This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/7DE09496DDD911EA90D9B84CC4F9AE02.roa File: 7DE09496DDD911EA90D9B84CC4F9AE02.roa (raw, json) Hash identifier: 2q8AYDfxOWLoT2+AfymL8bwLlmcQOfxdk8eBjQ1Y2sU= Subject key identifier: 45:B0:41:01:2A:61:2E:E7:6D:DE:FE:C6:D6:C9:31:DD:68:64:65:95 Certificate issuer: /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4 Certificate serial: 0A59 Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/7DE09496DDD911EA90D9B84CC4F9AE02.roa Signing time: Thu 20 Nov 2025 19:10:08 +0000 ROA not before: Thu 20 Nov 2025 19:10:08 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 23764 IP address blocks: 63.140.3.0/24 maxlen: 24 63.140.4.0/24 maxlen: 24 63.140.5.0/24 maxlen: 24 63.140.6.0/24 maxlen: 24 63.140.7.0/24 maxlen: 24 63.140.8.0/24 maxlen: 24 63.140.9.0/24 maxlen: 24 63.140.10.0/24 maxlen: 24 63.140.11.0/24 maxlen: 24 63.140.13.0/24 maxlen: 24 63.140.14.0/24 maxlen: 24 63.140.15.0/24 maxlen: 24 69.194.160.0/24 maxlen: 24 69.194.161.0/24 maxlen: 24 69.194.162.0/24 maxlen: 24 69.194.163.0/24 maxlen: 24 69.194.164.0/24 maxlen: 24 69.194.165.0/24 maxlen: 24 69.194.166.0/24 maxlen: 24 69.194.167.0/24 maxlen: 24 69.194.168.0/24 maxlen: 24 69.194.170.0/24 maxlen: 24 69.194.171.0/24 maxlen: 24 69.194.172.0/24 maxlen: 24 69.194.173.0/24 maxlen: 24 69.194.174.0/24 maxlen: 24 69.194.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2649 (0xa59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917576D, serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4 Validity Not Before: Nov 20 19:10:08 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691f6790-a52c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:98:7b:aa:c2:46:88:bf:a3:d1:e1:bf:25:a7: 6e:c8:ce:7b:e8:cb:76:72:13:80:05:69:0e:7a:13: a2:03:b7:d5:00:dd:f7:bc:9e:15:76:aa:b8:fc:2a: b5:dc:3d:e3:cf:88:ad:6b:76:45:e3:93:73:8a:6c: 0f:34:4c:80:6c:15:9b:2d:95:08:26:76:1f:0f:bc: c0:88:89:85:ad:8b:f7:e7:b0:f1:8d:e1:a5:03:8d: b2:51:e2:ff:b5:df:06:b9:4c:2c:62:42:8c:e3:cf: e4:7a:3d:21:1e:08:9e:9e:9f:50:47:e2:bf:3e:91: 51:63:6c:07:ad:5d:bb:fe:f3:d2:41:a2:1f:e7:bd: a5:db:f3:c2:c2:76:5d:ea:3c:c1:f8:b8:f1:37:4e: 87:33:14:19:aa:e0:28:73:9c:0d:f0:08:b1:e4:1c: 81:da:08:bf:20:e1:66:86:d3:ff:fc:1c:0b:68:11: 43:cd:79:e2:32:0a:96:a2:f8:35:e5:bc:8b:ce:41: 52:fd:22:f7:53:29:55:bf:4c:5b:15:b6:4e:eb:c3: 6c:98:25:00:e6:59:1a:42:67:5d:3e:e0:0b:c3:07: ed:16:38:1f:ac:df:4b:74:07:0c:41:83:7d:74:0d: 8d:a7:d6:52:25:b3:9b:4d:c6:19:1b:64:20:04:d7: a1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B0:41:01:2A:61:2E:E7:6D:DE:FE:C6:D6:C9:31:DD:68:64:65:95 X509v3 Authority Key Identifier: keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/7DE09496DDD911EA90D9B84CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 63.140.3.0-63.140.11.255 63.140.13.0-63.140.15.255 69.194.160.0-69.194.168.255 69.194.170.0-69.194.175.255 Signature Algorithm: sha256WithRSAEncryption 27:e1:b4:02:71:20:b9:31:28:fd:37:cc:ce:d8:47:91:ad:f7: 29:48:42:09:78:ed:2a:f7:ec:32:6e:c2:d3:61:49:db:7a:ac: 0d:36:dc:f6:e9:30:8e:43:02:85:b4:9d:41:e4:37:8c:88:60: fb:8f:f0:c5:19:5e:be:a3:bf:39:63:cc:ed:f9:50:f0:1e:22: d6:44:46:61:b4:d4:c9:3f:2e:ec:bc:50:27:61:9b:36:ce:f7: d5:fa:b7:d0:86:37:90:ed:01:c2:63:fb:b1:e1:af:2e:e9:46: 1c:e4:33:c6:7c:d2:12:7a:18:d7:3f:d0:1a:2b:28:58:36:2d: 97:b6:26:b4:0b:59:45:52:ae:80:d3:79:59:a2:d8:19:82:ea: 5a:45:8a:23:d2:d1:ba:75:4e:64:b5:48:e5:04:9a:67:5b:d7: dd:28:b3:6e:de:74:d1:ef:82:bf:2a:56:4e:54:40:ec:39:cb: b2:d0:cb:42:b5:1d:76:c8:a5:45:22:0d:ab:64:ff:df:a5:6d: 35:db:4b:39:bc:b2:f9:39:7c:d3:4c:7c:76:61:00:be:46:cd: 2c:b0:9b:b5:fe:25:af:1f:a7:94:68:f0:b9:8c:c4:d3:93:ee: ce:0b:9e:f7:29:3f:e8:55:0f:74:1c:7a:5a:49:8a:20:41:08: 73:c4:e7:ff -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICClkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NkQxMTAvBgNVBAUTKEI3MDMxOEQ3MUFBMEU4MDQzMjRFMDEzQzMwOTdGREJD RDYwMTM0RDQwHhcNMjUxMTIwMTkxMDA4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFmNjc5MC1hNTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApph7qsJGiL+j0eG/JaduyM576Mt2chOABWkOehOiA7fVAN33vJ4Vdqq4/Cq1 3D3jz4ita3ZF45NzimwPNEyAbBWbLZUIJnYfD7zAiImFrYv357DxjeGlA42yUeL/ td8GuUwsYkKM48/kej0hHgienp9QR+K/PpFRY2wHrV27/vPSQaIf572l2/PCwnZd 6jzB+LjxN06HMxQZquAoc5wN8Aix5ByB2gi/IOFmhtP//BwLaBFDzXniMgqWovg1 5byLzkFS/SL3UylVv0xbFbZO68NsmCUA5lkaQmddPuALwwftFjgfrN9LdAcMQYN9 dA2Np9ZSJbObTcYZG2QgBNeh3QIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFEWwQQEq YS7nbd7+xtbJMd1oZGWVMB8GA1UdIwQYMBaAFLcDGNcaoOgEMk4BPDCX/bzWATTU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8yRTc2N0UzMjgy Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZBUXlUZ0U4TUpmOXZOWUJO TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3R3TVkxeHFnNkFReVRnRThNSmY5dk5ZQk5OUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU3NkQvMkU3NjdFMzI4MkNEMTFFQTg5NUM3QjVDQzRGOUFFMDIvN0RFMDk0OTZE REQ5MTFFQTkwRDlCODRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUQYIKwYBBQUHAQcBAf8E QjBAMD4EAgABMDgwDAMEAD+MAwMEAj+MCDAMAwQAP4wNAwQEP4wAMAwDBAVFwqAD BABFwqgwDAMEAUXCqgMEBEXCoDANBgkqhkiG9w0BAQsFAAOCAQEAJ+G0AnEguTEo /TfMzthHka33KUhCCXjtKvfsMm7C02FJ23qsDTbc9ukwjkMChbSdQeQ3jIhg+4/w xRlevqO/OWPM7flQ8B4i1kRGYbTUyT8u7LxQJ2GbNs731fq30IY3kO0BwmP7seGv LulGHOQzxnzSEnoY1z/QGisoWDYtl7YmtAtZRVKugNN5WaLYGYLqWkWKI9LRunVO ZLVI5QSaZ1vX3Sizbt500e+CvypWTlRA7DnLstDLQrUddsilRSINq2T/36VtNdtL Obyy+Tl800x8dmEAvkbNLLCbtf4lrx+nlGjwuYzE05Puzgue9yk/6FUPdBx6WkmK IEEIc8Tn/w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:26:26 2025 by rpki-client