This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/A8EB70C0C52D11F09789F47BC4F9AE02.roa File: A8EB70C0C52D11F09789F47BC4F9AE02.roa (raw, json) Hash identifier: vwZIGcuT/wdsi2ov5n4aKBIuwaWae+4rjnxU5e55BsU= Subject key identifier: 5C:B9:BF:1B:49:7D:32:10:34:19:ED:4F:12:8F:33:9A:45:0C:E7:C3 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 057B Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/A8EB70C0C52D11F09789F47BC4F9AE02.roa Signing time: Wed 19 Nov 2025 09:53:55 +0000 ROA not before: Wed 19 Nov 2025 09:53:55 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 64022 IP address blocks: 45.126.124.0/24 maxlen: 24 45.126.125.0/24 maxlen: 24 45.126.126.0/24 maxlen: 24 45.126.127.0/24 maxlen: 24 103.102.44.0/24 maxlen: 24 103.102.45.0/24 maxlen: 24 103.102.47.0/24 maxlen: 24 103.195.4.0/24 maxlen: 24 103.195.5.0/24 maxlen: 24 103.195.6.0/24 maxlen: 24 103.195.7.0/24 maxlen: 24 103.252.116.0/24 maxlen: 24 103.252.117.0/24 maxlen: 24 103.252.118.0/24 maxlen: 24 103.252.119.0/24 maxlen: 24 114.29.236.0/24 maxlen: 24 114.29.237.0/24 maxlen: 24 114.29.238.0/24 maxlen: 24 2401:df40:1::/48 maxlen: 48 2402:da80:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1403 (0x57b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Nov 19 09:53:55 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=691d93b2-76b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:77:06:71:ed:67:ee:ac:97:23:98:bf:57:3b: 35:8c:cb:62:b9:66:15:27:fc:01:2c:d7:07:48:23: cc:89:3a:67:1a:eb:27:d7:ad:9e:cd:2d:69:1c:a7: ab:f2:c4:5f:84:35:c6:4e:1c:19:66:9d:47:22:a6: 6b:75:e3:d4:53:06:b8:55:48:22:e3:34:4f:93:84: 5c:3e:97:80:c8:a1:64:41:66:be:b8:40:e3:2f:d2: 9d:d9:fc:3d:21:fe:24:79:85:b5:76:39:03:40:09: 16:d3:9e:eb:a1:0c:d0:80:ff:6f:c0:93:8c:56:81: dd:e7:ab:6e:49:e2:4d:b1:e3:14:a5:c4:39:9d:6e: 72:c7:eb:a0:a6:be:19:c3:be:0f:e1:3f:e0:eb:6e: 5c:21:3e:55:2e:d8:6d:22:1a:70:e7:a0:79:27:ed: 33:b6:2b:fb:6b:6e:c1:0b:4e:ce:06:41:52:0c:ea: f0:3b:16:1b:4d:f6:fc:50:47:8f:1b:09:9d:cd:6c: bf:93:a5:d2:f8:eb:14:3e:ff:12:27:83:fb:f9:28: ee:66:02:49:84:8b:b4:b7:3c:f0:d6:47:b1:5e:18: 11:d8:ac:35:67:d0:06:81:f1:20:00:a3:38:16:ea: ad:44:e0:d5:97:c2:b8:ab:93:75:46:f6:e5:55:79: ee:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B9:BF:1B:49:7D:32:10:34:19:ED:4F:12:8F:33:9A:45:0C:E7:C3 X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/A8EB70C0C52D11F09789F47BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.126.124.0/22 103.102.44.0/23 103.102.47.0/24 103.195.4.0/22 103.252.116.0/22 114.29.236.0-114.29.238.255 IPv6: 2401:df40:1::/48 2402:da80:100::/48 Signature Algorithm: sha256WithRSAEncryption ab:ed:d4:ca:81:5e:f7:88:85:3e:d8:0b:4e:41:5e:04:9c:c3: 7b:83:50:5b:c9:fd:26:bc:57:4e:55:c1:0c:82:1d:b0:18:d3: 81:36:f7:00:88:bc:80:7f:0b:96:b8:fc:01:ff:6b:07:30:44: ec:bb:c3:ec:c6:82:d2:65:c9:8d:57:4d:01:37:2b:0e:2c:1e: 82:27:15:b2:ee:75:d0:05:92:59:96:85:7b:db:aa:29:c8:76: 51:d6:f6:e5:d9:e5:bb:5a:b4:4f:57:a9:ac:59:b2:a1:0e:9a: f8:02:cd:db:85:35:84:2e:b6:f1:fc:33:a5:38:e8:8f:04:44: 98:a0:20:18:e4:7d:79:29:be:24:41:48:c1:fb:4d:37:70:45: b9:41:7d:e3:19:c3:3f:fb:be:f3:95:72:b6:90:f3:47:40:4c: 5d:da:99:f2:b2:45:3c:c6:a6:44:69:a4:7f:55:8b:88:a5:d0: 60:df:89:9a:c1:a7:c5:a3:0a:24:16:b7:3e:9c:9d:65:a6:fe: 4f:5d:b8:6a:37:9d:2d:27:78:7d:38:87:ba:14:44:2f:d0:e9: 6c:b9:c1:f1:9e:13:3a:17:ce:b3:8f:b9:bd:19:c1:d7:40:ec: e4:68:b2:6b:da:63:9a:36:77:9e:2e:7d:51:3a:85:7e:de:1d: b3:3a:5e:79 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgICBXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjUxMTE5MDk1MzU1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFkOTNiMi03NmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXcGce1n7qyXI5i/Vzs1jMtiuWYVJ/wBLNcHSCPMiTpnGusn162ezS1pHKer 8sRfhDXGThwZZp1HIqZrdePUUwa4VUgi4zRPk4RcPpeAyKFkQWa+uEDjL9Kd2fw9 If4keYW1djkDQAkW057roQzQgP9vwJOMVoHd56tuSeJNseMUpcQ5nW5yx+ugpr4Z w74P4T/g625cIT5VLthtIhpw56B5J+0ztiv7a27BC07OBkFSDOrwOxYbTfb8UEeP GwmdzWy/k6XS+OsUPv8SJ4P7+SjuZgJJhIu0tzzw1kexXhgR2Kw1Z9AGgfEgAKM4 FuqtRODVl8K4q5N1RvblVXnuDQIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFFy5vxtJ fTIQNBntTxKPM5pFDOfDMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU0QjcvRUIzMTJGMDIxRUFBMTFFQ0I3NTZCRjMwQzRGOUFFMDIvQThFQjcwQzBD NTJEMTFGMDk3ODlGNDdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXwYIKwYBBQUHAQcBAf8E UDBOMDIEAgABMCwDBAItfnwDBAFnZiwDBABnZi8DBAJnwwQDBAJn/HQwDAMEAnId 7AMEAHId7jAYBAIAAjASAwcAJAHfQAABAwcAJALagAEAMA0GCSqGSIb3DQEBCwUA A4IBAQCr7dTKgV73iIU+2AtOQV4EnMN7g1Bbyf0mvFdOVcEMgh2wGNOBNvcAiLyA fwuWuPwB/2sHMETsu8PsxoLSZcmNV00BNysOLB6CJxWy7nXQBZJZloV726opyHZR 1vbl2eW7WrRPV6msWbKhDpr4As3bhTWELrbx/DOlOOiPBESYoCAY5H15Kb4kQUjB +003cEW5QX3jGcM/+77zlXK2kPNHQExd2pnyskU8xqZEaaR/VYuIpdBg34mawafF owokFrc+nJ1lpv5PXbhqN50tJ3h9OIe6FEQv0OlsucHxnhM6F86zj7m9GcHXQOzk aLJr2mOaNneeLn1ROoV+3h2zOl55 -----END CERTIFICATE-----Generated at Sat Dec 6 17:47:50 2025 by rpki-client