This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/882AC358E1F511EE9188A919C4F9AE02.roa File: 882AC358E1F511EE9188A919C4F9AE02.roa (raw, json) Hash identifier: 12wcy6kglMD+Y/CrXGL0WyA5a+t7P6F61MDYVPldBpg= Subject key identifier: 71:53:C0:99:C3:D5:E2:2A:DC:61:1A:9E:ED:46:E7:85:88:13:31:4B Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1F03 Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/882AC358E1F511EE9188A919C4F9AE02.roa Signing time: Fri 14 Nov 2025 16:03:49 +0000 ROA not before: Fri 14 Nov 2025 16:03:49 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138296 IP address blocks: 202.179.70.0/24 maxlen: 24 202.179.71.0/24 maxlen: 24 202.179.72.0/24 maxlen: 24 202.179.73.0/24 maxlen: 24 202.179.74.0/24 maxlen: 24 202.179.75.0/24 maxlen: 24 202.179.76.0/24 maxlen: 24 202.179.79.0/24 maxlen: 24 202.179.81.0/24 maxlen: 24 202.179.82.0/24 maxlen: 24 202.179.83.0/24 maxlen: 24 202.179.84.0/24 maxlen: 24 202.179.85.0/24 maxlen: 24 202.179.86.0/24 maxlen: 24 202.179.87.0/24 maxlen: 24 202.179.88.0/24 maxlen: 24 202.179.90.0/24 maxlen: 24 202.179.91.0/24 maxlen: 24 202.179.92.0/24 maxlen: 24 202.179.93.0/24 maxlen: 24 202.179.94.0/24 maxlen: 24 202.179.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7939 (0x1f03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Validity Not Before: Nov 14 16:03:49 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691752e4-1182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c1:0f:1a:c4:43:25:0a:14:3f:30:e5:f5:cd: 2f:f4:bc:5b:a1:6a:51:cb:4b:d1:65:73:45:3b:fc: 09:1b:04:67:fd:f6:c8:d6:01:04:54:b4:fa:7b:26: 89:ab:bd:9d:54:50:23:33:e8:cd:a9:e8:f0:49:8b: 47:b9:43:6e:1d:a4:13:c5:a1:67:e6:ac:66:a3:9a: d7:99:95:a4:99:e1:76:33:be:c5:a5:c4:d3:9c:30: 21:d4:5a:b8:8c:c2:8b:77:ca:df:d3:93:a2:20:95: 6f:67:8c:26:3f:8a:48:3a:9f:7f:72:99:e8:22:ed: 31:bf:d5:ef:30:8f:bf:62:b3:11:ff:1b:00:55:a8: e1:27:cb:52:dd:d1:9c:3f:a0:b7:10:45:bd:ad:55: 87:24:35:72:4b:f1:50:ac:99:44:c9:bc:78:c5:aa: 60:18:8c:6c:3e:ac:db:af:d6:04:3e:54:ae:a6:ba: fd:9d:58:f2:9d:b7:18:83:bb:39:93:cb:ca:61:6f: cd:ae:c6:9a:e7:e6:be:9d:54:3e:ea:99:56:88:7d: e8:cc:57:b5:60:f0:57:3d:f8:bb:57:fb:22:53:8f: ad:ef:3d:a1:50:63:3a:01:56:cd:1b:5c:19:17:4a: c7:8a:f2:ec:e3:7e:32:ca:ab:70:b7:19:0e:d1:a7: 6c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:53:C0:99:C3:D5:E2:2A:DC:61:1A:9E:ED:46:E7:85:88:13:31:4B X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/882AC358E1F511EE9188A919C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.179.70.0-202.179.76.255 202.179.79.0/24 202.179.81.0-202.179.88.255 202.179.90.0-202.179.95.255 Signature Algorithm: sha256WithRSAEncryption 51:bd:d4:1d:f5:42:b2:f6:e6:38:d2:0c:9d:3d:76:09:3d:0c: 1c:d4:58:04:87:d1:6b:92:8d:d2:00:d8:75:b6:b6:21:6a:c9: b2:91:df:b7:dd:d9:57:c9:e6:a4:dd:69:65:35:5c:8e:3b:c0: e1:5b:75:d8:7f:2d:70:31:73:0d:33:20:e5:81:b0:ac:d5:87: 43:b3:e8:d4:4b:9c:61:c9:78:2d:62:ef:c8:4f:0c:db:24:77: b7:54:7e:dc:2d:d8:54:36:9f:70:7c:df:9f:98:88:0e:c2:df: 54:87:0c:65:1f:f2:b3:2d:6c:9b:1f:7d:ea:e8:b1:fc:f4:9e: c1:cd:45:90:cf:cd:04:d2:76:cd:ea:2e:ec:91:56:07:87:8c: 7a:ff:9f:3b:6b:68:97:ef:18:68:63:09:6a:ef:62:90:11:6e: ef:af:1a:0d:40:c3:f4:a6:30:49:6d:42:a1:3e:3e:52:a8:63: df:ae:7c:0f:da:66:be:0a:8c:24:11:cf:95:09:7e:3e:ee:c7: 4a:26:ee:ec:4b:11:cf:32:f4:73:73:15:e0:0c:a5:16:9e:0e: 85:43:4a:60:ea:85:a3:7c:d9:3c:5d:18:25:2d:22:6c:af:6b: 96:f6:3a:3b:69:20:fa:04:31:f4:9b:f8:47:f9:18:8a:4b:91: 0c:c4:70:50 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICHwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjUxMTE0MTYwMzQ5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE3NTJlNC0xMTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsEPGsRDJQoUPzDl9c0v9LxboWpRy0vRZXNFO/wJGwRn/fbI1gEEVLT6eyaJ q72dVFAjM+jNqejwSYtHuUNuHaQTxaFn5qxmo5rXmZWkmeF2M77FpcTTnDAh1Fq4 jMKLd8rf05OiIJVvZ4wmP4pIOp9/cpnoIu0xv9XvMI+/YrMR/xsAVajhJ8tS3dGc P6C3EEW9rVWHJDVyS/FQrJlEybx4xapgGIxsPqzbr9YEPlSuprr9nVjynbcYg7s5 k8vKYW/Nrsaa5+a+nVQ+6plWiH3ozFe1YPBXPfi7V/siU4+t7z2hUGM6AVbNG1wZ F0rHivLs434yyqtwtxkO0adsQQIDAQABo4ICvzCCArswHQYDVR0OBBYEFHFTwJnD 1eIq3GEanu1G54WIEzFLMB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUFFNUYvOEI3OUI2Nzg4ODUxMTFFNkE2OTJERTc4QzRGOUFFMDIvODgyQUMzNThF MUY1MTFFRTkxODhBOTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E OjA4MDYEAgABMDAwDAMEAcqzRgMEAMqzTAMEAMqzTzAMAwQAyrNRAwQAyrNYMAwD BAHKs1oDBAXKs0AwDQYJKoZIhvcNAQELBQADggEBAFG91B31QrL25jjSDJ09dgk9 DBzUWASH0WuSjdIA2HW2tiFqybKR37fd2VfJ5qTdaWU1XI47wOFbddh/LXAxcw0z IOWBsKzVh0Oz6NRLnGHJeC1i78hPDNskd7dUftwt2FQ2n3B835+YiA7C31SHDGUf 8rMtbJsfferosfz0nsHNRZDPzQTSds3qLuyRVgeHjHr/nztraJfvGGhjCWrvYpAR bu+vGg1Aw/SmMEltQqE+PlKoY9+ufA/aZr4KjCQRz5UJfj7ux0om7uxLEc8y9HNz FeAMpRaeDoVDSmDqhaN82TxdGCUtImyva5b2OjtpIPoEMfSb+Ef5GIpLkQzEcFA= -----END CERTIFICATE-----Generated at Sun Dec 7 02:38:17 2025 by rpki-client