgICDvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUxMjA1MDc1NDAyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMyOGY5YS1kODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Zc9+iqrXwb3IaZnbq44qx3RJrRTwuWMAcYEH3WjzodhlRWZCpX9gkQjJbDi jxTOLkYGqluI99hW3YQbEmcvovw8ARBiQYid/mlaZ2roLRxmtm552xNSefetC2/y GiYpEdovlJbmYm0Kksjyyh+WpWUIG4okifx4nEgHIYp4trZvGDaXYGEpaTWiWtfn Llw2/cvVmjIFFM6klTOy5fv6AOAutCWdR4OuLk5GRE81XHWSXyfsosf8fb6H+zfx WWOpgnkHNBPNrmFnFnYwyewOYTnFALqTrwP9+qEEaRFosU6DlTqxH2t/xYeE8yBV oMaS1Od2Yx519kWKh0bh31qC5wIDAQABo4ICxjCCAsIwHQYDVR0OBBYEFF6aF1ql 2/Jd4Sm+K/LHV89qR02fMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvMTExRDU0QjBD QjY5MTFGMEIwOUI0QzcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUAYIKwYBBQUHAQcBAf8E QTA/MC4EAgABMCgwDAMEAQ7AggMEAA7AhjAMAwQDDsCIAwQFDsCAAwQCK/d4AwQC ZxSEMA0EAgACMAcDBQAkA3mAMA0GCSqGSIb3DQEBCwUAA4IBAQBdXIxmY55+LXmT j9C8mXoMEvANsM5b3GS9K02HFg9Kn2Y8zV2yuRucMlCxtMTDNr66y28QH8deNzN1 0PUy3/poLHVKIBKe17dhEwpOx+rbLkY8VKxTwsLd4rGgdanLNLD4iooDI7+lDisS w5O77JuvXQzAAYlIT/aN2u+DUYzwaUv5//rM7Ci6qoOM1c7VrnBIjIzjw9r4Rslz 7hXgik8Fsj6cYlE3GMAgt5kyz2giYc9B5kcPhM53YIu7wld0wa5eZcmAVJ+AjKbI fbbLRneC+rcnR8zyo2Kw7jvY1CzoUjxcdBvkVOMtMi1JffMntaGsIkcS2hADsY1h OXOijr4i -----END CERTIFICATE-----Generated at Sat Dec 6 19:59:14 2025 by rpki-client