This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A862BBB6F5CC11F0A2F8963E466F56BC.roa File: A862BBB6F5CC11F0A2F8963E466F56BC.roa (raw, json) Hash identifier: II4bG1gGLFGIJ3TJiiqSH01p16xb7kQbqdsUf87khC8= Subject key identifier: 5F:8D:BE:58:BB:9F:7C:81:70:39:F6:08:0A:99:38:E3:79:05:F6:50 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: CF55 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A862BBB6F5CC11F0A2F8963E466F56BC.roa Signing time: Thu 22 Jan 2026 10:34:54 +0000 ROA not before: Thu 22 Jan 2026 10:34:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137085 IP address blocks: 27.123.240.0/23 maxlen: 24 43.225.248.0/22 maxlen: 24 43.228.164.0/23 maxlen: 24 43.230.148.0/22 maxlen: 24 43.248.152.0/22 maxlen: 24 43.248.240.0/22 maxlen: 24 43.251.92.0/22 maxlen: 23 43.251.93.0/24 maxlen: 24 43.251.94.0/24 maxlen: 24 43.251.95.0/24 maxlen: 24 45.120.160.0/22 maxlen: 24 45.248.0.0/22 maxlen: 24 45.248.172.0/22 maxlen: 24 103.37.98.0/23 maxlen: 24 103.40.200.0/22 maxlen: 24 103.43.32.0/22 maxlen: 24 103.54.27.0/24 maxlen: 24 103.55.60.0/22 maxlen: 24 103.68.21.0/24 maxlen: 24 103.68.140.0/23 maxlen: 24 103.69.239.0/24 maxlen: 24 103.72.196.0/24 maxlen: 24 103.91.72.0/24 maxlen: 24 103.91.73.0/24 maxlen: 24 103.91.74.0/24 maxlen: 24 103.91.75.0/24 maxlen: 24 103.91.76.0/22 maxlen: 24 103.92.107.0/24 maxlen: 24 103.93.39.0/24 maxlen: 24 103.100.4.0/24 maxlen: 24 103.101.112.0/22 maxlen: 24 103.106.28.0/22 maxlen: 24 103.113.110.0/23 maxlen: 24 103.120.108.0/24 maxlen: 24 103.120.152.0/24 maxlen: 24 103.120.153.0/24 maxlen: 24 103.124.174.0/24 maxlen: 24 103.138.9.0/24 maxlen: 24 103.139.143.0/24 maxlen: 24 103.152.158.0/24 maxlen: 24 103.154.8.0/23 maxlen: 24 103.154.56.0/23 maxlen: 24 103.155.237.0/24 maxlen: 24 103.156.121.0/24 maxlen: 24 103.157.188.0/23 maxlen: 24 103.159.104.0/23 maxlen: 24 103.160.25.0/24 maxlen: 24 103.164.140.0/24 maxlen: 24 103.165.88.0/23 maxlen: 24 103.167.154.0/23 maxlen: 24 103.167.182.0/23 maxlen: 24 103.167.224.0/23 maxlen: 24 103.167.238.0/23 maxlen: 24 103.168.60.0/23 maxlen: 24 103.169.242.0/24 maxlen: 24 103.169.243.0/24 maxlen: 24 103.170.38.0/23 maxlen: 24 103.170.52.0/23 maxlen: 24 103.170.84.0/23 maxlen: 24 103.178.24.0/23 maxlen: 24 103.178.117.0/24 maxlen: 24 103.179.50.0/23 maxlen: 24 103.181.66.0/24 maxlen: 24 103.181.119.0/24 maxlen: 24 103.184.205.0/24 maxlen: 24 103.198.172.0/22 maxlen: 24 103.204.70.0/24 maxlen: 24 103.206.51.0/24 maxlen: 24 103.206.96.0/23 maxlen: 24 103.216.140.0/22 maxlen: 24 103.217.132.0/22 maxlen: 24 103.224.144.0/22 maxlen: 24 103.225.188.0/22 maxlen: 24 103.232.232.0/22 maxlen: 24 103.248.92.0/22 maxlen: 24 103.248.172.0/22 maxlen: 24 157.119.80.0/22 maxlen: 24 202.4.169.0/24 maxlen: 24 210.79.134.0/24 maxlen: 24 2001:df0:47c0::/48 maxlen: 48 2001:df1:1980::/48 maxlen: 48 2001:df1:ed40::/48 maxlen: 48 2001:df2:3ac0::/48 maxlen: 48 2001:df2:3f40::/48 maxlen: 48 2001:df3:1340::/48 maxlen: 48 2001:df3:6ec0::/48 maxlen: 48 2400:d660::/32 maxlen: 32 2401:bba0::/32 maxlen: 32 2405:e100:a::/48 maxlen: 48 2405:e100:b::/48 maxlen: 48 2405:e100:c::/48 maxlen: 48 2405:e100:d::/48 maxlen: 48 2405:e100:e::/48 maxlen: 48 2405:e100:f::/48 maxlen: 48 2405:e100:1d::/48 maxlen: 48 2405:e100:1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53077 (0xcf55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 22 10:34:54 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6971fd4e-0b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6e:a6:84:e6:88:81:ee:89:85:ef:50:51:5e: d7:0e:ed:48:84:a4:07:7c:3f:97:77:f9:87:c5:25: 6e:6f:57:87:84:2b:7e:59:ee:2a:97:11:13:95:38: 11:48:96:39:99:2f:08:8a:ea:c1:a2:8f:aa:8c:d1: a8:0e:33:49:ad:eb:0f:b5:17:84:82:8c:75:1f:a9: cb:28:e6:d2:4d:92:2a:85:98:37:af:76:5b:70:2b: 7f:2c:67:b9:3b:9c:0f:f7:aa:77:7f:0b:51:1d:f0: b0:14:40:dc:ad:4f:6b:d8:3b:5a:3a:7f:15:18:a2: 99:27:2b:80:2d:52:a7:a3:7b:24:a4:e3:69:f1:2c: 34:f4:d0:2a:0c:0a:fa:7d:85:e1:7d:ed:4f:d8:68: a6:5b:54:b4:c8:07:a7:8b:ec:e7:eb:5e:33:2b:b7: 73:87:ca:55:36:17:ef:62:09:df:52:6f:73:39:45: eb:ff:6b:d0:38:41:ec:1a:e9:32:51:df:1f:4c:33: 07:92:6a:77:ac:e0:4a:3f:f6:6a:b9:76:f6:64:10: 5a:25:55:59:6b:86:eb:77:52:ab:95:b5:de:ed:51: be:a0:50:3c:b1:c2:33:cf:22:61:13:18:55:cc:9c: 16:d1:83:78:ab:c7:f8:f0:43:20:32:a3:f0:df:29: 14:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8D:BE:58:BB:9F:7C:81:70:39:F6:08:0A:99:38:E3:79:05:F6:50 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A862BBB6F5CC11F0A2F8963E466F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.123.240.0/23 43.225.248.0/22 43.228.164.0/23 43.230.148.0/22 43.248.152.0/22 43.248.240.0/22 43.251.92.0/22 45.120.160.0/22 45.248.0.0/22 45.248.172.0/22 103.37.98.0/23 103.40.200.0/22 103.43.32.0/22 103.54.27.0/24 103.55.60.0/22 103.68.21.0/24 103.68.140.0/23 103.69.239.0/24 103.72.196.0/24 103.91.72.0/21 103.92.107.0/24 103.93.39.0/24 103.100.4.0/24 103.101.112.0/22 103.106.28.0/22 103.113.110.0/23 103.120.108.0/24 103.120.152.0/23 103.124.174.0/24 103.138.9.0/24 103.139.143.0/24 103.152.158.0/24 103.154.8.0/23 103.154.56.0/23 103.155.237.0/24 103.156.121.0/24 103.157.188.0/23 103.159.104.0/23 103.160.25.0/24 103.164.140.0/24 103.165.88.0/23 103.167.154.0/23 103.167.182.0/23 103.167.224.0/23 103.167.238.0/23 103.168.60.0/23 103.169.242.0/23 103.170.38.0/23 103.170.52.0/23 103.170.84.0/23 103.178.24.0/23 103.178.117.0/24 103.179.50.0/23 103.181.66.0/24 103.181.119.0/24 103.184.205.0/24 103.198.172.0/22 103.204.70.0/24 103.206.51.0/24 103.206.96.0/23 103.216.140.0/22 103.217.132.0/22 103.224.144.0/22 103.225.188.0/22 103.232.232.0/22 103.248.92.0/22 103.248.172.0/22 157.119.80.0/22 202.4.169.0/24 210.79.134.0/24 IPv6: 2001:df0:47c0::/48 2001:df1:1980::/48 2001:df1:ed40::/48 2001:df2:3ac0::/48 2001:df2:3f40::/48 2001:df3:1340::/48 2001:df3:6ec0::/48 2400:d660::/32 2401:bba0::/32 2405:e100:a::-2405:e100:f:ffff:ffff:ffff:ffff:ffff 2405:e100:1d::-2405:e100:1e:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 94:c7:8f:a6:68:13:ca:9e:39:2e:65:cf:2c:c9:19:39:24:84: bd:af:96:5e:2f:96:98:2a:37:11:bb:ad:d6:b4:cd:24:05:88: df:5a:69:6f:61:ee:b7:a4:a8:fa:ef:cf:da:f3:8e:b6:d7:4f: 3c:2f:6a:48:e0:74:a7:6f:6b:da:9e:e9:ce:40:fb:1e:bb:48: ab:7d:72:0a:46:e9:eb:57:df:3e:22:75:67:d7:72:0a:f5:17: 44:cb:72:c2:61:2e:2b:4e:1b:f9:37:3c:25:c6:09:63:2f:ce: 62:e5:64:ca:ae:1c:4e:c8:b7:e3:8d:ff:02:3b:f2:bf:84:e4: 91:33:93:7e:a2:07:2f:d5:72:89:29:7f:73:b0:7e:13:61:43: 31:21:09:4b:04:1e:39:e9:b5:d1:ad:22:b0:ad:cd:13:f3:9f: 91:c8:5e:f0:a2:fd:42:b8:6a:68:d4:bc:6a:19:a7:9c:c0:8d: 52:1d:94:53:c7:f2:2a:e3:70:bc:49:f9:7d:ac:5b:b0:29:51: cc:ac:a2:20:e0:b3:c9:8d:36:ca:3e:69:e5:dd:10:9c:74:77: 3d:ff:9e:2b:ed:65:86:bd:c1:90:ed:78:ff:8f:b0:3c:a0:b1: 2c:1b:e6:ca:92:ab:33:bc:99:50:b4:f5:29:65:16:6b:db:af: 60:2c:bc:7a -----BEGIN CERTIFICATE----- MIIHlzCCBn+gAwIBAgIDAM9VMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDEyMjEwMzQ1NFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAwwNNjk3MWZkNGUtMGI0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKRupoTmiIHuiYXvUFFe1w7tSISkB3w/l3f5h8Ulbm9Xh4QrflnuKpcRE5U4 EUiWOZkvCIrqwaKPqozRqA4zSa3rD7UXhIKMdR+pyyjm0k2SKoWYN692W3Arfyxn uTucD/eqd38LUR3wsBRA3K1Pa9g7Wjp/FRiimScrgC1Sp6N7JKTjafEsNPTQKgwK +n2F4X3tT9hopltUtMgHp4vs5+teMyu3c4fKVTYX72IJ31JvczlF6/9r0DhB7Brp MlHfH0wzB5Jqd6zgSj/2arl29mQQWiVVWWuG63dSq5W13u1RvqBQPLHCM88iYRMY VcycFtGDeKvH+PBDIDKj8N8pFO0CAwEAAaOCBLowggS2MB0GA1UdDgQWBBRfjb5Y u598gXA59ggKmTjjeQX2UDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E4NjJCQkI2 RjVDQzExRjBBMkY4OTYzRTQ2NkY1NkJDLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIICQgYIKwYBBQUHAQcB Af8EggIxMIICLTCCAawEAgABMIIBpAMEARt78AMEAivh+AMEASvkpAMEAivmlAME Aiv4mAMEAiv48AMEAiv7XAMEAi14oAMEAi34AAMEAi34rAMEAWclYgMEAmcoyAME AmcrIAMEAGc2GwMEAmc3PAMEAGdEFQMEAWdEjAMEAGdF7wMEAGdIxAMEA2dbSAME AGdcawMEAGddJwMEAGdkBAMEAmdlcAMEAmdqHAMEAWdxbgMEAGd4bAMEAWd4mAME AGd8rgMEAGeKCQMEAGeLjwMEAGeYngMEAWeaCAMEAWeaOAMEAGeb7QMEAGeceQME AWedvAMEAWefaAMEAGegGQMEAGekjAMEAWelWAMEAWenmgMEAWentgMEAWen4AME AWen7gMEAWeoPAMEAWep8gMEAWeqJgMEAWeqNAMEAWeqVAMEAWeyGAMEAGeydQME AWezMgMEAGe1QgMEAGe1dwMEAGe4zQMEAmfGrAMEAGfMRgMEAGfOMwMEAWfOYAME AmfYjAMEAmfZhAMEAmfgkAMEAmfhvAMEAmfo6AMEAmf4XAMEAmf4rAMEAp13UAME AMoEqQMEANJPhjB7BAIAAjB1AwcAIAEN8EfAAwcAIAEN8RmAAwcAIAEN8e1AAwcA IAEN8jrAAwcAIAEN8j9AAwcAIAEN8xNAAwcAIAEN827AAwUAJADWYAMFACQBu6Aw EgMHASQF4QAACgMHBCQF4QAAADASAwcAJAXhAAAdAwcAJAXhAAAeMA0GCSqGSIb3 DQEBCwUAA4IBAQCUx4+maBPKnjkuZc8syRk5JIS9r5ZeL5aYKjcRu63WtM0kBYjf WmlvYe63pKj678/a84621088L2pI4HSnb2vanunOQPseu0irfXIKRunrV98+InVn 13IK9RdEy3LCYS4rThv5NzwlxgljL85i5WTKrhxOyLfjjf8CO/K/hOSRM5N+ogcv 1XKJKX9zsH4TYUMxIQlLBB456bXRrSKwrc0T85+RyF7wov1CuGpo1LxqGaecwI1S HZRTx/Iq43C8Sfl9rFuwKVHMrKIg4LPJjTbKPmnl3RCcdHc9/54r7WWGvcGQ7Xj/ j7A8oLEsG+bKkqszvJlQtPUpZRZr269gLLx6 -----END CERTIFICATE-----Generated at Sun Jan 25 04:23:50 2026 by rpki-client