This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15352DE2F5D111F0A34CD21C486F56BC.roa File: 15352DE2F5D111F0A34CD21C486F56BC.roa (raw, json) Hash identifier: P+9tK/HLfaZ2fOsLVcY73lFU+iCyuu/FP4S1B/zZ3f0= Subject key identifier: 63:FC:0B:19:76:43:24:4A:77:C5:A9:14:A0:03:B6:EF:A1:4C:DB:EC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: CE2A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15352DE2F5D111F0A34CD21C486F56BC.roa Signing time: Tue 20 Jan 2026 07:49:24 +0000 ROA not before: Tue 20 Jan 2026 07:49:23 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132116 IP address blocks: 27.123.240.0/22 maxlen: 24 43.230.148.0/22 maxlen: 24 43.247.40.0/24 maxlen: 24 43.247.41.0/24 maxlen: 24 43.247.42.0/24 maxlen: 24 43.247.43.0/24 maxlen: 24 43.248.152.0/22 maxlen: 24 43.248.240.0/22 maxlen: 24 43.251.92.0/22 maxlen: 23 43.251.92.0/24 maxlen: 24 43.251.93.0/24 maxlen: 24 43.251.94.0/24 maxlen: 24 43.251.95.0/24 maxlen: 24 45.120.160.0/22 maxlen: 24 45.248.0.0/22 maxlen: 24 45.248.172.0/22 maxlen: 24 103.16.28.0/24 maxlen: 24 103.16.29.0/24 maxlen: 24 103.16.30.0/24 maxlen: 24 103.16.31.0/24 maxlen: 24 103.28.252.0/22 maxlen: 24 103.40.200.0/22 maxlen: 24 103.43.32.0/22 maxlen: 24 103.55.60.0/22 maxlen: 24 103.68.20.0/24 maxlen: 24 103.68.22.0/24 maxlen: 24 103.68.23.0/24 maxlen: 24 103.68.140.0/23 maxlen: 24 103.69.24.0/24 maxlen: 24 103.69.25.0/24 maxlen: 24 103.69.26.0/24 maxlen: 24 103.69.27.0/24 maxlen: 24 103.69.244.0/22 maxlen: 24 103.70.80.0/24 maxlen: 24 103.70.81.0/24 maxlen: 24 103.70.82.0/24 maxlen: 24 103.70.83.0/24 maxlen: 24 103.91.73.0/24 maxlen: 24 103.91.74.0/24 maxlen: 24 103.94.83.0/24 maxlen: 24 103.100.4.0/22 maxlen: 24 103.102.147.0/24 maxlen: 24 103.103.55.0/24 maxlen: 24 103.105.96.0/24 maxlen: 24 103.106.28.0/22 maxlen: 24 103.124.120.0/23 maxlen: 24 103.153.12.0/24 maxlen: 24 103.154.8.0/23 maxlen: 24 103.164.141.0/24 maxlen: 24 103.165.88.0/23 maxlen: 24 103.165.102.0/23 maxlen: 24 103.167.154.0/23 maxlen: 24 103.167.182.0/23 maxlen: 24 103.167.224.0/23 maxlen: 24 103.167.238.0/23 maxlen: 24 103.168.60.0/23 maxlen: 24 103.169.242.0/24 maxlen: 24 103.169.243.0/24 maxlen: 24 103.170.38.0/23 maxlen: 24 103.170.52.0/23 maxlen: 24 103.170.84.0/23 maxlen: 24 103.183.86.0/23 maxlen: 24 103.190.8.0/24 maxlen: 24 103.190.9.0/24 maxlen: 24 103.192.64.0/24 maxlen: 24 103.192.66.0/24 maxlen: 24 103.192.67.0/24 maxlen: 24 103.198.172.0/22 maxlen: 24 103.216.140.0/22 maxlen: 24 103.217.132.0/22 maxlen: 24 103.224.144.0/22 maxlen: 24 103.225.188.0/22 maxlen: 24 103.248.92.0/22 maxlen: 24 103.248.172.0/22 maxlen: 24 119.42.56.0/22 maxlen: 24 157.119.80.0/22 maxlen: 24 163.53.84.0/22 maxlen: 24 180.149.225.0/24 maxlen: 24 180.149.226.0/24 maxlen: 24 180.149.227.0/24 maxlen: 24 2001:df3:6ec0::/48 maxlen: 48 2405:e100::/48 maxlen: 48 2405:e100:1::/48 maxlen: 48 2405:e100:2::/48 maxlen: 48 2405:e100:3::/48 maxlen: 48 2405:e100:9::/48 maxlen: 48 2405:e100:d::/48 maxlen: 48 2405:e100:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52778 (0xce2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 20 07:49:23 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=696f3383-5e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:13:28:59:ba:2f:84:7c:4e:b5:f6:d9:b9:4c: f8:77:21:86:51:f4:39:ef:e1:9f:92:b7:8c:cf:56: 74:7d:ba:5f:f3:8e:bd:e5:78:b7:f5:73:b4:60:59: 13:36:f6:ea:7a:9a:30:9b:7e:0c:aa:b4:7d:4c:8c: 5e:a3:df:c2:53:87:8a:8b:a4:d8:9f:e0:27:62:ce: d7:5a:08:02:c6:ff:91:c6:ff:d3:ba:6d:5d:51:31: 51:26:f4:5e:79:91:3e:5b:09:06:ad:62:ad:e9:a7: e2:c1:c4:82:f4:de:4f:d5:2f:41:43:e3:42:9f:63: 45:04:cf:7f:6a:dd:c5:57:88:3d:47:9a:93:27:8e: 06:46:f0:fa:e6:30:2f:1f:2f:e4:3f:e1:be:be:ec: 77:59:19:c5:b5:22:5d:59:db:e6:ee:62:11:6d:f6: f3:09:c0:f7:b9:e7:ef:36:bc:b2:25:86:c0:04:87: 14:5d:48:5b:d5:b8:62:9a:0c:7a:44:4d:5c:8f:75: cc:1f:61:90:d6:b5:3a:5b:a1:d5:ed:ad:af:67:d8: 17:b9:93:3a:06:63:1e:3b:81:19:56:7f:7e:f4:e4: 21:3c:2a:59:5b:41:50:43:94:88:d3:ce:63:36:d3: ee:fc:eb:f8:b6:91:5c:28:8a:ed:9a:64:9e:3f:cf: 1d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FC:0B:19:76:43:24:4A:77:C5:A9:14:A0:03:B6:EF:A1:4C:DB:EC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15352DE2F5D111F0A34CD21C486F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.123.240.0/22 43.230.148.0/22 43.247.40.0/22 43.248.152.0/22 43.248.240.0/22 43.251.92.0/22 45.120.160.0/22 45.248.0.0/22 45.248.172.0/22 103.16.28.0/22 103.28.252.0/22 103.40.200.0/22 103.43.32.0/22 103.55.60.0/22 103.68.20.0/24 103.68.22.0/23 103.68.140.0/23 103.69.24.0/22 103.69.244.0/22 103.70.80.0/22 103.91.73.0-103.91.74.255 103.94.83.0/24 103.100.4.0/22 103.102.147.0/24 103.103.55.0/24 103.105.96.0/24 103.106.28.0/22 103.124.120.0/23 103.153.12.0/24 103.154.8.0/23 103.164.141.0/24 103.165.88.0/23 103.165.102.0/23 103.167.154.0/23 103.167.182.0/23 103.167.224.0/23 103.167.238.0/23 103.168.60.0/23 103.169.242.0/23 103.170.38.0/23 103.170.52.0/23 103.170.84.0/23 103.183.86.0/23 103.190.8.0/23 103.192.64.0/24 103.192.66.0/23 103.198.172.0/22 103.216.140.0/22 103.217.132.0/22 103.224.144.0/22 103.225.188.0/22 103.248.92.0/22 103.248.172.0/22 119.42.56.0/22 157.119.80.0/22 163.53.84.0/22 180.149.225.0-180.149.227.255 IPv6: 2001:df3:6ec0::/48 2405:e100::/46 2405:e100:9::/48 2405:e100:d::-2405:e100:e:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 75:4f:50:cf:fc:60:30:2a:1f:ac:d7:a1:d8:29:cd:b9:1a:0e: a7:2a:c3:dd:54:17:64:66:15:c6:f3:3a:14:7e:4d:14:bb:ec: 33:81:2a:bf:e6:02:20:c2:0a:67:56:14:53:d0:e1:57:92:95: 0d:75:0f:93:8e:a2:0b:53:18:9a:55:ec:d5:d0:77:54:c9:48: 72:de:3e:5f:5b:5b:a0:dd:52:76:96:82:68:24:1c:f7:26:4e: 46:ad:09:92:0f:e3:cc:9b:dc:02:ef:93:e5:0d:67:14:35:b6: 7a:8f:71:69:4c:19:4e:a9:71:78:07:ef:8e:33:5f:65:4e:53: 31:5a:d7:4d:1a:d4:ce:a5:8c:5b:2d:c3:24:1f:e6:fd:06:b4: 89:ae:39:45:f3:dc:f8:b2:48:04:57:70:3f:b1:23:e6:85:3a: 78:b5:9a:de:a0:10:b3:41:80:f2:4a:78:48:da:d6:2b:36:c9: b4:11:78:20:72:82:e9:6b:b9:47:63:41:31:af:b4:31:b9:a4: 0c:58:ee:67:6f:43:d0:93:be:91:71:d9:d5:1b:3b:5d:d2:07: 9b:02:e8:d4:4d:a5:55:9b:ef:1a:b2:5c:ed:60:36:84:fb:12: 81:74:fb:bf:24:d0:5b:1f:50:3f:a8:7b:92:f1:bf:dc:67:5d: 6f:97:a6:bf -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIDAM4qMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDEyMDA3NDkyM1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAwwNNjk2ZjMzODMtNWUzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUTKFm6L4R8TrX22blM+HchhlH0Oe/hn5K3jM9WdH26X/OOveV4t/VztGBZ Ezb26nqaMJt+DKq0fUyMXqPfwlOHiouk2J/gJ2LO11oIAsb/kcb/07ptXVExUSb0 XnmRPlsJBq1iremn4sHEgvTeT9UvQUPjQp9jRQTPf2rdxVeIPUeakyeOBkbw+uYw Lx8v5D/hvr7sd1kZxbUiXVnb5u5iEW328wnA97nn7za8siWGwASHFF1IW9W4YpoM ekRNXI91zB9hkNa1Oluh1e2tr2fYF7mTOgZjHjuBGVZ/fvTkITwqWVtBUEOUiNPO YzbT7vzr+LaRXCiK7Zpknj/PHWcCAwEAAaOCBDYwggQyMB0GA1UdDgQWBBRj/AsZ dkMkSnfFqRSgA7bvoUzb7DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE1MzUyREUy RjVEMTExRjBBMzRDRDIxQzQ4NkY1NkJDLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIBvgYIKwYBBQUHAQcB Af8EggGtMIIBqTCCAW4EAgABMIIBZgMEAht78AMEAivmlAMEAiv3KAMEAiv4mAME Aiv48AMEAiv7XAMEAi14oAMEAi34AAMEAi34rAMEAmcQHAMEAmcc/AMEAmcoyAME AmcrIAMEAmc3PAMEAGdEFAMEAWdEFgMEAWdEjAMEAmdFGAMEAmdF9AMEAmdGUDAM AwQAZ1tJAwQAZ1tKAwQAZ15TAwQCZ2QEAwQAZ2aTAwQAZ2c3AwQAZ2lgAwQCZ2oc AwQBZ3x4AwQAZ5kMAwQBZ5oIAwQAZ6SNAwQBZ6VYAwQBZ6VmAwQBZ6eaAwQBZ6e2 AwQBZ6fgAwQBZ6fuAwQBZ6g8AwQBZ6nyAwQBZ6omAwQBZ6o0AwQBZ6pUAwQBZ7dW AwQBZ74IAwQAZ8BAAwQBZ8BCAwQCZ8asAwQCZ9iMAwQCZ9mEAwQCZ+CQAwQCZ+G8 AwQCZ/hcAwQCZ/isAwQCdyo4AwQCnXdQAwQCozVUMAwDBAC0leEDBAK0leAwNQQC AAIwLwMHACABDfNuwAMHAiQF4QAAAAMHACQF4QAACTASAwcAJAXhAAANAwcAJAXh AAAOMA0GCSqGSIb3DQEBCwUAA4IBAQB1T1DP/GAwKh+s16HYKc25Gg6nKsPdVBdk ZhXG8zoUfk0Uu+wzgSq/5gIgwgpnVhRT0OFXkpUNdQ+TjqILUxiaVezV0HdUyUhy 3j5fW1ug3VJ2loJoJBz3Jk5GrQmSD+PMm9wC75PlDWcUNbZ6j3FpTBlOqXF4B++O M19lTlMxWtdNGtTOpYxbLcMkH+b9BrSJrjlF89z4skgEV3A/sSPmhTp4tZreoBCz QYDySnhI2tYrNsm0EXggcoLpa7lHY0Exr7QxuaQMWO5nb0PQk76RcdnVGztd0geb AujUTaVVm+8aslztYDaE+xKBdPu/JNBbH1A/qHuS8b/cZ11vl6a/ -----END CERTIFICATE-----Generated at Sun Jan 25 04:24:09 2026 by rpki-client