This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B45D74E0A10A11F08DFFFE2FC4F9AE02.roa File: B45D74E0A10A11F08DFFFE2FC4F9AE02.roa (raw, json) Hash identifier: ikDyS2wWB6kfvMdRpE4xBw1I60ChUtYfoxuYFvW2bRE= Subject key identifier: 24:53:D5:F3:7B:75:BE:F1:F8:55:4F:84:48:86:F5:C8:BD:D3:CE:33 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: CD60 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B45D74E0A10A11F08DFFFE2FC4F9AE02.roa Signing time: Tue 13 Jan 2026 09:23:54 +0000 ROA not before: Tue 13 Jan 2026 09:23:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133001 IP address blocks: 43.225.160.0/22 maxlen: 24 43.251.216.0/22 maxlen: 24 45.117.220.0/22 maxlen: 24 45.119.44.0/22 maxlen: 22 45.119.44.0/24 maxlen: 24 45.119.45.0/24 maxlen: 24 45.119.46.0/24 maxlen: 24 45.119.47.0/24 maxlen: 24 103.38.36.0/22 maxlen: 24 103.42.166.0/23 maxlen: 24 103.51.132.0/24 maxlen: 24 103.51.133.0/24 maxlen: 24 103.51.134.0/24 maxlen: 24 103.51.135.0/24 maxlen: 24 103.54.76.0/24 maxlen: 24 103.54.77.0/24 maxlen: 24 103.56.227.0/24 maxlen: 24 103.110.102.0/24 maxlen: 24 103.114.0.0/22 maxlen: 23 103.114.2.0/23 maxlen: 24 103.116.147.0/24 maxlen: 24 103.116.238.0/24 maxlen: 24 103.116.239.0/24 maxlen: 24 103.140.26.0/24 maxlen: 24 103.140.27.0/24 maxlen: 24 103.156.98.0/24 maxlen: 24 103.156.99.0/24 maxlen: 24 103.176.6.0/23 maxlen: 24 103.176.211.0/24 maxlen: 24 103.196.76.0/22 maxlen: 24 103.201.148.0/22 maxlen: 24 111.125.225.0/24 maxlen: 24 183.87.251.0/24 maxlen: 24 183.87.252.0/22 maxlen: 24 202.94.160.0/22 maxlen: 24 2401:b240::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52576 (0xcd60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 13 09:23:54 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69660f2a-be5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3c:42:4a:2d:3e:3b:cb:59:65:83:1f:98:f5: a6:21:18:79:4e:02:d4:c6:0c:ac:25:d0:5d:2c:a0: c1:a9:fe:00:0a:3b:bb:4c:65:27:3a:17:0e:96:56: f4:02:c9:ed:60:7b:a0:8b:58:a1:c4:51:37:70:0d: 6c:9d:29:ad:3b:a7:dc:20:5f:4a:f6:e2:d9:3c:df: 24:2a:34:9a:c0:33:25:a1:3e:f2:dd:87:50:87:aa: 90:32:64:53:9c:8c:ef:05:60:9e:3b:a8:cc:02:bc: a9:dd:be:da:b6:9a:17:47:b7:65:fb:96:04:32:31: f6:28:7c:92:8c:00:6b:8d:17:6d:36:0b:8b:5b:e4: 0a:13:21:b2:68:83:e4:b8:8f:e3:c1:de:50:38:5c: 66:73:48:1e:4d:ff:a7:dc:67:66:26:d6:9a:54:d1: 0c:f0:2d:f3:02:f6:8d:8c:94:84:25:6b:9c:91:a8: de:c0:52:3d:26:a9:81:7b:62:c6:6c:bc:a0:3a:32: 64:75:79:20:65:2b:ba:0e:e0:e5:39:f0:90:d1:45: b4:83:17:68:58:72:91:a1:e4:81:39:d1:a5:a8:da: 49:ae:18:0d:df:8a:57:63:75:38:52:13:46:8d:72: f2:aa:0e:fe:2f:4c:bf:d1:af:7e:73:18:7f:ba:0b: 2d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:53:D5:F3:7B:75:BE:F1:F8:55:4F:84:48:86:F5:C8:BD:D3:CE:33 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B45D74E0A10A11F08DFFFE2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.160.0/22 43.251.216.0/22 45.117.220.0/22 45.119.44.0/22 103.38.36.0/22 103.42.166.0/23 103.51.132.0/22 103.54.76.0/23 103.56.227.0/24 103.110.102.0/24 103.114.0.0/22 103.116.147.0/24 103.116.238.0/23 103.140.26.0/23 103.156.98.0/23 103.176.6.0/23 103.176.211.0/24 103.196.76.0/22 103.201.148.0/22 111.125.225.0/24 183.87.251.0-183.87.255.255 202.94.160.0/22 IPv6: 2401:b240::/32 Signature Algorithm: sha256WithRSAEncryption 35:71:c8:51:2c:07:29:d0:f5:63:23:81:a7:d9:c5:d8:43:0e: 35:c6:aa:d4:a1:cb:86:f0:da:12:70:c0:65:a4:cc:4f:09:d5: 9c:57:b5:87:20:c8:8b:99:c2:d9:42:d8:f2:4b:94:2a:d6:0d: fa:d2:ba:ec:af:bf:4c:59:47:25:e9:5d:df:d3:69:88:16:d7: f9:69:18:77:93:fb:01:5d:d7:e5:26:03:09:b3:b0:f0:ca:36: ff:33:19:aa:a5:ab:6a:15:e6:35:98:cd:7b:27:e3:74:c7:8e: d0:9f:55:d3:1e:67:1a:7f:77:1f:2d:17:7b:95:f6:66:53:fe: f4:ca:d0:7e:be:f8:ad:23:63:1e:4f:90:18:b2:84:b2:37:35: a4:00:8b:56:76:c1:7e:44:c0:e5:44:e8:49:dc:06:a8:ab:68: 77:38:6f:26:81:10:b5:bb:ea:eb:0c:39:82:cc:f1:4b:17:55: 0e:c6:47:23:8f:db:d1:71:69:43:3a:af:7b:82:7b:39:10:ea: 53:47:46:e3:c6:32:97:78:76:e9:35:d5:33:17:98:00:2c:dd: 39:8f:68:9f:a1:4b:26:12:9c:79:1e:e8:a6:fa:db:84:39:fb: 7d:35:07:32:b6:ef:be:8b:1c:84:87:4a:b2:50:9b:60:2b:7a: 2c:1f:d6:30 -----BEGIN CERTIFICATE----- MIIGCzCCBPOgAwIBAgIDAM1gMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDExMzA5MjM1NFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAwwNNjk2NjBmMmEtYmU1ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANM8QkotPjvLWWWDH5j1piEYeU4C1MYMrCXQXSygwan+AAo7u0xlJzoXDpZW 9ALJ7WB7oItYocRRN3ANbJ0prTun3CBfSvbi2TzfJCo0msAzJaE+8t2HUIeqkDJk U5yM7wVgnjuozAK8qd2+2raaF0e3ZfuWBDIx9ih8kowAa40XbTYLi1vkChMhsmiD 5LiP48HeUDhcZnNIHk3/p9xnZibWmlTRDPAt8wL2jYyUhCVrnJGo3sBSPSapgXti xmy8oDoyZHV5IGUrug7g5TnwkNFFtIMXaFhykaHkgTnRpajaSa4YDd+KV2N1OFIT Ro1y8qoO/i9Mv9GvfnMYf7oLLY8CAwEAAaOCAy4wggMqMB0GA1UdDgQWBBQkU9Xz e3W+8fhVT4RIhvXIvdPOMzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0I0NUQ3NEUw QTEwQTExRjA4REZGRkUyRkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIG3BggrBgEFBQcBBwEB /wSBpzCBpDCBkgQCAAEwgYsDBAIr4aADBAIr+9gDBAItddwDBAItdywDBAJnJiQD BAFnKqYDBAJnM4QDBAFnNkwDBABnOOMDBABnbmYDBAJncgADBABndJMDBAFndO4D BAFnjBoDBAFnnGIDBAFnsAYDBABnsNMDBAJnxEwDBAJnyZQDBABvfeEwCwMEALdX +wMDA7dQAwQCyl6gMA0EAgACMAcDBQAkAbJAMA0GCSqGSIb3DQEBCwUAA4IBAQA1 cchRLAcp0PVjI4Gn2cXYQw41xqrUocuG8NoScMBlpMxPCdWcV7WHIMiLmcLZQtjy S5Qq1g360rrsr79MWUcl6V3f02mIFtf5aRh3k/sBXdflJgMJs7Dwyjb/Mxmqpatq FeY1mM17J+N0x47Qn1XTHmcaf3cfLRd7lfZmU/70ytB+vvitI2MeT5AYsoSyNzWk AItWdsF+RMDlROhJ3Aaoq2h3OG8mgRC1u+rrDDmCzPFLF1UOxkcjj9vRcWlDOq97 gns5EOpTR0bjxjKXeHbpNdUzF5gALN05j2ifoUsmEpx5Huim+tuEOft9NQcytu++ ixyEh0qyUJtgK3osH9Yw -----END CERTIFICATE-----Generated at Sun Jan 25 06:12:13 2026 by rpki-client