This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/B8D18508EDE011EF88407251C4F9AE02.roa File: B8D18508EDE011EF88407251C4F9AE02.roa (raw, json) Hash identifier: hQatOvTRlWcPgRC3V8TR5lAol6xY99LUllDa1PgoJQw= Subject key identifier: 4B:9B:14:13:BA:12:C6:43:B4:D0:38:15:D1:26:A5:B2:28:4A:3B:BB Certificate issuer: /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Certificate serial: 0ADA Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/B8D18508EDE011EF88407251C4F9AE02.roa Signing time: Sat 08 Nov 2025 19:10:05 +0000 ROA not before: Sat 08 Nov 2025 19:10:05 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 64050 IP address blocks: 1.32.192.0/18 maxlen: 24 14.128.32.0/19 maxlen: 24 27.50.48.0/20 maxlen: 24 27.124.0.0/18 maxlen: 24 103.200.200.0/22 maxlen: 24 118.107.0.0/18 maxlen: 19 118.107.0.0/19 maxlen: 23 118.107.0.0/22 maxlen: 24 118.107.4.0/24 maxlen: 24 118.107.6.0/23 maxlen: 24 118.107.8.0/21 maxlen: 24 118.107.16.0/20 maxlen: 24 118.107.32.0/20 maxlen: 24 118.107.56.0/21 maxlen: 24 118.107.176.0/22 maxlen: 24 180.222.204.0/22 maxlen: 24 182.173.70.0/24 maxlen: 24 202.36.48.0/20 maxlen: 24 202.61.128.0/18 maxlen: 24 202.79.160.0/20 maxlen: 24 202.95.0.0/22 maxlen: 24 202.95.4.0/22 maxlen: 24 202.95.8.0/21 maxlen: 24 202.95.16.0/20 maxlen: 24 202.162.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2778 (0xada) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Validity Not Before: Nov 8 19:10:05 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690f958d-0ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:48:0a:c8:ad:d8:02:bf:88:3b:53:ff:fd:cd: b4:15:83:eb:2e:ca:58:14:cb:74:2f:5c:ac:2b:0f: 00:7b:b8:df:16:67:ad:d6:23:42:66:67:1f:24:71: 84:d3:4c:32:75:42:51:83:1f:fb:d8:8c:7e:5b:f7: 27:65:62:3d:4e:57:f6:ee:e9:a6:61:31:90:9c:17: 04:cd:44:0c:84:06:88:1a:6e:97:a6:f9:30:6d:36: 92:71:2c:ee:11:55:f8:ba:9a:7a:ba:47:1e:3f:53: 6d:7b:ef:07:66:91:5c:67:e4:96:45:29:04:d7:f4: db:76:b6:da:f9:17:c6:04:28:3d:02:76:dd:bd:e4: f1:d7:d8:e5:43:c8:0f:dc:b0:44:2f:a9:64:70:eb: 37:44:84:12:d7:97:f2:c3:6d:22:3d:e6:c3:15:46: 95:59:22:3d:f6:78:01:95:66:d2:dc:a0:b9:82:b7: 12:ae:7b:87:e5:a9:14:53:9a:4e:c6:d2:e6:dd:5d: 52:67:b8:ea:6b:db:e9:c8:1f:f3:75:94:65:e4:6c: 89:01:4c:57:58:b9:45:38:50:ab:b8:a3:be:ee:53: a1:b8:52:9d:89:de:b7:71:bd:9d:6d:a5:e6:d2:b0: bd:a6:66:48:e4:3e:c7:2c:02:19:57:28:a2:ac:10: 2c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9B:14:13:BA:12:C6:43:B4:D0:38:15:D1:26:A5:B2:28:4A:3B:BB X509v3 Authority Key Identifier: keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/B8D18508EDE011EF88407251C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.32.192.0/18 14.128.32.0/19 27.50.48.0/20 27.124.0.0/18 103.200.200.0/22 118.107.0.0/18 118.107.176.0/22 180.222.204.0/22 182.173.70.0/24 202.36.48.0/20 202.61.128.0/18 202.79.160.0/20 202.95.0.0/19 202.162.96.0/20 Signature Algorithm: sha256WithRSAEncryption 0f:1d:76:38:80:2e:ff:57:2e:e7:d5:8e:64:12:0a:be:19:06: d8:bb:b1:49:aa:5b:d4:8c:d9:25:bb:12:61:54:bc:c1:6d:c5: 2a:79:d6:07:aa:3e:3b:b9:2f:e2:d3:f9:19:3e:6c:19:81:1e: ad:12:6d:63:f9:4b:27:2c:65:80:74:54:e9:71:ae:60:55:58: 01:48:23:53:34:81:b8:10:41:8a:e1:5c:fe:28:55:56:62:6e: 07:39:6e:bd:87:fb:7a:a2:8e:75:59:84:5d:f9:12:63:2b:57: 14:29:fa:4b:1a:dd:30:33:03:e9:4f:0f:51:79:43:1d:fd:36: 09:f0:ae:15:da:00:67:1a:52:9e:1e:10:e3:25:6b:86:96:d5: cf:7a:17:4c:08:ba:44:16:1f:31:af:b3:8f:cb:12:b9:f0:c3: 3a:1a:65:96:48:6f:f7:70:75:25:de:6d:74:83:6a:0b:ad:57: 06:2c:1e:77:7d:d7:61:70:67:c9:91:6a:39:4c:0a:9e:d8:71: 01:f3:76:cf:19:c7:75:77:41:76:34:c2:0d:f3:82:e3:88:1e: ea:3c:96:c3:c8:09:2a:f0:76:19:ff:28:a0:e1:8b:6f:57:e6: 6a:3e:77:2c:2a:3d:58:d3:a9:23:53:9e:92:fa:09:08:71:92: 38:e8:72:77 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgICCtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDFFQzQyQzFCNjlFMTZGNUYzN0M3M0Q4MUJGOUZBQjFG NEJBNDIzMjkwHhcNMjUxMTA4MTkxMDA1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBmOTU4ZC0wY2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEgKyK3YAr+IO1P//c20FYPrLspYFMt0L1ysKw8Ae7jfFmet1iNCZmcfJHGE 00wydUJRgx/72Ix+W/cnZWI9Tlf27ummYTGQnBcEzUQMhAaIGm6XpvkwbTaScSzu EVX4upp6ukceP1Nte+8HZpFcZ+SWRSkE1/Tbdrba+RfGBCg9AnbdveTx19jlQ8gP 3LBEL6lkcOs3RIQS15fyw20iPebDFUaVWSI99ngBlWbS3KC5grcSrnuH5akUU5pO xtLm3V1SZ7jqa9vpyB/zdZRl5GyJAUxXWLlFOFCruKO+7lOhuFKdid63cb2dbaXm 0rC9pmZI5D7HLAIZVyiirBAswwIDAQABo4IC4zCCAt8wHQYDVR0OBBYEFEubFBO6 EsZDtNA4FdEmpbIoSju7MB8GA1UdIwQYMBaAFB7ELBtp4W9fN8c9gb+fqx9LpCMp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wQkJEOUVBMjgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIxODN4ejJCdjUtckgwdWtJ eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hzUXNHMm5oYjE4M3h6MkJ2NS1ySDB1a0l5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEM2NjEvMEJCRDlFQTI4MzZEMTFFQUI0QTJENzZEQzRGOUFFMDIvQjhEMTg1MDhF REUwMTFFRjg4NDA3MjUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbQYIKwYBBQUHAQcBAf8E XjBcMFoEAgABMFQDBAYBIMADBAUOgCADBAQbMjADBAYbfAADBAJnyMgDBAZ2awAD BAJ2a7ADBAK03swDBAC2rUYDBATKJDADBAbKPYADBATKT6ADBAXKXwADBATKomAw DQYJKoZIhvcNAQELBQADggEBAA8ddjiALv9XLufVjmQSCr4ZBti7sUmqW9SM2SW7 EmFUvMFtxSp51geqPju5L+LT+Rk+bBmBHq0SbWP5SycsZYB0VOlxrmBVWAFII1M0 gbgQQYrhXP4oVVZibgc5br2H+3qijnVZhF35EmMrVxQp+ksa3TAzA+lPD1F5Qx39 NgnwrhXaAGcaUp4eEOMla4aW1c96F0wIukQWHzGvs4/LErnwwzoaZZZIb/dwdSXe bXSDagutVwYsHnd912FwZ8mRajlMCp7YcQHzds8Zx3V3QXY0wg3zguOIHuo8lsPI CSrwdhn/KKDhi29X5mo+dywqPVjTqSNTnpL6CQhxkjjocnc= -----END CERTIFICATE-----Generated at Sat Dec 6 23:45:30 2025 by rpki-client