This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/8D2DEDF4C2A811EBA79A7055C4F9AE02.roa File: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (raw, json) Hash identifier: 3yuw549gFThRnTnkqGNghYz3hl96FvE25heVCZ7UvVg= Subject key identifier: 42:F4:1B:A2:5D:5E:8E:09:F3:D3:AC:AF:89:90:AB:D9:DA:6A:7E:4B Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Certificate serial: 3579 Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/8D2DEDF4C2A811EBA79A7055C4F9AE02.roa Signing time: Wed 31 Dec 2025 15:10:29 +0000 ROA not before: Wed 31 Dec 2025 15:10:29 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 18399 IP address blocks: 61.4.65.0/24 maxlen: 24 61.4.68.0/24 maxlen: 24 61.4.69.0/24 maxlen: 24 61.4.70.0/24 maxlen: 24 61.4.71.0/24 maxlen: 24 61.4.72.0/24 maxlen: 24 61.4.73.0/24 maxlen: 24 61.4.74.0/24 maxlen: 24 61.4.75.0/24 maxlen: 24 61.4.76.0/24 maxlen: 24 61.4.77.0/24 maxlen: 24 61.4.78.0/24 maxlen: 24 61.4.79.0/24 maxlen: 24 122.248.100.0/24 maxlen: 24 122.248.101.0/24 maxlen: 24 122.248.102.0/24 maxlen: 24 122.248.103.0/24 maxlen: 24 122.248.104.0/24 maxlen: 24 122.248.105.0/24 maxlen: 24 122.248.106.0/24 maxlen: 24 122.248.112.0/24 maxlen: 24 122.248.113.0/24 maxlen: 24 122.248.118.0/24 maxlen: 24 122.248.119.0/24 maxlen: 24 122.248.120.0/24 maxlen: 24 122.248.121.0/24 maxlen: 24 122.248.122.0/24 maxlen: 24 122.248.126.0/24 maxlen: 24 203.81.160.0/24 maxlen: 24 203.81.161.0/24 maxlen: 24 203.81.162.0/24 maxlen: 24 203.81.163.0/24 maxlen: 24 203.81.164.0/24 maxlen: 24 203.81.165.0/24 maxlen: 24 203.81.168.0/24 maxlen: 24 203.81.169.0/24 maxlen: 24 203.81.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 14:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13689 (0x3579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Validity Not Before: Dec 31 15:10:29 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69553ce5-55dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e2:5f:93:40:71:80:36:78:13:46:56:95:26: cf:48:f3:2a:24:f2:ad:04:d0:ba:ef:22:35:2e:73: 40:29:85:87:19:4a:c7:63:df:26:cc:70:30:69:21: d8:ea:1b:ca:7b:a5:0e:1a:40:ae:81:4e:73:c1:8a: c4:c0:5d:48:0e:c6:64:76:40:98:52:26:1f:df:5c: 9f:82:63:70:e5:bf:54:22:1c:5b:62:89:85:92:36: b3:64:99:98:29:03:48:36:6a:8b:8c:c4:98:3d:1b: 22:0e:fb:9e:58:4d:3b:95:c1:68:6e:af:0c:12:8c: 8a:e1:e1:e6:8a:fc:27:03:33:6a:1e:d9:cb:0c:62: 30:d6:15:c9:6b:65:ad:e7:ef:5d:7b:4e:3f:ac:17: e1:06:39:0f:80:a3:39:e4:33:fe:d6:84:c5:e5:93: 36:8b:ac:9f:1d:1e:1f:5f:71:c0:e5:67:d7:6a:8d: 4a:de:b9:16:2f:21:66:70:b1:6d:ae:19:d1:2b:94: 6d:ea:62:26:22:ed:34:92:08:bc:d8:11:35:45:34: 19:57:de:89:6b:10:bd:d4:76:61:21:ee:b9:e9:af: ba:04:39:4f:21:8a:bf:f8:30:d3:fb:30:f0:ca:bc: 2f:d0:bf:52:2a:bf:10:bf:6b:fb:24:ee:4e:9d:1e: 3b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F4:1B:A2:5D:5E:8E:09:F3:D3:AC:AF:89:90:AB:D9:DA:6A:7E:4B X509v3 Authority Key Identifier: keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/8D2DEDF4C2A811EBA79A7055C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.4.65.0/24 61.4.68.0-61.4.79.255 122.248.100.0-122.248.106.255 122.248.112.0/23 122.248.118.0-122.248.122.255 122.248.126.0/24 203.81.160.0-203.81.165.255 203.81.168.0/23 203.81.172.0/22 Signature Algorithm: sha256WithRSAEncryption 07:22:f7:f4:52:7c:24:95:bb:ef:f9:17:e7:57:f7:0c:16:0d: 7f:53:88:c3:37:c7:b3:d2:8a:b1:78:d7:3d:a7:1b:f9:1a:81: 49:4a:81:b8:f4:a3:ce:cd:20:9e:9d:10:b1:e2:ff:9b:0d:a9: f4:5a:46:cf:5a:1f:1f:30:6d:9b:78:bf:76:0d:14:72:2b:2e: 36:a2:a0:b2:61:af:ca:58:1e:1c:a1:72:7c:58:02:ff:38:28: 54:fc:38:ab:89:a5:47:98:af:bb:c0:29:c4:d9:9b:9e:9b:f9: 8e:f4:38:b9:e7:8e:66:85:a8:dd:c5:8d:dd:84:12:b8:ce:6e: ae:79:99:6a:eb:7c:10:b7:34:1b:f9:e7:e7:5a:ba:a1:db:50: 3a:4a:e8:9b:56:b2:ce:de:c5:ab:c1:03:86:87:46:68:34:02: f1:e4:48:77:25:8a:8c:1e:4d:0d:a8:55:1e:e3:e8:8d:7c:90: ff:cc:fc:2f:e9:03:d9:54:3a:6d:10:a6:7a:ad:a8:7d:cf:4a: 42:01:60:71:b6:7a:2a:99:ef:f8:d9:de:6f:f6:4d:59:05:b1: 1c:31:f3:cf:83:db:88:52:76:38:7f:d1:74:d7:aa:32:90:df: a5:27:e4:26:0b:eb:64:b8:4c:fa:e1:42:39:ea:39:b7:59:fc: e7:16:3c:93 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgICNXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5 QzMzOTlDQjIwHhcNMjUxMjMxMTUxMDI5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU1M2NlNS01NWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOJfk0BxgDZ4E0ZWlSbPSPMqJPKtBNC67yI1LnNAKYWHGUrHY98mzHAwaSHY 6hvKe6UOGkCugU5zwYrEwF1IDsZkdkCYUiYf31yfgmNw5b9UIhxbYomFkjazZJmY KQNINmqLjMSYPRsiDvueWE07lcFobq8MEoyK4eHmivwnAzNqHtnLDGIw1hXJa2Wt 5+9de04/rBfhBjkPgKM55DP+1oTF5ZM2i6yfHR4fX3HA5WfXao1K3rkWLyFmcLFt rhnRK5Rt6mImIu00kgi82BE1RTQZV96JaxC91HZhIe656a+6BDlPIYq/+DDT+zDw yrwv0L9SKr8Qv2v7JO5OnR47rQIDAQABo4IC5TCCAuEwHQYDVR0OBBYEFEL0G6Jd Xo4J89Osr4mQq9naan5LMB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI4NzgvNEM5OThBMzYxRDhBMTFFMjhBMUYyM0U0MDhCMDJDRDIvOEQyREVERjRD MkE4MTFFQkE3OUE3MDU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbwYIKwYBBQUHAQcBAf8E YDBeMFwEAgABMFYDBAA9BEEwDAMEAj0ERAMEBD0EQDAMAwQCevhkAwQAevhqAwQB evhwMAwDBAF6+HYDBAB6+HoDBAB6+H4wDAMEBctRoAMEActRpAMEActRqAMEAstR rDANBgkqhkiG9w0BAQsFAAOCAQEAByL39FJ8JJW77/kX51f3DBYNf1OIwzfHs9KK sXjXPacb+RqBSUqBuPSjzs0gnp0QseL/mw2p9FpGz1ofHzBtm3i/dg0UcisuNqKg smGvylgeHKFyfFgC/zgoVPw4q4mlR5ivu8ApxNmbnpv5jvQ4ueeOZoWo3cWN3YQS uM5urnmZaut8ELc0G/nn51q6odtQOkrom1ayzt7Fq8EDhodGaDQC8eRIdyWKjB5N DahVHuPojXyQ/8z8L+kD2VQ6bRCmeq2ofc9KQgFgcbZ6Kpnv+Nneb/ZNWQWxHDHz z4PbiFJ2OH/RdNeqMpDfpSfkJgvrZLhM+uFCOeo5t1n85xY8kw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:53:35 2026 by rpki-client