This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/20AF7940433811EFA525DA49C4F9AE02.roa File: 20AF7940433811EFA525DA49C4F9AE02.roa (raw, json) Hash identifier: 2oFRAIGJwFsX3KWWcFiv6OrfAOAa+Hq3KH8AUmaTYqo= Subject key identifier: 4E:E8:E1:59:15:DD:BA:14:92:2D:51:1F:AB:5D:19:17:72:B6:64:92 Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Certificate serial: 0AAA Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/20AF7940433811EFA525DA49C4F9AE02.roa Signing time: Sat 08 Nov 2025 19:40:23 +0000 ROA not before: Sat 08 Nov 2025 19:40:23 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 24093 IP address blocks: 125.63.12.0/24 maxlen: 24 125.63.15.0/24 maxlen: 24 125.63.19.0/24 maxlen: 24 125.253.0.0/18 maxlen: 18 125.253.8.0/24 maxlen: 24 125.253.11.0/24 maxlen: 24 125.253.16.0/24 maxlen: 24 125.253.25.0/24 maxlen: 24 125.253.28.0/23 maxlen: 23 125.253.28.0/24 maxlen: 24 125.253.32.0/24 maxlen: 24 125.253.33.0/24 maxlen: 24 125.253.34.0/24 maxlen: 24 125.253.35.0/24 maxlen: 24 125.253.41.0/24 maxlen: 24 125.253.44.0/24 maxlen: 24 125.253.45.0/24 maxlen: 24 125.253.46.0/24 maxlen: 24 125.253.47.0/24 maxlen: 24 125.253.48.0/24 maxlen: 24 125.253.50.0/23 maxlen: 23 125.253.50.0/24 maxlen: 24 125.253.51.0/24 maxlen: 24 125.253.60.0/24 maxlen: 24 125.253.61.0/24 maxlen: 24 125.253.96.0/20 maxlen: 20 125.253.97.0/24 maxlen: 24 125.253.98.0/24 maxlen: 24 125.253.99.0/24 maxlen: 24 125.253.101.0/24 maxlen: 24 125.253.102.0/24 maxlen: 24 125.253.103.0/24 maxlen: 24 125.253.106.0/24 maxlen: 24 125.253.107.0/24 maxlen: 24 125.253.109.0/24 maxlen: 24 125.253.110.0/24 maxlen: 24 202.171.160.0/19 maxlen: 19 202.171.160.0/24 maxlen: 24 202.171.164.0/24 maxlen: 24 202.171.165.0/24 maxlen: 24 202.171.169.0/24 maxlen: 24 202.171.170.0/24 maxlen: 24 202.171.175.0/24 maxlen: 24 202.171.177.0/24 maxlen: 24 202.171.178.0/24 maxlen: 24 202.171.179.0/24 maxlen: 24 202.171.184.0/23 maxlen: 23 202.171.186.0/23 maxlen: 23 202.171.189.0/24 maxlen: 24 202.171.190.0/24 maxlen: 24 202.171.191.0/24 maxlen: 24 203.25.102.0/24 maxlen: 24 223.27.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2730 (0xaaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Validity Not Before: Nov 8 19:40:23 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690f9ca6-1a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a2:1a:f6:8f:46:f4:e9:0a:82:fb:f4:25:bc: b7:8d:90:4a:ba:5f:98:ac:ce:b2:7d:62:09:90:05: 50:5d:73:4f:99:e3:2b:06:05:9d:57:bf:cf:3a:78: 25:c1:b1:83:ac:84:12:62:58:6b:51:84:72:1c:6b: 24:1a:f9:68:60:20:a2:21:ba:1a:60:8c:2a:4e:6f: 9c:47:b2:ea:e9:71:2d:b0:83:e1:09:c9:27:42:f2: c5:38:47:c4:27:c9:a5:3f:da:65:f7:a1:53:90:e4: 37:f0:ee:97:c9:67:3a:aa:91:95:b5:85:0b:cc:f2: 5e:9d:8f:ee:52:cb:fc:bd:ce:ea:eb:da:68:d1:f6: 41:aa:a9:da:33:c7:6c:13:c1:d5:ff:dc:e7:28:f5: fb:12:2f:53:70:72:67:57:87:77:50:f0:79:6f:d4: 36:db:2b:af:e7:3c:fa:0a:0b:b6:82:e7:4f:e4:40: 46:54:ad:1c:51:63:96:f0:e9:97:ca:fc:fc:a3:02: 02:0a:e0:dc:28:aa:52:69:c5:b3:62:eb:d8:56:0f: 43:7e:9e:fd:9c:30:20:c4:9a:65:d2:d0:2a:f5:fe: c7:12:95:2b:b2:7a:99:15:12:f8:34:de:73:21:9a: 79:fd:e4:2e:7c:75:ac:ce:c3:61:ae:71:2a:fd:85: 54:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E8:E1:59:15:DD:BA:14:92:2D:51:1F:AB:5D:19:17:72:B6:64:92 X509v3 Authority Key Identifier: keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/20AF7940433811EFA525DA49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.63.12.0/24 125.63.15.0/24 125.63.19.0/24 125.253.0.0/18 125.253.96.0/20 202.171.160.0/19 203.25.102.0/24 223.27.66.0/23 Signature Algorithm: sha256WithRSAEncryption 61:4d:40:71:62:87:6f:71:63:1e:72:a3:89:21:c9:15:8b:25: 25:83:74:6e:20:65:27:53:6e:38:7d:02:bd:ad:b3:0e:9b:89: d2:0f:c2:74:da:3a:d1:bc:ad:26:29:4b:fa:12:e1:b5:21:6e: 72:44:a6:de:75:75:96:93:b5:dc:f7:c4:04:9b:d9:05:d2:0b: f3:99:ec:d7:06:6d:49:df:45:1c:e2:f8:5d:8f:5e:9a:96:40: 31:6e:1f:52:e3:cd:63:65:14:46:d7:f8:b2:45:c9:40:a8:f0: 71:7f:1b:7a:52:21:fa:5f:e5:a8:19:5c:86:d3:98:70:ab:6a: 29:a0:52:7b:d7:b5:0a:3d:3d:4f:b9:e1:dd:e0:d9:86:c5:8a: 8f:51:28:0e:26:61:82:9e:0a:cc:c9:4c:78:ae:64:c2:ef:3f: cf:95:50:7a:fb:d1:0c:84:0c:19:5e:39:17:fa:54:58:1c:de: 2e:fb:ca:0b:ac:98:97:02:ec:16:8d:d2:f4:f7:b1:d9:20:56: 4c:27:29:32:55:16:22:5b:31:8b:6c:a9:7f:d8:9e:ce:47:2f: 74:49:79:47:5b:3f:82:f6:d7:93:48:ef:da:70:72:1c:89:d7: b2:68:db:be:4d:d4:d2:85:a0:ed:fa:d3:10:5f:28:cb:6e:4e: 87:75:9e:35 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICCqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0NzUxMTAvBgNVBAUTKDc0NUZGNEYwNjNBQjVEMTcxRTA1MjUxQjMxRTI5NEE0 QkM3OTczQjEwHhcNMjUxMTA4MTk0MDIzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBmOWNhNi0xYTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6Ia9o9G9OkKgvv0Jby3jZBKul+YrM6yfWIJkAVQXXNPmeMrBgWdV7/POngl wbGDrIQSYlhrUYRyHGskGvloYCCiIboaYIwqTm+cR7Lq6XEtsIPhCcknQvLFOEfE J8mlP9pl96FTkOQ38O6XyWc6qpGVtYULzPJenY/uUsv8vc7q69po0fZBqqnaM8ds E8HV/9znKPX7Ei9TcHJnV4d3UPB5b9Q22yuv5zz6Cgu2gudP5EBGVK0cUWOW8OmX yvz8owICCuDcKKpSacWzYuvYVg9Dfp79nDAgxJpl0tAq9f7HEpUrsnqZFRL4NN5z IZp5/eQufHWszsNhrnEq/YVUQQIDAQABo4ICvzCCArswHQYDVR0OBBYEFE7o4VkV 3boUki1RH6tdGRdytmSSMB8GA1UdIwQYMBaAFHRf9PBjq10XHgUlGzHilKS8eXOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3NS9EQTgzQUE3QUNB MTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhSY2VCU1ViTWVLVXBMeDVj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RGXzA4R09yWFJjZUJTVWJNZUtVcEx4NWM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUU0NzUvREE4M0FBN0FDQTExMTFFQUE0NzlDNzM0QzRGOUFFMDIvMjBBRjc5NDA0 MzM4MTFFRkE1MjVEQTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E OjA4MDYEAgABMDADBAB9PwwDBAB9Pw8DBAB9PxMDBAZ9/QADBAR9/WADBAXKq6AD BADLGWYDBAHfG0IwDQYJKoZIhvcNAQELBQADggEBAGFNQHFih29xYx5yo4khyRWL JSWDdG4gZSdTbjh9Ar2tsw6bidIPwnTaOtG8rSYpS/oS4bUhbnJEpt51dZaTtdz3 xASb2QXSC/OZ7NcGbUnfRRzi+F2PXpqWQDFuH1LjzWNlFEbX+LJFyUCo8HF/G3pS Ifpf5agZXIbTmHCraimgUnvXtQo9PU+54d3g2YbFio9RKA4mYYKeCszJTHiuZMLv P8+VUHr70QyEDBleORf6VFgc3i77ygusmJcC7BaN0vT3sdkgVkwnKTJVFiJbMYts qX/Yns5HL3RJeUdbP4L215NI79pwchyJ17Jo275N1NKFoO360xBfKMtuTod1njU= -----END CERTIFICATE-----Generated at Sat Dec 6 20:27:25 2025 by rpki-client