This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/155309DAFF3B11EF87CAB56EC4F9AE02.roa File: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (raw, json) Hash identifier: pCfOqKvpPAi6jCM2mIS9Dx/Yc8Tm67F8AtZbfbW0m70= Subject key identifier: 4D:EA:F0:21:B7:10:36:C4:A1:7E:8F:DB:27:00:87:DB:B8:71:28:C9 Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Certificate serial: 0438 Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/155309DAFF3B11EF87CAB56EC4F9AE02.roa Signing time: Wed 26 Nov 2025 23:15:57 +0000 ROA not before: Wed 26 Nov 2025 23:15:57 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 135409 IP address blocks: 14.137.32.0/19 maxlen: 24 103.70.64.0/22 maxlen: 24 103.103.60.0/22 maxlen: 24 182.54.144.0/22 maxlen: 24 182.255.28.0/22 maxlen: 24 202.5.112.0/20 maxlen: 24 203.2.130.0/23 maxlen: 24 203.8.206.0/23 maxlen: 24 203.21.140.0/22 maxlen: 24 203.24.104.0/22 maxlen: 24 203.27.96.0/23 maxlen: 24 2001:df2:2600::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Validity Not Before: Nov 26 23:15:57 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69278a2d-1a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:83:65:95:7c:99:2f:a7:75:9f:92:8a:3c:34: 3e:93:5b:d5:ad:97:89:94:9d:28:1a:6d:7c:46:56: 47:c2:f4:1f:d1:19:be:2c:7c:48:32:5d:14:ec:1e: d0:0c:30:e9:8e:2d:d7:cb:18:d1:54:26:f3:1a:f0: 30:62:9d:10:f4:aa:47:7a:4b:ac:1d:e6:6b:e4:ce: a0:16:e9:a7:28:50:55:f1:1a:f7:9d:56:bc:cb:53: 03:48:67:19:b7:6c:94:d0:1b:aa:3e:d4:aa:4e:08: 73:e1:90:69:04:75:3e:a9:a1:50:c6:1c:42:fb:62: ea:2e:c8:76:80:62:b7:de:f4:04:f4:38:cf:03:ff: ff:9d:93:20:36:4c:00:e0:46:52:c8:85:0d:cb:38: 6a:c0:5d:5c:1d:cc:c2:06:8f:ff:bd:f7:17:12:23: 3b:a7:e7:b3:42:49:3b:bd:c3:ab:10:2e:34:63:21: c0:13:84:b7:47:41:ee:d3:33:4f:03:ed:aa:26:7d: 55:8c:94:f1:41:d4:5a:d2:f9:c6:09:0c:e0:d2:42: 31:ab:78:f5:df:9a:0c:fd:79:11:9a:9a:af:4d:f7: 01:12:9a:a8:e8:8f:50:a2:ab:5e:76:c6:98:e7:42: 1f:41:f5:c7:bb:86:0f:3d:b7:93:c7:b5:b6:1c:14: f2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EA:F0:21:B7:10:36:C4:A1:7E:8F:DB:27:00:87:DB:B8:71:28:C9 X509v3 Authority Key Identifier: keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/155309DAFF3B11EF87CAB56EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.137.32.0/19 103.70.64.0/22 103.103.60.0/22 182.54.144.0/22 182.255.28.0/22 202.5.112.0/20 203.2.130.0/23 203.8.206.0/23 203.21.140.0/22 203.24.104.0/22 203.27.96.0/23 IPv6: 2001:df2:2600::/48 Signature Algorithm: sha256WithRSAEncryption af:95:16:81:e2:b4:ea:d5:d0:68:9d:23:74:60:10:a0:19:df: 0e:6b:00:5c:b8:23:12:94:9d:0f:2c:fa:88:c7:65:b8:ac:48: 6a:79:db:4b:bf:5f:a7:93:53:51:44:26:d2:13:35:ae:a8:24: 90:c6:f0:23:63:ce:75:90:ac:54:f5:3f:79:eb:b5:62:67:e3: df:d8:14:ba:89:4b:f2:6a:a8:4e:88:51:d2:05:ba:f4:53:52: fb:8a:27:e8:d5:7c:94:b6:d1:5e:0b:01:54:19:7a:bf:92:41: fe:66:c8:35:5b:b6:c9:a0:f2:67:bc:2f:1c:5b:d1:e1:8e:15: 30:8f:92:4a:55:02:69:7a:4c:f7:0e:c3:3b:f7:70:da:6b:2d: 30:68:e8:b4:42:a5:dd:54:12:78:25:b9:79:4b:94:98:ef:a7: 1c:fc:a8:16:f0:3a:ae:f6:b0:85:f8:e1:34:63:28:a7:7b:6a: f6:50:3e:42:53:c3:c1:71:03:73:56:dc:a7:8b:42:53:ae:74: 92:f8:9e:a9:4a:d3:63:d4:82:cf:7a:1f:26:ee:db:8e:74:bc: 2e:50:75:b0:ff:08:7d:bd:b0:d1:24:dd:17:ab:a9:cc:80:a3: c5:03:3b:60:a7:04:15:e0:80:0b:82:9c:c8:d2:82:68:5e:dc: 60:e5:92:5e -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD NDY3NEVCQUEwHhcNMjUxMTI2MjMxNTU3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI3OGEyZC0xYTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoNllXyZL6d1n5KKPDQ+k1vVrZeJlJ0oGm18RlZHwvQf0Rm+LHxIMl0U7B7Q DDDpji3XyxjRVCbzGvAwYp0Q9KpHekusHeZr5M6gFumnKFBV8Rr3nVa8y1MDSGcZ t2yU0BuqPtSqTghz4ZBpBHU+qaFQxhxC+2LqLsh2gGK33vQE9DjPA///nZMgNkwA 4EZSyIUNyzhqwF1cHczCBo//vfcXEiM7p+ezQkk7vcOrEC40YyHAE4S3R0Hu0zNP A+2qJn1VjJTxQdRa0vnGCQzg0kIxq3j135oM/XkRmpqvTfcBEpqo6I9QoqtedsaY 50IfQfXHu4YPPbeTx7W2HBTykwIDAQABo4IC4jCCAt4wHQYDVR0OBBYEFE3q8CG3 EDbEoX6P2ycAh9u4cSjJMB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0YyNDcvNkQyMkVBRjA4RjAzMTFFQ0E1QzlGRTEyQzRGOUFFMDIvMTU1MzA5REFG RjNCMTFFRjg3Q0FCNTZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbAYIKwYBBQUHAQcBAf8E XTBbMEgEAgABMEIDBAUOiSADBAJnRkADBAJnZzwDBAK2NpADBAK2/xwDBATKBXAD BAHLAoIDBAHLCM4DBALLFYwDBALLGGgDBAHLG2AwDwQCAAIwCQMHACABDfImADAN BgkqhkiG9w0BAQsFAAOCAQEAr5UWgeK06tXQaJ0jdGAQoBnfDmsAXLgjEpSdDyz6 iMdluKxIannbS79fp5NTUUQm0hM1rqgkkMbwI2POdZCsVPU/eeu1Ymfj39gUuolL 8mqoTohR0gW69FNS+4on6NV8lLbRXgsBVBl6v5JB/mbINVu2yaDyZ7wvHFvR4Y4V MI+SSlUCaXpM9w7DO/dw2mstMGjotEKl3VQSeCW5eUuUmO+nHPyoFvA6rvawhfjh NGMop3tq9lA+QlPDwXEDc1bcp4tCU650kvieqUrTY9SCz3ofJu7bjnS8LlB1sP8I fb2w0STdF6upzICjxQM7YKcEFeCAC4KcyNKCaF7cYOWSXg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:06:53 2025 by rpki-client