This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/493CABD04FEE11F0B866DF81C4F9AE02.roa File: 493CABD04FEE11F0B866DF81C4F9AE02.roa (raw, json) Hash identifier: SIqZByFacvV7QJBszq3I4KNn6FmjHo6sDMgTbKvof/I= Subject key identifier: 26:07:C3:33:60:BF:B3:77:C3:F1:9D:43:9E:34:B4:26:36:26:97:EC Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 0A68 Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/493CABD04FEE11F0B866DF81C4F9AE02.roa Signing time: Sat 08 Nov 2025 19:09:57 +0000 ROA not before: Sat 08 Nov 2025 19:09:57 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 4907 IP address blocks: 137.220.136.0/24 maxlen: 24 137.220.139.0/24 maxlen: 24 137.220.140.0/24 maxlen: 24 137.220.150.0/24 maxlen: 24 137.220.151.0/24 maxlen: 24 137.220.152.0/24 maxlen: 24 137.220.153.0/24 maxlen: 24 137.220.154.0/24 maxlen: 24 137.220.155.0/24 maxlen: 24 137.220.156.0/24 maxlen: 24 137.220.157.0/24 maxlen: 24 137.220.158.0/24 maxlen: 24 137.220.164.0/24 maxlen: 24 137.220.165.0/24 maxlen: 24 137.220.166.0/24 maxlen: 24 137.220.172.0/24 maxlen: 24 137.220.178.0/24 maxlen: 24 137.220.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2664 (0xa68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: Nov 8 19:09:57 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690f9585-82c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7d:ad:f4:1c:82:98:23:dd:e9:7a:0a:6a:c5: fd:23:91:30:64:b6:6b:b1:5f:3e:6d:13:3b:f1:a2: 65:1b:e6:84:b7:6e:c7:43:c9:f4:4e:53:64:08:86: 06:30:f7:4e:28:47:51:33:d0:47:79:cc:fb:03:e3: 52:fd:27:8a:84:53:b4:ce:71:ca:2a:3a:c1:15:5f: 77:96:b2:08:dd:9e:01:a0:bf:4c:0a:40:f2:08:da: b8:80:c7:a2:91:2f:42:33:c3:b4:e7:11:82:ba:5f: d7:71:af:1b:ee:a4:d3:ef:ca:56:6d:df:c1:6c:0b: 46:6e:09:9f:93:f5:7b:da:9a:15:e7:72:b9:31:df: d9:5c:11:ff:c7:b1:38:8e:b2:39:44:6c:5e:d7:bf: 58:eb:cb:18:cc:95:d6:57:e1:78:41:e1:be:25:4b: 49:d3:92:75:9b:1a:9b:52:ab:79:f0:d6:1a:cd:c5: 10:21:8a:0c:47:99:28:0a:f3:31:fd:cc:a2:85:f8: 53:9c:43:59:42:50:a1:f9:56:68:ee:fe:f2:df:1b: 85:24:8f:55:95:4b:79:aa:d9:cd:a4:c5:00:fa:12: 21:3e:11:07:e1:4b:fe:43:2c:45:fd:50:96:71:c8: 52:56:dc:fe:53:22:00:c4:57:80:f9:48:44:f2:58: e6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:07:C3:33:60:BF:B3:77:C3:F1:9D:43:9E:34:B4:26:36:26:97:EC X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/493CABD04FEE11F0B866DF81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 137.220.136.0/24 137.220.139.0-137.220.140.255 137.220.150.0-137.220.158.255 137.220.164.0-137.220.166.255 137.220.172.0/24 137.220.178.0/23 Signature Algorithm: sha256WithRSAEncryption a5:2c:51:9b:0c:3e:a7:1a:d6:b3:cc:9d:bb:8c:f9:93:39:3a: 6b:bd:bf:a0:af:f9:17:5c:0c:c3:2c:9c:1b:d8:51:6c:9a:8e: 6a:b6:3a:57:9c:19:3b:ff:8a:2b:61:c5:5f:1d:72:d6:a7:2a: dd:6b:98:60:94:04:a2:d5:40:05:80:03:8c:8d:a0:2a:c9:8f: e0:94:bc:15:60:0b:0a:2f:99:c4:b4:91:dc:cb:73:84:d4:ef: c3:13:0a:cd:eb:0f:9d:0d:2a:46:8f:73:7a:c4:4e:ba:20:07: c4:21:4f:ee:99:e4:b2:98:27:50:1e:ac:d8:ae:4c:d5:fd:1e: 59:a8:fe:ca:53:dd:d9:7a:dc:8a:d4:e7:f0:73:2c:ae:00:8c: 0b:cc:39:6e:26:f5:52:fb:80:c2:9e:bb:e5:fc:7d:3f:eb:af: 6a:a7:d6:c3:b9:a9:02:a1:af:04:0d:c7:92:b7:c0:8b:3f:05: 85:d9:f2:f5:23:86:b0:3f:90:e9:7d:0c:f1:54:57:d0:33:fe: 6b:75:3f:47:b0:70:75:ae:72:56:7c:bd:22:7e:59:27:36:6e: fc:e6:1a:6a:83:f0:01:c7:ef:c5:eb:d6:70:9a:c5:9d:7d:47: 20:e4:30:1d:9f:da:83:f3:86:3b:35:4b:25:19:f0:15:3a:c7: 18:0b:f2:38 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgICCmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjUxMTA4MTkwOTU3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBmOTU4NS04MmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwX2t9ByCmCPd6XoKasX9I5EwZLZrsV8+bRM78aJlG+aEt27HQ8n0TlNkCIYG MPdOKEdRM9BHecz7A+NS/SeKhFO0znHKKjrBFV93lrII3Z4BoL9MCkDyCNq4gMei kS9CM8O05xGCul/Xca8b7qTT78pWbd/BbAtGbgmfk/V72poV53K5Md/ZXBH/x7E4 jrI5RGxe179Y68sYzJXWV+F4QeG+JUtJ05J1mxqbUqt58NYazcUQIYoMR5koCvMx /cyihfhTnENZQlCh+VZo7v7y3xuFJI9VlUt5qtnNpMUA+hIhPhEH4Uv+QyxF/VCW cchSVtz+UyIAxFeA+UhE8ljmKwIDAQABo4ICyzCCAscwHQYDVR0OBBYEFCYHwzNg v7N3w/GdQ540tCY2JpfsMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEM2NjEvMDRBQUIyOUU4MzZEMTFFQUI0QTJENzZEQzRGOUFFMDIvNDkzQ0FCRDA0 RkVFMTFGMEI4NjZERjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVQYIKwYBBQUHAQcBAf8E RjBEMEIEAgABMDwDBACJ3IgwDAMEAInciwMEAIncjDAMAwQBidyWAwQAidyeMAwD BAKJ3KQDBACJ3KYDBACJ3KwDBAGJ3LIwDQYJKoZIhvcNAQELBQADggEBAKUsUZsM Pqca1rPMnbuM+ZM5Omu9v6Cv+RdcDMMsnBvYUWyajmq2OlecGTv/iithxV8dctan Kt1rmGCUBKLVQAWAA4yNoCrJj+CUvBVgCwovmcS0kdzLc4TU78MTCs3rD50NKkaP c3rETrogB8QhT+6Z5LKYJ1AerNiuTNX9Hlmo/spT3dl63IrU5/BzLK4AjAvMOW4m 9VL7gMKeu+X8fT/rr2qn1sO5qQKhrwQNx5K3wIs/BYXZ8vUjhrA/kOl9DPFUV9Az /mt1P0ewcHWuclZ8vSJ+WSc2bvzmGmqD8AHH78Xr1nCaxZ19RyDkMB2f2oPzhjs1 SyUZ8BU6xxgL8jg= -----END CERTIFICATE-----Generated at Sat Dec 6 22:58:49 2025 by rpki-client