This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9601C2BCC51311F0A146A487C4F9AE02.roa File: 9601C2BCC51311F0A146A487C4F9AE02.roa (raw, json) Hash identifier: ZPK84EEe+HCxUzVJEAGUODROaj8P1sKD7RM/CoMFYzU= Subject key identifier: BC:A8:2D:A8:FE:0E:C6:CB:7E:11:2C:32:CA:A0:D7:DA:20:E1:3A:1E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C9BA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9601C2BCC51311F0A146A487C4F9AE02.roa Signing time: Sat 06 Dec 2025 10:44:48 +0000 ROA not before: Sat 06 Dec 2025 10:44:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137085 IP address blocks: 27.123.240.0/23 maxlen: 24 43.225.248.0/22 maxlen: 24 43.228.164.0/23 maxlen: 24 103.37.98.0/23 maxlen: 24 103.40.200.0/22 maxlen: 24 103.54.27.0/24 maxlen: 24 103.68.21.0/24 maxlen: 24 103.68.140.0/23 maxlen: 24 103.69.239.0/24 maxlen: 24 103.72.196.0/24 maxlen: 24 103.91.72.0/24 maxlen: 24 103.91.73.0/24 maxlen: 24 103.91.74.0/24 maxlen: 24 103.91.75.0/24 maxlen: 24 103.91.76.0/22 maxlen: 24 103.92.107.0/24 maxlen: 24 103.93.39.0/24 maxlen: 24 103.100.4.0/24 maxlen: 24 103.101.112.0/22 maxlen: 24 103.113.110.0/23 maxlen: 24 103.120.108.0/24 maxlen: 24 103.120.152.0/24 maxlen: 24 103.120.153.0/24 maxlen: 24 103.124.174.0/24 maxlen: 24 103.138.9.0/24 maxlen: 24 103.139.143.0/24 maxlen: 24 103.154.8.0/23 maxlen: 24 103.154.56.0/23 maxlen: 24 103.155.237.0/24 maxlen: 24 103.156.121.0/24 maxlen: 24 103.157.188.0/23 maxlen: 24 103.159.104.0/23 maxlen: 24 103.160.25.0/24 maxlen: 24 103.164.140.0/24 maxlen: 24 103.165.88.0/23 maxlen: 24 103.167.154.0/23 maxlen: 24 103.167.182.0/23 maxlen: 24 103.167.224.0/23 maxlen: 24 103.167.238.0/23 maxlen: 24 103.168.60.0/23 maxlen: 24 103.169.242.0/24 maxlen: 24 103.169.243.0/24 maxlen: 24 103.170.38.0/23 maxlen: 24 103.170.84.0/23 maxlen: 24 103.178.24.0/23 maxlen: 24 103.178.117.0/24 maxlen: 24 103.179.50.0/23 maxlen: 24 103.181.66.0/24 maxlen: 24 103.181.119.0/24 maxlen: 24 103.184.205.0/24 maxlen: 24 103.204.70.0/24 maxlen: 24 103.206.51.0/24 maxlen: 24 103.206.96.0/23 maxlen: 24 103.216.141.0/24 maxlen: 24 103.232.232.0/22 maxlen: 24 202.4.169.0/24 maxlen: 24 210.79.134.0/24 maxlen: 24 2001:df0:47c0::/48 maxlen: 48 2001:df1:1980::/48 maxlen: 48 2001:df1:d240::/48 maxlen: 48 2001:df1:ed40::/48 maxlen: 48 2001:df2:3ac0::/48 maxlen: 48 2001:df2:3f40::/48 maxlen: 48 2001:df3:1340::/48 maxlen: 48 2400:d660::/32 maxlen: 32 2401:bba0::/32 maxlen: 32 2405:e100:a::/48 maxlen: 48 2405:e100:b::/48 maxlen: 48 2405:e100:c::/48 maxlen: 48 2405:e100:d::/48 maxlen: 48 2405:e100:e::/48 maxlen: 48 2405:e100:f::/48 maxlen: 48 2405:e100:1d::/48 maxlen: 48 2405:e100:1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51642 (0xc9ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 6 10:44:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69340920-3b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:06:7b:1d:2f:7d:3b:29:e4:a7:f1:56:81:2e: 69:f2:90:51:aa:14:dc:13:86:e0:f8:1e:52:4b:5c: b3:4d:0d:a7:2b:9d:dd:6c:08:d4:a3:46:08:21:e9: 69:ce:08:d2:1d:92:6c:62:4e:57:73:04:be:24:0f: 99:06:03:f0:e0:3d:8d:4e:11:d5:75:5c:3d:01:2d: f1:dc:73:4a:61:64:41:22:2b:ed:a2:b5:7f:6d:ff: f0:41:a5:8e:90:68:d8:2d:00:71:59:6d:9f:36:75: 31:51:c2:c7:11:0d:39:98:ed:48:5a:f8:6f:40:e1: 65:55:26:61:96:7a:52:0e:76:6e:03:8d:b5:27:ce: 86:14:b7:c7:24:69:3c:59:bb:bb:11:fc:d6:29:ba: aa:e3:9b:92:59:7b:a9:73:cf:f1:55:b3:3d:71:58: e9:97:5c:17:4a:08:cc:73:71:6c:10:f8:24:ba:e2: 31:68:01:4a:29:f4:0a:a2:83:c3:28:a9:49:a6:c1: eb:e9:4c:a3:a8:33:ea:ed:0d:97:7a:f9:ad:0c:b8: 0a:1d:8b:06:0a:72:79:bd:04:30:11:72:31:cd:06: bd:79:6a:d7:cf:e7:88:83:b5:47:04:9f:fb:cc:66: ab:8c:b4:c6:75:6f:95:5f:d3:86:13:e4:0d:a9:32: 47:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A8:2D:A8:FE:0E:C6:CB:7E:11:2C:32:CA:A0:D7:DA:20:E1:3A:1E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9601C2BCC51311F0A146A487C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.123.240.0/23 43.225.248.0/22 43.228.164.0/23 103.37.98.0/23 103.40.200.0/22 103.54.27.0/24 103.68.21.0/24 103.68.140.0/23 103.69.239.0/24 103.72.196.0/24 103.91.72.0/21 103.92.107.0/24 103.93.39.0/24 103.100.4.0/24 103.101.112.0/22 103.113.110.0/23 103.120.108.0/24 103.120.152.0/23 103.124.174.0/24 103.138.9.0/24 103.139.143.0/24 103.154.8.0/23 103.154.56.0/23 103.155.237.0/24 103.156.121.0/24 103.157.188.0/23 103.159.104.0/23 103.160.25.0/24 103.164.140.0/24 103.165.88.0/23 103.167.154.0/23 103.167.182.0/23 103.167.224.0/23 103.167.238.0/23 103.168.60.0/23 103.169.242.0/23 103.170.38.0/23 103.170.84.0/23 103.178.24.0/23 103.178.117.0/24 103.179.50.0/23 103.181.66.0/24 103.181.119.0/24 103.184.205.0/24 103.204.70.0/24 103.206.51.0/24 103.206.96.0/23 103.216.141.0/24 103.232.232.0/22 202.4.169.0/24 210.79.134.0/24 IPv6: 2001:df0:47c0::/48 2001:df1:1980::/48 2001:df1:d240::/48 2001:df1:ed40::/48 2001:df2:3ac0::/48 2001:df2:3f40::/48 2001:df3:1340::/48 2400:d660::/32 2401:bba0::/32 2405:e100:a::-2405:e100:f:ffff:ffff:ffff:ffff:ffff 2405:e100:1d::-2405:e100:1e:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 5c:b3:a4:8e:62:35:56:08:bd:5c:4b:87:f6:08:63:80:a2:82: e4:e1:24:6e:a1:98:17:bf:23:d2:77:7f:11:f2:cc:58:d5:51: ed:74:48:00:9f:7d:20:cf:98:ce:69:56:c6:c6:65:28:c1:9e: 53:b2:f6:33:69:f4:91:b5:a5:26:4b:84:0e:bc:02:dd:2d:d5: d8:a6:23:ef:35:fc:e0:ef:b2:9a:dc:bb:1c:54:05:a8:1f:d1: 19:65:29:9c:4f:55:82:f4:9c:ca:d4:11:9b:16:e4:25:be:03: fa:44:0f:83:2e:7a:c2:8c:d6:7d:13:0a:88:16:e5:3c:4a:34: 86:b9:7c:83:cf:16:51:0b:09:5e:41:51:a1:f5:24:eb:aa:95: 07:89:6b:a2:26:d1:5c:cd:63:97:a3:04:5f:7e:88:5d:a1:47: 1e:7b:19:88:c8:36:10:40:2e:40:8d:cc:2f:cb:d2:97:bf:34: b7:bf:9b:42:5d:6d:70:f1:bc:6a:30:6a:38:02:a2:13:a3:d6: 89:87:e0:94:7a:80:56:76:41:46:07:fc:a6:07:aa:25:c7:77: 1a:8e:99:0d:a6:40:48:7d:9b:82:da:52:fc:37:20:b3:19:01: 5b:42:62:d5:d7:49:f4:22:c4:1b:75:ac:dd:65:c3:09:19:9f: 67:c8:b4:b0 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIDAMm6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTIwNjEwNDQ0OFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjkzNDA5MjAtM2IyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANEGex0vfTsp5KfxVoEuafKQUaoU3BOG4PgeUktcs00Npyud3WwI1KNGCCHp ac4I0h2SbGJOV3MEviQPmQYD8OA9jU4R1XVcPQEt8dxzSmFkQSIr7aK1f23/8EGl jpBo2C0AcVltnzZ1MVHCxxENOZjtSFr4b0DhZVUmYZZ6Ug52bgONtSfOhhS3xyRp PFm7uxH81im6quObkll7qXPP8VWzPXFY6ZdcF0oIzHNxbBD4JLriMWgBSin0CqKD wyipSabB6+lMo6gz6u0Nl3r5rQy4Ch2LBgpyeb0EMBFyMc0GvXlq18/niIO1RwSf +8xmq4y0xnVvlV/ThhPkDakyR08CAwEAAaOCBEgwggREMB0GA1UdDgQWBBS8qC2o /g7Gy34RLDLKoNfaIOE6HjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk2MDFDMkJD QzUxMzExRjBBMTQ2QTQ4N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIB0AYIKwYBBQUHAQcB Af8EggG/MIIBuzCCAToEAgABMIIBMgMEARt78AMEAivh+AMEASvkpAMEAWclYgME AmcoyAMEAGc2GwMEAGdEFQMEAWdEjAMEAGdF7wMEAGdIxAMEA2dbSAMEAGdcawME AGddJwMEAGdkBAMEAmdlcAMEAWdxbgMEAGd4bAMEAWd4mAMEAGd8rgMEAGeKCQME AGeLjwMEAWeaCAMEAWeaOAMEAGeb7QMEAGeceQMEAWedvAMEAWefaAMEAGegGQME AGekjAMEAWelWAMEAWenmgMEAWentgMEAWen4AMEAWen7gMEAWeoPAMEAWep8gME AWeqJgMEAWeqVAMEAWeyGAMEAGeydQMEAWezMgMEAGe1QgMEAGe1dwMEAGe4zQME AGfMRgMEAGfOMwMEAWfOYAMEAGfYjQMEAmfo6AMEAMoEqQMEANJPhjB7BAIAAjB1 AwcAIAEN8EfAAwcAIAEN8RmAAwcAIAEN8dJAAwcAIAEN8e1AAwcAIAEN8jrAAwcA IAEN8j9AAwcAIAEN8xNAAwUAJADWYAMFACQBu6AwEgMHASQF4QAACgMHBCQF4QAA ADASAwcAJAXhAAAdAwcAJAXhAAAeMA0GCSqGSIb3DQEBCwUAA4IBAQBcs6SOYjVW CL1cS4f2CGOAooLk4SRuoZgXvyPSd38R8sxY1VHtdEgAn30gz5jOaVbGxmUowZ5T svYzafSRtaUmS4QOvALdLdXYpiPvNfzg77Ka3LscVAWoH9EZZSmcT1WC9JzK1BGb FuQlvgP6RA+DLnrCjNZ9EwqIFuU8SjSGuXyDzxZRCwleQVGh9STrqpUHiWuiJtFc zWOXowRffohdoUceexmIyDYQQC5Ajcwvy9KXvzS3v5tCXW1w8bxqMGo4AqITo9aJ h+CUeoBWdkFGB/ymB6olx3cajpkNpkBIfZuC2lL8NyCzGQFbQmLV10n0IsQbdazd ZcMJGZ9nyLSw -----END CERTIFICATE-----Generated at Sun Dec 7 00:26:22 2025 by rpki-client