This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/B38D932050EF11EC8583962BC4F9AE02.roa File: B38D932050EF11EC8583962BC4F9AE02.roa (raw, json) Hash identifier: omXPUpgqUwy7Ho8dCu5BoDvGaEojyvGoRFJTZ4dVFjs= Subject key identifier: E9:51:FF:33:C4:0B:E3:FC:CD:21:A2:AD:24:DC:F5:4E:41:60:9C:EE Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Certificate serial: 04C2 Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/B38D932050EF11EC8583962BC4F9AE02.roa Signing time: Tue 18 Nov 2025 20:11:21 +0000 ROA not before: Tue 18 Nov 2025 20:11:21 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 45753 IP address blocks: 52.128.224.0/19 maxlen: 19 52.128.224.0/24 maxlen: 24 52.128.225.0/24 maxlen: 24 52.128.226.0/24 maxlen: 24 52.128.227.0/24 maxlen: 24 52.128.228.0/24 maxlen: 24 52.128.229.0/24 maxlen: 24 52.128.230.0/24 maxlen: 24 52.128.231.0/24 maxlen: 24 52.128.232.0/24 maxlen: 24 52.128.233.0/24 maxlen: 24 52.128.234.0/24 maxlen: 24 52.128.235.0/24 maxlen: 24 52.128.236.0/24 maxlen: 24 52.128.237.0/24 maxlen: 24 52.128.238.0/24 maxlen: 24 52.128.239.0/24 maxlen: 24 52.128.240.0/24 maxlen: 24 52.128.241.0/24 maxlen: 24 52.128.242.0/24 maxlen: 24 52.128.243.0/24 maxlen: 24 52.128.244.0/24 maxlen: 24 52.128.245.0/24 maxlen: 24 52.128.246.0/24 maxlen: 24 52.128.247.0/24 maxlen: 24 52.128.248.0/24 maxlen: 24 52.128.249.0/24 maxlen: 24 52.128.250.0/24 maxlen: 24 52.128.251.0/24 maxlen: 24 52.128.252.0/24 maxlen: 24 52.128.253.0/24 maxlen: 24 52.128.254.0/24 maxlen: 24 52.128.255.0/24 maxlen: 24 148.66.0.0/19 maxlen: 19 148.66.0.0/24 maxlen: 24 148.66.1.0/24 maxlen: 24 148.66.2.0/24 maxlen: 24 148.66.3.0/24 maxlen: 24 148.66.4.0/24 maxlen: 24 148.66.5.0/24 maxlen: 24 148.66.6.0/24 maxlen: 24 148.66.7.0/24 maxlen: 24 148.66.8.0/24 maxlen: 24 148.66.9.0/24 maxlen: 24 148.66.10.0/24 maxlen: 24 148.66.11.0/24 maxlen: 24 148.66.12.0/24 maxlen: 24 148.66.13.0/24 maxlen: 24 148.66.14.0/24 maxlen: 24 148.66.15.0/24 maxlen: 24 148.66.16.0/24 maxlen: 24 148.66.17.0/24 maxlen: 24 148.66.18.0/24 maxlen: 24 148.66.19.0/24 maxlen: 24 148.66.20.0/24 maxlen: 24 148.66.21.0/24 maxlen: 24 148.66.22.0/24 maxlen: 24 148.66.23.0/24 maxlen: 24 148.66.24.0/24 maxlen: 24 148.66.25.0/24 maxlen: 24 148.66.26.0/24 maxlen: 24 148.66.27.0/24 maxlen: 24 148.66.28.0/24 maxlen: 24 148.66.29.0/24 maxlen: 24 148.66.30.0/24 maxlen: 24 148.66.31.0/24 maxlen: 24 216.118.224.0/19 maxlen: 19 216.118.224.0/24 maxlen: 24 216.118.225.0/24 maxlen: 24 216.118.226.0/24 maxlen: 24 216.118.227.0/24 maxlen: 24 216.118.228.0/24 maxlen: 24 216.118.229.0/24 maxlen: 24 216.118.230.0/24 maxlen: 24 216.118.231.0/24 maxlen: 24 216.118.232.0/24 maxlen: 24 216.118.233.0/24 maxlen: 24 216.118.234.0/24 maxlen: 24 216.118.235.0/24 maxlen: 24 216.118.236.0/24 maxlen: 24 216.118.237.0/24 maxlen: 24 216.118.238.0/24 maxlen: 24 216.118.239.0/24 maxlen: 24 216.118.240.0/24 maxlen: 24 216.118.241.0/24 maxlen: 24 216.118.242.0/24 maxlen: 24 216.118.243.0/24 maxlen: 24 216.118.244.0/24 maxlen: 24 216.118.245.0/24 maxlen: 24 216.118.246.0/24 maxlen: 24 216.118.247.0/24 maxlen: 24 216.118.248.0/24 maxlen: 24 216.118.249.0/24 maxlen: 24 216.118.250.0/24 maxlen: 24 216.118.251.0/24 maxlen: 24 216.118.252.0/24 maxlen: 24 216.118.253.0/24 maxlen: 24 216.118.254.0/24 maxlen: 24 216.118.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1218 (0x4c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Validity Not Before: Nov 18 20:11:21 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691cd2e9-d063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:cf:c1:09:ad:08:ce:b7:69:9c:77:df:ad:c1: 00:ec:dc:e1:2a:ce:80:87:f6:d8:9e:07:dd:a2:08: 4e:2e:6f:1a:24:d0:93:12:ff:cb:76:7d:42:98:d6: 2b:ae:90:ea:4d:2a:ca:95:3f:03:b7:07:1a:d3:0a: 3c:13:e5:8e:a8:9b:4e:62:68:51:07:20:c9:db:0f: d2:ae:12:73:d4:75:96:f5:b1:96:33:3d:5d:41:2b: dd:ae:76:bc:fc:e7:03:b4:a4:a8:ba:a1:6f:e4:94: 8b:51:38:3f:72:d1:49:17:50:7a:73:71:df:fb:1d: 72:7d:99:69:e8:ed:62:3f:39:24:fe:d7:b2:5e:e1: d1:d5:16:ef:89:bf:b0:2f:7a:18:8c:c2:f8:08:36: 67:8d:66:e5:d8:44:d8:92:24:8b:2a:a4:74:fd:e5: c4:6a:dc:27:ce:f4:5e:fc:fd:57:72:50:17:27:3c: 2d:e5:aa:79:1e:5e:a8:a2:53:4b:8f:ec:d3:6f:47: 0f:ea:8b:b9:92:8a:90:ae:03:80:c8:80:81:b0:e1: 5c:00:27:27:4b:95:30:b8:28:e6:e4:a9:90:c3:e3: 8d:94:63:79:59:eb:15:9e:9c:4d:60:3d:6f:10:a2: 99:1a:13:38:37:65:74:56:ea:5f:10:8a:ef:35:26: 7c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:51:FF:33:C4:0B:E3:FC:CD:21:A2:AD:24:DC:F5:4E:41:60:9C:EE X509v3 Authority Key Identifier: keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/B38D932050EF11EC8583962BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 52.128.224.0/19 148.66.0.0/19 216.118.224.0/19 Signature Algorithm: sha256WithRSAEncryption 97:4a:26:b1:02:89:69:26:8e:25:81:c0:6d:71:af:37:aa:a1: 9a:ca:bb:5b:56:47:9d:35:c4:49:d8:e5:26:5c:85:c4:3e:aa: 3a:42:d4:fe:f5:aa:3a:46:eb:c1:f4:07:5f:dd:29:11:74:57: 10:4e:e7:bd:a4:ff:f0:a8:9d:b3:c6:65:8e:80:11:b6:bb:b2: 3f:83:74:22:0f:51:3b:ac:22:e3:ed:fd:eb:65:a7:c9:e8:19: 79:d4:90:9d:f4:86:d4:c4:da:db:a5:53:f3:7a:04:a7:89:4a: 36:a8:bd:d2:7a:64:4e:18:e3:87:6a:9b:c0:bc:33:63:8c:24: f4:6a:76:45:16:d3:35:76:1d:e6:2b:d9:ae:99:20:63:1b:2f: 29:1d:e4:33:c2:d4:fd:22:90:b3:56:c0:2e:12:5e:88:3b:c7: 45:19:43:37:5c:8d:f8:66:30:11:ea:07:74:e5:19:a0:b5:d6: bd:08:5d:7a:7e:7f:f9:0b:7d:55:f2:1d:0a:05:57:6b:5d:a4: 64:44:60:a7:fc:11:d2:b0:c5:e9:b5:5d:a5:e7:33:d0:11:3a: 0d:e5:70:8e:e7:86:6e:22:04:db:ae:fe:e5:d6:3e:3e:54:49: b4:28:e5:bc:0e:2f:07:8b:15:47:a7:75:34:e5:2a:21:58:b0: c2:aa:2e:0f -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQjAxMTAvBgNVBAUTKEUxQjkxMEI5QzczMTBDOUY2NTU5NEZDNkU4OTg5RkM5 NTNCMzZFNTEwHhcNMjUxMTE4MjAxMTIxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFjZDJlOS1kMDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/M/BCa0IzrdpnHffrcEA7NzhKs6Ah/bYngfdoghOLm8aJNCTEv/Ldn1CmNYr rpDqTSrKlT8Dtwca0wo8E+WOqJtOYmhRByDJ2w/SrhJz1HWW9bGWMz1dQSvdrna8 /OcDtKSouqFv5JSLUTg/ctFJF1B6c3Hf+x1yfZlp6O1iPzkk/teyXuHR1Rbvib+w L3oYjML4CDZnjWbl2ETYkiSLKqR0/eXEatwnzvRe/P1XclAXJzwt5ap5Hl6oolNL j+zTb0cP6ou5koqQrgOAyICBsOFcACcnS5UwuCjm5KmQw+ONlGN5WesVnpxNYD1v EKKZGhM4N2V0VupfEIrvNSZ8ZwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFOlR/zPE C+P8zSGirSTc9U5BYJzuMB8GA1UdIwQYMBaAFOG5ELnHMQyfZVlPxuiYn8lTs25R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC9FMzJDODdDQzUw RDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERKOWxXVV9HNkppZnlWT3pi bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRia1F1Y2N4REo5bFdVX0c2SmlmeVZPemJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhFQjAvRTMyQzg3Q0M1MEQ1MTFFQ0IzRjhENTI5QzRGOUFFMDIvQjM4RDkzMjA1 MEVGMTFFQzg1ODM5NjJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAU0gOADBAWUQgADBAXYduAwDQYJKoZIhvcNAQELBQADggEB AJdKJrECiWkmjiWBwG1xrzeqoZrKu1tWR501xEnY5SZchcQ+qjpC1P71qjpG68H0 B1/dKRF0VxBO572k//ConbPGZY6AEba7sj+DdCIPUTusIuPt/etlp8noGXnUkJ30 htTE2tulU/N6BKeJSjaovdJ6ZE4Y44dqm8C8M2OMJPRqdkUW0zV2HeYr2a6ZIGMb Lykd5DPC1P0ikLNWwC4SXog7x0UZQzdcjfhmMBHqB3TlGaC11r0IXXp+f/kLfVXy HQoFV2tdpGREYKf8EdKwxem1XaXnM9AROg3lcI7nhm4iBNuu/uXWPj5USbQo5bwO LweLFUendTTlKiFYsMKqLg8= -----END CERTIFICATE-----Generated at Sun Dec 7 03:00:11 2025 by rpki-client