This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/84BCE8BCBB9311F090BFAD33C4F9AE02.roa File: 84BCE8BCBB9311F090BFAD33C4F9AE02.roa (raw, json) Hash identifier: /rKYDeM8j/Tg8lc5F9hDeIaU0xqITQt+Hm2O89NSsX0= Subject key identifier: F2:A2:DC:CD:EC:0E:1F:5C:BC:B2:B6:BC:63:90:DA:5C:DA:89:FC:11 Certificate issuer: /CN=A9182CFC/serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405 Certificate serial: 351F Authority key identifier: 80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/84BCE8BCBB9311F090BFAD33C4F9AE02.roa Signing time: Fri 07 Nov 2025 04:37:51 +0000 ROA not before: Fri 07 Nov 2025 04:37:51 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9892 IP address blocks: 114.129.33.0/24 maxlen: 24 114.129.36.0/22 maxlen: 22 114.129.36.0/24 maxlen: 24 114.129.38.0/24 maxlen: 24 114.129.40.0/23 maxlen: 23 114.129.41.0/24 maxlen: 24 114.129.45.0/24 maxlen: 24 114.129.46.0/24 maxlen: 24 114.129.47.0/24 maxlen: 24 123.100.235.0/24 maxlen: 24 123.100.236.0/22 maxlen: 22 123.100.236.0/24 maxlen: 24 123.100.237.0/24 maxlen: 24 123.100.238.0/23 maxlen: 23 123.100.241.0/24 maxlen: 24 123.100.244.0/23 maxlen: 23 123.100.244.0/24 maxlen: 24 123.100.245.0/24 maxlen: 24 123.100.251.0/24 maxlen: 24 123.100.252.0/24 maxlen: 24 202.157.128.0/21 maxlen: 21 202.157.136.0/22 maxlen: 22 202.157.142.0/23 maxlen: 23 202.157.148.0/24 maxlen: 24 202.157.152.0/24 maxlen: 24 202.157.160.0/20 maxlen: 20 202.157.160.0/21 maxlen: 21 202.157.168.0/21 maxlen: 21 202.160.120.0/24 maxlen: 24 202.160.121.0/24 maxlen: 24 202.160.122.0/24 maxlen: 24 202.160.123.0/24 maxlen: 24 203.142.16.0/21 maxlen: 21 203.142.24.0/23 maxlen: 23 203.142.27.0/24 maxlen: 24 2404:4800::/48 maxlen: 48 2404:4800:1::/48 maxlen: 48 2404:4800:2::/48 maxlen: 48 2404:4800:3::/48 maxlen: 48 2404:4800:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13599 (0x351f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182CFC, serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405 Validity Not Before: Nov 7 04:37:51 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=690d779f-c137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:07:2c:71:34:9d:42:e3:44:1c:f4:20:2c:f2: 30:5e:2d:d1:3b:c8:35:d9:7c:90:7c:9c:51:33:70: b0:c9:9e:47:39:32:85:d1:5e:06:d4:76:87:56:c0: 49:d7:b6:e1:64:75:ef:2c:b0:45:41:9c:91:67:aa: 43:7c:9c:ef:bc:1e:8f:3a:74:67:74:48:1f:1a:c3: 8a:50:4e:80:61:6d:fa:d8:9b:2f:8a:9d:18:fb:27: 60:31:09:11:07:38:cf:74:9c:a0:c4:ca:61:72:1e: fc:14:a7:7e:db:89:87:83:fd:38:11:4b:9b:c7:1f: 66:b3:8c:fb:37:89:00:44:e0:df:36:f0:eb:a7:9d: c7:a9:64:5c:2f:d2:98:43:ab:c3:e5:36:6f:d2:7f: af:e1:6f:1c:11:46:7a:16:7f:85:f4:06:2e:9e:b4: 17:ae:00:06:ee:fd:f8:af:55:a9:25:87:85:bb:3c: 3b:4d:f7:c6:cd:ec:17:33:bf:52:99:1a:de:1c:a5: 84:33:dc:aa:7e:cc:fb:b1:4a:4b:56:e5:c6:ba:da: 05:e4:0f:9c:1d:b8:7c:b0:39:9b:99:f3:34:a5:89: 97:2e:ff:b3:dd:f4:bf:46:4b:5b:70:fa:a3:16:3f: 71:97:70:a8:9b:72:da:4a:8c:73:4c:5f:a6:48:3a: 69:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A2:DC:CD:EC:0E:1F:5C:BC:B2:B6:BC:63:90:DA:5C:DA:89:FC:11 X509v3 Authority Key Identifier: keyid:80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/84BCE8BCBB9311F090BFAD33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.129.33.0/24 114.129.36.0-114.129.41.255 114.129.45.0-114.129.47.255 123.100.235.0-123.100.239.255 123.100.241.0/24 123.100.244.0/23 123.100.251.0-123.100.252.255 202.157.128.0-202.157.139.255 202.157.142.0/23 202.157.148.0/24 202.157.152.0/24 202.157.160.0/20 202.160.120.0/22 203.142.16.0-203.142.25.255 203.142.27.0/24 IPv6: 2404:4800::/46 2404:4800:20::/48 Signature Algorithm: sha256WithRSAEncryption 06:41:d6:25:cd:4b:d6:1d:8c:7a:c5:66:74:b1:39:ab:6b:1b: a4:2e:09:42:af:3f:75:fe:9c:b2:9b:f0:07:e8:fd:cb:1d:28: 8f:98:9a:92:33:17:90:47:4f:8e:e0:f2:b4:fc:72:38:cd:80: f6:a7:02:4d:37:7f:dc:8c:5f:00:ed:a8:bc:c3:40:41:21:ac: 3b:15:ee:28:0b:38:ce:72:14:e2:86:d1:0a:cc:b2:64:55:8e: 66:c9:37:83:14:d9:da:3d:b7:cd:70:ee:25:fd:0e:cf:ff:c9: ac:b5:ec:ae:c1:23:3d:bc:49:2c:82:a1:0b:cc:81:e6:46:ac: 7d:97:ab:86:9a:bb:19:54:b4:d6:a3:71:9b:73:3f:63:26:ee: 17:a5:22:14:29:2f:52:41:3a:02:ce:3d:70:00:25:e3:34:af: 6f:ba:a4:a0:db:5f:0e:fc:45:19:6f:1c:c6:7f:25:54:33:dd: d6:ec:b7:be:72:a3:c2:59:d6:83:bd:cb:f9:17:06:e4:3c:ab: f6:47:14:fe:8a:2a:f9:a5:e1:b1:e6:66:b1:bb:4c:b0:61:5d: 81:ac:7e:fc:32:e8:88:a7:c2:30:61:ab:41:2f:c3:85:8d:3e: 41:24:e0:87:fd:3f:cb:11:70:49:92:de:f1:96:f9:9c:12:69: bd:c0:28:fd -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgICNR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJDRkMxMTAvBgNVBAUTKDgwMjdFMEVGNTREMDBCNjFGNzEzNkYwOTcxOUJGQ0Y0 QzQ1MzM0MDUwHhcNMjUxMTA3MDQzNzUxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OTBkNzc5Zi1jMTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QcscTSdQuNEHPQgLPIwXi3RO8g12XyQfJxRM3CwyZ5HOTKF0V4G1HaHVsBJ 17bhZHXvLLBFQZyRZ6pDfJzvvB6POnRndEgfGsOKUE6AYW362Jsvip0Y+ydgMQkR BzjPdJygxMphch78FKd+24mHg/04EUubxx9ms4z7N4kARODfNvDrp53HqWRcL9KY Q6vD5TZv0n+v4W8cEUZ6Fn+F9AYunrQXrgAG7v34r1WpJYeFuzw7TffGzewXM79S mRreHKWEM9yqfsz7sUpLVuXGutoF5A+cHbh8sDmbmfM0pYmXLv+z3fS/RktbcPqj Fj9xl3Com3LaSoxzTF+mSDpplQIDAQABo4IDODCCAzQwHQYDVR0OBBYEFPKi3M3s Dh9cvLK2vGOQ2lzaifwRMB8GA1UdIwQYMBaAFIAn4O9U0Ath9xNvCXGb/PTEUzQF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkNGQy9CRjg0QjU3NDFE ODYxMUUyQTc2MzQ0REUwOEIwMkNEMi9nQ2ZnNzFUUUMySDNFMjhKY1p2ODlNUlRO QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDZmc3MVRRQzJIM0UyOEpjWnY4OU1SVE5BVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODJDRkMvQkY4NEI1NzQxRDg2MTFFMkE3NjM0NERFMDhCMDJDRDIvODRCQ0U4QkNC QjkzMTFGMDkwQkZBRDMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgcEGCCsGAQUFBwEHAQH/ BIGxMIGuMIGRBAIAATCBigMEAHKBITAMAwQCcoEkAwQBcoEoMAwDBABygS0DBARy gSAwDAMEAHtk6wMEBHtk4AMEAHtk8QMEAXtk9DAMAwQAe2T7AwQAe2T8MAwDBAfK nYADBALKnYgDBAHKnY4DBADKnZQDBADKnZgDBATKnaADBALKoHgwDAMEBMuOEAME AcuOGAMEAMuOGzAYBAIAAjASAwcCJARIAAAAAwcAJARIAAAgMA0GCSqGSIb3DQEB CwUAA4IBAQAGQdYlzUvWHYx6xWZ0sTmraxukLglCrz91/pyym/AH6P3LHSiPmJqS MxeQR0+O4PK0/HI4zYD2pwJNN3/cjF8A7ai8w0BBIaw7Fe4oCzjOchTihtEKzLJk VY5myTeDFNnaPbfNcO4l/Q7P/8msteyuwSM9vEksgqELzIHmRqx9l6uGmrsZVLTW o3Gbcz9jJu4XpSIUKS9SQToCzj1wACXjNK9vuqSg218O/EUZbxzGfyVUM93W7Le+ cqPCWdaDvcv5FwbkPKv2RxT+iir5peGx5maxu0ywYV2BrH78MuiIp8IwYatBL8OF jT5BJOCH/T/LEXBJkt7xlvmcEmm9wCj9 -----END CERTIFICATE-----Generated at Sun Dec 7 01:48:06 2025 by rpki-client