This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/18B90242CD8011EF8728D139C4F9AE02.roa File: 18B90242CD8011EF8728D139C4F9AE02.roa (raw, json) Hash identifier: aBWrylStgB8UpPGQsd4Khtzv8Z8tqWdm+knkAVWtLuU= Subject key identifier: 21:16:C5:00:51:AA:3A:BA:0B:C7:2A:30:4E:FC:68:68:C5:97:19:9A Certificate issuer: /CN=A919D222/serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577 Certificate serial: A9 Authority key identifier: 82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/18B90242CD8011EF8728D139C4F9AE02.roa Signing time: Tue 25 Nov 2025 04:22:28 +0000 ROA not before: Tue 25 Nov 2025 04:22:28 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 45477 IP address blocks: 113.29.224.0/24 maxlen: 24 113.29.225.0/24 maxlen: 24 113.29.227.0/24 maxlen: 24 113.29.234.0/24 maxlen: 24 113.29.235.0/24 maxlen: 24 113.29.236.0/24 maxlen: 24 113.29.237.0/24 maxlen: 24 113.29.238.0/24 maxlen: 24 113.29.239.0/24 maxlen: 24 2406:fc00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 04:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D222, serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577 Validity Not Before: Nov 25 04:22:28 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69252f04-3eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:86:05:49:a0:45:68:03:1b:93:37:2d:10:ed: 45:49:e4:bb:66:b1:6b:71:31:d8:4b:2b:44:ff:00: f7:12:40:82:1f:7c:1e:f5:00:15:9b:e1:1d:9a:f3: b1:e6:34:9c:5a:21:bd:d7:38:55:d0:8c:8c:42:5b: 4f:b4:da:4f:98:97:43:da:31:79:40:a8:bc:61:60: b2:74:8c:46:1d:71:92:6d:af:59:88:5a:61:13:60: 74:8e:c3:4b:f7:47:5c:dd:bb:79:db:86:ba:9b:d6: b0:68:6a:8d:27:cf:3b:51:90:79:4e:9a:12:d2:12: 62:c7:2f:b1:9b:da:94:0c:19:ea:26:7a:50:88:e7: e6:fc:d0:12:77:d3:0f:05:0f:a1:13:d4:4e:8e:c9: 73:f2:a5:13:d8:10:22:55:4d:f0:0c:59:0e:31:3f: d2:00:dc:c8:fa:5e:58:82:96:4b:be:9a:0e:21:77: 67:49:1e:ab:3f:e9:94:26:85:6c:0d:bc:e9:60:c3: e3:52:6c:8c:79:7e:9d:51:d9:89:31:e7:d9:4e:a1: db:8d:45:ab:e9:7b:16:fd:f6:b7:02:19:a3:85:cf: 72:46:2a:e3:15:b3:f4:1f:59:fa:80:f2:67:b0:8f: 16:f1:33:87:88:33:0e:d9:d8:5e:2b:44:b5:a6:33: dd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:16:C5:00:51:AA:3A:BA:0B:C7:2A:30:4E:FC:68:68:C5:97:19:9A X509v3 Authority Key Identifier: keyid:82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/18B90242CD8011EF8728D139C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.29.224.0/23 113.29.227.0/24 113.29.234.0-113.29.239.255 IPv6: 2406:fc00::/32 Signature Algorithm: sha256WithRSAEncryption 9d:ab:38:51:d9:bc:f4:6c:aa:2e:f5:f2:17:d2:a1:03:a8:90: 9a:3e:6a:03:bb:6a:68:42:a1:6a:1d:cd:a1:22:a2:dc:b9:0a: 3a:ef:8c:ab:63:0f:73:bc:97:84:5f:00:cc:c0:d1:14:7b:7c: 9e:d2:aa:a6:86:f5:27:cb:04:17:26:06:07:c1:af:92:a6:be: 2c:86:35:7c:1f:81:91:c6:aa:74:ca:6a:aa:12:7a:3b:60:62: 48:5d:71:0f:13:9a:70:4b:99:e3:12:78:c1:87:29:97:bc:4a: 94:1e:93:7d:62:6a:b1:e6:fe:ba:fb:0e:ed:35:25:ae:dd:2b: 7c:45:9a:32:d6:f7:b0:25:d6:38:fc:1b:0d:c5:85:8e:0b:10: eb:16:37:2b:ca:68:03:36:da:a9:94:8d:79:f8:ab:30:4c:44: ef:dc:2e:6a:60:0d:6a:c0:08:10:7d:94:f7:f3:46:ba:13:18: de:11:dd:dd:00:c8:7c:40:8a:43:ec:8b:9a:89:83:02:4f:f8: 9c:aa:55:7d:55:ba:d5:3b:10:52:5a:b3:4e:8a:08:f8:9d:ac: bd:05:9b:ac:42:c4:a4:9e:80:2d:58:ef:28:8c:2f:40:c2:e3: 0d:aa:23:0e:a4:56:77:42:6b:62:8d:1f:73:be:7d:51:89:24: 59:5f:b7:05 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQyMjIxMTAvBgNVBAUTKDgyMDVFOTc5NkVDNjlBMEM3M0RDM0I1QjNDRTEyQzQ4 MTkyQjQ1NzcwHhcNMjUxMTI1MDQyMjI4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI1MmYwNC0zZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4YFSaBFaAMbkzctEO1FSeS7ZrFrcTHYSytE/wD3EkCCH3we9QAVm+EdmvOx 5jScWiG91zhV0IyMQltPtNpPmJdD2jF5QKi8YWCydIxGHXGSba9ZiFphE2B0jsNL 90dc3bt524a6m9awaGqNJ887UZB5TpoS0hJixy+xm9qUDBnqJnpQiOfm/NASd9MP BQ+hE9ROjslz8qUT2BAiVU3wDFkOMT/SANzI+l5YgpZLvpoOIXdnSR6rP+mUJoVs DbzpYMPjUmyMeX6dUdmJMefZTqHbjUWr6XsW/fa3Ahmjhc9yRirjFbP0H1n6gPJn sI8W8TOHiDMO2dheK0S1pjPdHwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFCEWxQBR qjq6C8cqME78aGjFlxmaMB8GA1UdIwQYMBaAFIIF6XluxpoMc9w7WzzhLEgZK0V3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDIyMi84NzY0NDg5Q0NE N0YxMUVGQTU4NDg4MzhDNEY5QUUwMi9nZ1hwZVc3R21neHozRHRiUE9Fc1NCa3JS WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnWHBlVzdHbWd4ejNEdGJQT0VzU0JrclJYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQyMjIvODc2NDQ4OUNDRDdGMTFFRkE1ODQ4ODM4QzRGOUFFMDIvMThCOTAyNDJD RDgwMTFFRjg3MjhEMTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMCAEAgABMBoDBAFxHeADBABxHeMwDAMEAXEd6gMEBHEd4DANBAIAAjAHAwUA JAb8ADANBgkqhkiG9w0BAQsFAAOCAQEAnas4Udm89GyqLvXyF9KhA6iQmj5qA7tq aEKhah3NoSKi3LkKOu+Mq2MPc7yXhF8AzMDRFHt8ntKqpob1J8sEFyYGB8Gvkqa+ LIY1fB+BkcaqdMpqqhJ6O2BiSF1xDxOacEuZ4xJ4wYcpl7xKlB6TfWJqseb+uvsO 7TUlrt0rfEWaMtb3sCXWOPwbDcWFjgsQ6xY3K8poAzbaqZSNefirMExE79wuamAN asAIEH2U9/NGuhMY3hHd3QDIfECKQ+yLmomDAk/4nKpVfVW61TsQUlqzTooI+J2s vQWbrELEpJ6ALVjvKIwvQMLjDaojDqRWd0JrYo0fc759UYkkWV+3BQ== -----END CERTIFICATE-----Generated at Sun Dec 7 13:30:17 2025 by rpki-client