This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/19CCFBDE6F0911ED8A7BD268C4F9AE02.roa
File: 19CCFBDE6F0911ED8A7BD268C4F9AE02.roa (raw, json)
Hash identifier: WOTWjYS6jtYvRaVOJjud0p4ECu/MFgAgRLi6jkDSCKs=
Subject key identifier: F2:F0:B4:E9:01:88:37:9F:99:18:31:A9:14:1C:36:A1:D5:A6:7E:9B
Certificate issuer: /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Certificate serial: 3534
Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/19CCFBDE6F0911ED8A7BD268C4F9AE02.roa
Signing time: Wed 27 Aug 2025 13:27:40 +0000
ROA not before: Wed 27 Aug 2025 13:27:40 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 38264
IP address blocks: 58.27.128.0/17 maxlen: 17
58.27.128.0/24 maxlen: 24
58.27.129.0/24 maxlen: 24
58.27.130.0/24 maxlen: 24
58.27.131.0/24 maxlen: 24
58.27.132.0/22 maxlen: 22
58.27.132.0/24 maxlen: 24
58.27.133.0/24 maxlen: 24
58.27.134.0/24 maxlen: 24
58.27.135.0/24 maxlen: 24
58.27.136.0/22 maxlen: 22
58.27.140.0/24 maxlen: 24
58.27.141.0/24 maxlen: 24
58.27.142.0/24 maxlen: 24
58.27.144.0/22 maxlen: 23
58.27.144.0/23 maxlen: 24
58.27.148.0/22 maxlen: 22
58.27.148.0/24 maxlen: 24
58.27.149.0/24 maxlen: 24
58.27.150.0/23 maxlen: 23
58.27.152.0/21 maxlen: 22
58.27.152.0/22 maxlen: 23
58.27.156.0/24 maxlen: 24
58.27.157.0/24 maxlen: 24
58.27.158.0/24 maxlen: 24
58.27.159.0/24 maxlen: 24
58.27.160.0/21 maxlen: 22
58.27.160.0/24 maxlen: 24
58.27.164.0/24 maxlen: 24
58.27.168.0/21 maxlen: 22
58.27.168.0/23 maxlen: 23
58.27.170.0/24 maxlen: 24
58.27.171.0/24 maxlen: 24
58.27.172.0/24 maxlen: 24
58.27.176.0/20 maxlen: 20
58.27.184.0/22 maxlen: 22
58.27.188.0/24 maxlen: 24
58.27.189.0/24 maxlen: 24
58.27.190.0/24 maxlen: 24
58.27.192.0/19 maxlen: 19
58.27.192.0/21 maxlen: 21
58.27.192.0/24 maxlen: 24
58.27.193.0/24 maxlen: 24
58.27.194.0/23 maxlen: 23
58.27.195.0/24 maxlen: 24
58.27.196.0/23 maxlen: 24
58.27.198.0/24 maxlen: 24
58.27.199.0/24 maxlen: 24
58.27.200.0/22 maxlen: 22
58.27.200.0/24 maxlen: 24
58.27.201.0/24 maxlen: 24
58.27.202.0/24 maxlen: 24
58.27.203.0/24 maxlen: 24
58.27.204.0/22 maxlen: 22
58.27.204.0/24 maxlen: 24
58.27.205.0/24 maxlen: 24
58.27.206.0/24 maxlen: 24
58.27.207.0/24 maxlen: 24
58.27.208.0/20 maxlen: 20
58.27.208.0/22 maxlen: 22
58.27.208.0/24 maxlen: 24
58.27.209.0/24 maxlen: 24
58.27.210.0/24 maxlen: 24
58.27.211.0/24 maxlen: 24
58.27.212.0/22 maxlen: 22
58.27.212.0/24 maxlen: 24
58.27.213.0/24 maxlen: 24
58.27.215.0/24 maxlen: 24
58.27.216.0/24 maxlen: 24
58.27.217.0/24 maxlen: 24
58.27.218.0/24 maxlen: 24
58.27.219.0/24 maxlen: 24
58.27.220.0/24 maxlen: 24
58.27.221.0/24 maxlen: 24
58.27.222.0/24 maxlen: 24
58.27.223.0/24 maxlen: 24
58.27.224.0/19 maxlen: 19
58.27.224.0/20 maxlen: 20
58.27.224.0/24 maxlen: 24
58.27.225.0/24 maxlen: 24
58.27.226.0/24 maxlen: 24
58.27.227.0/24 maxlen: 24
58.27.228.0/24 maxlen: 24
58.27.229.0/24 maxlen: 24
58.27.230.0/24 maxlen: 24
58.27.231.0/24 maxlen: 24
58.27.232.0/21 maxlen: 21
58.27.232.0/22 maxlen: 22
58.27.232.0/24 maxlen: 24
58.27.233.0/24 maxlen: 24
58.27.234.0/24 maxlen: 24
58.27.235.0/24 maxlen: 24
58.27.236.0/23 maxlen: 24
58.27.238.0/24 maxlen: 24
58.27.239.0/24 maxlen: 24
58.27.240.0/21 maxlen: 21
58.27.240.0/24 maxlen: 24
58.27.241.0/24 maxlen: 24
58.27.242.0/24 maxlen: 24
58.27.243.0/24 maxlen: 24
58.27.244.0/24 maxlen: 24
58.27.245.0/24 maxlen: 24
58.27.246.0/24 maxlen: 24
58.27.247.0/24 maxlen: 24
58.27.248.0/22 maxlen: 22
58.27.248.0/24 maxlen: 24
58.27.249.0/24 maxlen: 24
58.27.250.0/24 maxlen: 24
58.27.251.0/24 maxlen: 24
58.27.252.0/22 maxlen: 23
58.27.255.0/24 maxlen: 24
110.36.0.0/14 maxlen: 15
110.36.0.0/18 maxlen: 24
110.36.64.0/18 maxlen: 24
110.36.128.0/18 maxlen: 24
110.36.192.0/18 maxlen: 24
110.37.0.0/18 maxlen: 24
110.37.64.0/18 maxlen: 24
110.37.128.0/18 maxlen: 24
110.37.192.0/18 maxlen: 24
110.38.0.0/16 maxlen: 19
110.38.0.0/17 maxlen: 24
110.38.128.0/18 maxlen: 24
110.38.192.0/19 maxlen: 24
110.38.224.0/20 maxlen: 24
110.39.0.0/16 maxlen: 24
2402:fd00::/32 maxlen: 32
2402:fd00:100::/44 maxlen: 44
2402:fd00:110::/48 maxlen: 48
2402:fd00:111::/48 maxlen: 48
2402:fd00:11f::/48 maxlen: 48
2402:fd00:130::/44 maxlen: 44
2402:fd00:1e0::/44 maxlen: 44
2402:fd00:1f0::/48 maxlen: 48
2402:fd00:300::/40 maxlen: 40
2402:fd00:4000::/40 maxlen: 40
2402:fd00:6000::/40 maxlen: 40
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13620 (0x3534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Validity
Not Before: Aug 27 13:27:40 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=68af07cc-38bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:29:95:d6:7b:b4:9c:18:47:8d:93:7d:70:
98:14:3a:2e:14:d0:97:cc:2f:81:ec:ba:15:7b:84:
e6:3f:38:b8:80:52:51:96:96:21:97:03:96:66:92:
68:dd:c4:56:3a:d8:e6:00:70:58:9a:13:99:99:58:
97:79:62:3f:5b:b1:79:51:e7:53:76:f3:b9:ae:95:
25:5a:c5:60:bb:fe:3b:60:db:19:2c:d3:ff:ed:31:
a4:81:5d:62:9f:bd:3a:63:e1:6d:76:a6:36:d8:6d:
43:77:92:27:b7:da:83:26:38:47:15:fa:37:0e:be:
25:09:7a:8a:fc:53:49:ba:13:eb:70:75:a2:ea:b1:
b2:1a:c6:d1:80:76:70:73:5f:a3:9f:ca:d8:6a:61:
05:c9:34:24:7a:af:39:6f:3d:16:f4:58:3c:3d:32:
6a:91:56:46:1c:29:d6:1a:12:bc:64:aa:2e:d0:d4:
08:94:53:6a:81:2c:20:26:ba:56:9a:ef:bc:57:ca:
5d:30:f6:ba:15:cf:8b:ef:8f:4d:4c:d0:88:00:42:
98:ee:20:06:69:0f:1e:a2:dc:3b:1a:aa:2f:15:0b:
4b:f6:41:57:17:d2:4a:e9:d6:8e:a8:15:57:b2:46:
a6:28:18:2d:bb:fd:5a:28:30:c7:82:12:25:68:65:
7a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F0:B4:E9:01:88:37:9F:99:18:31:A9:14:1C:36:A1:D5:A6:7E:9B
X509v3 Authority Key Identifier:
keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/19CCFBDE6F0911ED8A7BD268C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.27.128.0/17
110.36.0.0/14
IPv6:
2402:fd00::/32
Signature Algorithm: sha256WithRSAEncryption
4a:23:19:81:b1:0b:33:be:8c:9a:33:af:2c:e9:fc:fd:35:a0:
11:c6:69:c5:a6:7a:34:ca:05:32:24:37:63:f2:66:59:8f:61:
60:f0:5c:79:1f:9c:f8:06:91:4e:7e:29:96:22:9d:37:0f:fb:
b7:84:b1:e6:b6:49:35:95:88:04:08:2e:4f:2c:a1:b0:f6:87:
8b:62:19:b0:a6:95:f4:ce:9e:10:82:3d:7b:08:29:97:7d:72:
0a:5a:08:4f:a9:f5:eb:67:ad:16:1a:c9:30:e4:99:cf:f6:8f:
00:5a:b9:3b:58:1e:87:ec:02:34:d3:6f:9b:c7:58:e3:48:93:
64:1b:9e:82:80:0c:13:29:bb:2a:72:bb:63:64:19:80:02:e4:
37:b6:1a:68:67:97:dc:0f:45:bf:48:4f:1b:38:43:d7:56:55:
b9:0b:be:2b:38:7a:fc:5b:78:97:ac:b9:e5:17:fc:0c:96:50:
f2:23:0b:93:07:4e:92:67:60:4d:64:84:a4:c4:88:df:8c:6e:
c5:5e:54:33:b4:f5:f4:58:aa:c0:76:3c:44:5d:24:f6:42:07:
97:b7:90:4b:c5:91:95:8e:36:90:67:93:80:37:1c:46:3f:33:
ef:a8:7f:9b:79:9e:a6:ce:79:54:29:2a:a3:52:64:18:c8:e2:
7c:92:2e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 20:57:38 2025 by rpki-client